last executing test programs: 5.891468927s ago: executing program 0 (id=249): mknod$loop(0x0, 0x6000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f0000000440)={[{@auto_da_alloc_val}, {@quota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r9 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r9, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2'}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYRESOCT=r3, @ANYRES16=r8, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 5.360998025s ago: executing program 1 (id=246): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) epoll_create1(0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2404c854) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = add_key(&(0x7f0000000400)='user\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000580)="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", 0xfa, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='contention_begin\x00', r5}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8002b000a00034006000dc3036010fab94dcf5c046109d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5", 0xd8}], 0x1}, 0x20000080) 4.859976752s ago: executing program 0 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = io_uring_setup(0x6ca9, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, &(0x7f0000000200)}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x8, 0x4) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r10, 0x0, 0x0) keyctl$setperm(0x5, r10, 0x1100108) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c099}, 0x0) splice(r5, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r6, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 4.859394022s ago: executing program 4 (id=250): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x9, 0x1, 0x30, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x10, 0x7800, 0x7, 0x8}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x7f, 0x3, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x3641cbda46fa34f0}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) pause() r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x1000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) close_range(r7, 0xffffffffffffffff, 0x0) 4.419764738s ago: executing program 1 (id=252): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r5, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = dup(r0) write$UHID_INPUT(r7, &(0x7f0000001040)={0xd, {"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", 0x1010}}, 0x1b7) munlockall() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r8) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') 4.30152765s ago: executing program 0 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) getsockopt(r2, 0x81, 0x7fff, &(0x7f00000002c0)=""/94, &(0x7f0000000340)=0x5e) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x4000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x800) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r7, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x8, &(0x7f0000000280)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) 3.773056507s ago: executing program 4 (id=256): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000080)={[{@i_version}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0xba}}, {@nombcache}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x88, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x6, 0x10000000, 0x0, 0xffe0000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x0) 2.14912922s ago: executing program 2 (id=259): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000003000000000000000900000085000000870000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xc, 0xb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r9, &(0x7f0000000280)='./file0\x00', 0x200) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) ppoll(&(0x7f0000000000)=[{r10, 0x205}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x2000000b}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'nr0\x00', 'bridge0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 1.934133383s ago: executing program 1 (id=260): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000240)="ab", 0x1}], 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000001108000440000000020900010073797a30000000000900020073797a32"], 0x78}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000180), 0xffffffffffffffff, 0x0, 0x4, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000640)={0xfffffffffffffe3a, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtaction={0x48, 0x30, 0xffff, 0x3, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x21, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000040)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000340)=@sr0, 0xee00, &(0x7f0000000380)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 1.310475062s ago: executing program 4 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r2, 0x0, r5, 0x0, 0x88000cc, 0x0) write$eventfd(r3, &(0x7f0000000240), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='sched_process_fork\x00', r6, 0x0, 0x7}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c00078008000640200000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x20040000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setrlimit(0x9, 0x0) io_setup(0x2004, &(0x7f0000000680)) syz_clone3(&(0x7f00000004c0)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.271669542s ago: executing program 0 (id=263): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$unix(r5, 0x0, 0x803e, 0x4840, 0x0, 0x0) nanosleep(0x0, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x601, 0x0, 0x1, 0x8b}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r8, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) flock(r2, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 1.181498294s ago: executing program 2 (id=264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = dup3(r5, r4, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r8, 0x3f420f00}, 0x10, 0x0, 0x2}, 0x2c004000) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000080)={0x1}) io_setup(0x5, &(0x7f0000000340)=0x0) r12 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x40001) io_submit(r11, 0x4, &(0x7f00000006c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x4, r7, &(0x7f0000000380)="9ce2c12a1569e251c4c97b6812e26bf25c43e5397183805d46b207eb306b0476428c9899332310a20444785b4e4ba97a1fbb5f838de77c46e25af2cabf62c28178bbcecfa931e3df2e61aa", 0x4b, 0x6, 0x0, 0x2, r10}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x937, r3, &(0x7f0000000440)="ad23bac9413fe5b8da95c0c8be8eff91b921c4f58e9ff6ce47d46621fda6", 0x1e, 0xffffffffffffffff, 0x0, 0x0, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x81, r12, &(0x7f00000005c0)="54babf58e9d568568822ff28212037ddcade156aeeeb5534083bb88f26c4f1a7b5084adbac8695f732d4b775e9284c768fd29c31322c9b41ac3237805fcb09e656f93598db0f1ee21df23a05b4a6f86204a7cb00b6cbf262b75b6fa5e2736f6ae31965bb9727224d4913b1a105784e467e0eef3cd8a32acba430a0d2f93e25fbd1ce953a40b8e602a22dfee3a6dbbd4bb0e14439e6c512cc08d16f821c03da1f7344fae0a41c02aa6a0be637dcd161e3fd7c413532fa16d8e0302ea21a2bb6093dfea5a19614", 0xc6, 0x9, 0x0, 0x1, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x7fff, r2, &(0x7f0000000a00)="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", 0x1000, 0xb, 0x0, 0x2, r6}]) 1.055138546s ago: executing program 2 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = io_uring_setup(0x6ca9, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1801000000001f00000000000000ea1f850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, &(0x7f0000000200)}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000300)=0x8, 0x4) close(r8) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r10, 0x0, 0x0) keyctl$setperm(0x5, r10, 0x1100108) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x27}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400c099}, 0x0) splice(r5, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r6, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) 1.054339836s ago: executing program 4 (id=266): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f0000000800)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r8, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x10000}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000009c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@data_err_ignore}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x584, &(0x7f0000001280)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sync() wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 1.053867186s ago: executing program 0 (id=267): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x9, 0x1, 0x30, @ipv4={'\x00', '\xff\xff', @remote}, @remote, 0x10, 0x7800, 0x7, 0x8}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000240)={0x1, 0x1, 0x7f, 0x3, @vifc_lcl_ifindex=r2, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x3641cbda46fa34f0}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) pause() r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x1000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80800) close_range(r7, 0xffffffffffffffff, 0x0) 1.052335766s ago: executing program 1 (id=268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) r4 = epoll_create1(0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$key(r6, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00ffffff800000000000000000000000000000000000000004000000000000080012000000020000000000020000000600000000000000090000000000000000000000000000000000000000000000ff01000000000000000000000000000105000600000000000a000002ffffffffff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) ioctl$TIOCL_SETSEL(r10, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x300, 0x0, 0x101}}) 958.911307ms ago: executing program 3 (id=269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a00), 0x460e00, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa0100000000000000020013"], 0x70}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000007136c89b00", @ANYRESOCT=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac1414bb0c0002800500010000000000240002801400018008000100ac1414bb08000200e00000010c000280050001000000000008000740000000022c000e80"], 0x90}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000340), 0x11000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r8) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d15fb592adc5336ea1c40a80f3dffae630000000", @ANYRES16=r9, @ANYBLOB="21002cbd7000ffdbdf25010000000c0009000201aaaaaaaaaaaa06000a00000000000500070000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4850}, 0x20000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c"], 0x184}}, 0x0) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r12, 0x824, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x40000) vmsplice(r7, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x1100c0, &(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYRES64=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V1rG9kdx/HfyLKteEtY2hJCyMNJ0gWHpspI3jiYFLrqaGRPK2nEjFxsKCzpxl5C5GybpND4ZuubPsD2DfSuN73oiyj0et9Fb0oLS3tX6I3KnBnJUvQUJ4qzu/l+zK5GZ/4z5z9zFP0ZW3MkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgx6u6bslRPWhu75jJvGoUNqasT/e2qBvpwo2Z/UpO8p8KBZ1Pm85/+3j1ueR/13QxfXZRheShoMN3zr1791v5XG/7KQm9DJ10h0+eHT681+nsPX6B2AWdePdvknK9pTPZmIwJ2vSbQRwGjcqmb4I4NBvr6+6trVpsakHdj3fjtt8wXuTn2mFkVr0bprSxsWb84m643dysVup+r/HO98quu25+tJwOtKRi7G0F9XrQ3LQxyeok5o757KdpgF9pGLP/oLO3NutIkqDSiwSVZwWV3XK5VCqXS+u3N27fcd38SIObcNw+jUTM/UWLr5j5vHEDc5BL6v/fHamugpra1o7M2B9PVUUK1ZiwPtOr/+/d8qf2O1j/e1X+vPSDbPUF2fp/OX12eVL9n5CLkbEbjFvjTGg/2c+izcjoiZ7pUA91Tx11tKfHL7/PlYGMr7x6hqfzsylfTQWKFSpQQxXbYrIWow2ta12uPtSWaoplVFOgunzF2lWstnz7ivIUyVdFbYWKZLQqTzdkVNKGNrQmI19F7SrUtpraVFUV/bfb7e7rgT3va1NyVC+oNCFgeTCoPGVPk+r/zz5NX6dZ/Xep/2+r9HWwnD58Pi0G+BLoZtf/g3KzN7vy+jICAAAAAADz5tjfvjv2b/eXJHVVC+q++6bTAgAAAAAAc+Sou6yLcpLrf0mX5HD9DwAAAADA141j77FzJK3YD/U7x3dCvcgvARZOIUUAAAAAAPCK7J3/l5ekrp204oqcE13/AwAAAACAr4DfDcyxn+/Nsdvt/Vk/JyluLTt//feyokXnqLXzHeegkqypHGQxI58AaNcuOGeziXrtw5Ik+8zzLzpZb9kkmP15B7/YnzXXvxM9l8DSwuAOJiTgJD2v57Nn+kxX002uZvPM3z/Mya5Je1mpBXW/6IX1uyVVKmdzbX+n/ctHD34lRf3j3H/Q2St+9Ennvs3lKGk6Okh2+ulQOrnxJ+M4l6d2vgV7z8W4Iz6jWq/L3zcbK47t1+0d/4IqB7nBjqYNwHGfv9G1dMyuraSxK4f9GfeT4y8kx18q2iEbOvpo0TnOovT8kY8biAlZFGwW19OY66vXVf5HutwfhZxT+O6CVC6OjsFQFuXBLGafC+c/I+diIAv70FszcC7Wkiz+luxoQhZrJ8tiZEQA4E3Z1yXZd6FLspOY96tQIau7vfLQe1N7qbozu7p/MFzdn/6x27UbLEj57G8TU3spKHlHX3VsHVpKDyl/Ycw7upvVlYImvKO7r1Ddkr7+cvwdSFnaI1n8r9vt3i3Zfv/wXFX901B3I/3G9fJCcgpvPT34uZ0AP/Hx3sd7j8rltXX3fde9XdaiPYzsYUHUHgDAiNnfsTMzwnlfV9OIq/f/9V66NFTxvtn/SEFRH+kTdXRfN3tfIXBl/F5XBj6GcDO9atXAVas59+5d+710w7El3Zx4VWdr6UBsuR+7qN4mw5X6OHbtNY8CAACn69qMOjy+/heG6v9NraYRqxfGXncP1/Ls6rh/ST8ptjQ7+Q/mfTYAAHg7+NEXzkr7t04UBa0PSxsbpUp7yzdR6P3YREF10zdBs+1H3laluembVhS2Qy+sm1ak5aDqxybebrXCqG1qYWRaYRzs2G9+N9lXv8d+o9JsB17cqvuV2Dde2GxXvLapBrFnWts/rAfxlh/ZjeOW7wW1wKu0g7Bp4nA78vyiMbHvDwQGVb/ZDmpBstg0rShoVKJd85Owvt3wTdWPvShotcN0h72+gmYtjBp2t8V8d9znBQAAeOs8eXb48F6ns/f4+YUzyaV52nKkCTGjC0t68iy5Kk9a8tkq5ggCAOBL5riAn2CjwmtMCAAAAAAAAAAAAAAAAAAAAAAAjJh9S98JFxbH3Swo9Vt+cTZr0a91fIvhyH4czTuxkyzkTrpV75aIw4efTwk+02/pnf7BmKNTO8B/fkN6x7YobcnPv68zUwb3dSx8fz89oxNjkpVjVy33xyI//38OycKjP09Y1e12u9M3Xx4+h0vTDnB4IS/p8dIrDMHpvxcBOF3/DwAA//8tKDNk") sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x500a, 0x15001}, [@IFLA_MAP={0x24, 0xe, {0x40, 0x2, 0xae, 0x8, 0xe5, 0x5}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x2400c080) 766.760439ms ago: executing program 4 (id=270): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a5", 0xed}], 0x1}}], 0x1, 0xc0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a000700"], 0x1ac}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000e40)=@delchain={0xe8, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0x7c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x44, 0x3, [@m_ife={0x40, 0x12, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "7dea7fdc03dc266b4394d770e179d0165e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xd}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="003531d0081634a844cb7924d87a8dce5d1a6c9ae88dce733292494dc2900e6759d69221ec8f827bc438bf6a983de5286b648195a809a18b941c6b3d090092180d1746e9c5eae6b9c2992b32ec95bffe226d2ad16124944e105e9d268dfafd74ca934a7dbef224c2293a4798904f162d126d1819febf57d3758306dadf1057fdf9ee584e"], 0x1, 0x55a, &(0x7f0000000b80)="$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") sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{0x8}, {0x9, 0x5}, 0x8, 0x2, 0x8}) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) unshare(0x28020480) r3 = gettid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x12, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7ff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x1, 0xb, 0x5, 0x0, 0xffffffffffffffec}, @generic={0xfd, 0x3, 0xf, 0xfff, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xd8, &(0x7f00000001c0)=""/216, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x1, 0x10001, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9, @void, @value}, 0x94) 756.891699ms ago: executing program 1 (id=280): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100020000000010000000000000", @ANYRES32=0x0, @ANYBLOB="000000000111040008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x1, 0x2, 0x3, 0x0, 0x7, 0x9}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000070000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_open_procfs$userns(0x0, &(0x7f0000000a00)) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xa, 0xb}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9da5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004841}, 0x900) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 753.98967ms ago: executing program 2 (id=281): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1e4, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000580)='@', 0x1, 0x20004004, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0xe0, 0x6, @link_local}, 0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000, 0x1}}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r7, &(0x7f0000000040)={0x800000, 0xffffffffffffffff}, &(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") r8 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0xc0) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1f, 0x7800, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r7, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) capset(&(0x7f0000000080)={0x20071026}, 0x0) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 752.45023ms ago: executing program 3 (id=271): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x84085, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x5}, 0x1320, 0x0, 0x103, 0x5, 0x0, 0x840501, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r1, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="48000000190a01"], 0x48}, 0x1, 0x0, 0x0, 0x4000840}, 0x400c0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r6, 0x331, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0) r10 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000640), 0x80000) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x80) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="08a2ce7c0c9bf07c1e00010101bcebdbdf2509000000"], 0x14}}, 0x20000000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000680)={0x7, 0x4, 0x36a, 0x97, 0x1, 0x8, 0xff80}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000"/38], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x0, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040085}, 0x20000) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000003c0)={0x0, 0x1d, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="00004870127af2c682", @ANYRES16=r3, @ANYRES16=r2], 0x14}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f80004000000000000002000000010000000000080008000100000303ff", 0x24) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r12, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {&(0x7f00000005c0)}}, 0x18) 587.909652ms ago: executing program 1 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085000000070000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000224000000240000000200000000000000020300"], 0x0, 0x3e, 0x0, 0x0, 0x6, 0x0, @void, @value}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000440)='./file1\x00', 0x3000000, &(0x7f0000000640)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@data_writeback}, {@dax}, {@oldalloc}]}, 0x1, 0x530, &(0x7f00000011c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext2\x00', &(0x7f0000000480)='./file1\x00', 0x50, &(0x7f0000000700)={[], [{@appraise_type}, {@context={'context', 0x3d, 'system_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '-}[$@-'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '{\x8d'}}, {@subj_type={'subj_type', 0x3d, '*\'!'}}]}, 0x1, 0x3eb, &(0x7f0000000880)="$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") ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 466.560674ms ago: executing program 3 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x4, 0x20, 0x2, @multicast}, 0x10) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000d080000000000000000010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x40004) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0xffffffff, 0x0, 0xfffffffe}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x295}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0xfffffff7}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x5}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x7fffffff}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r7, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60010020, 0x0) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 442.037534ms ago: executing program 4 (id=274): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) getsockopt(r2, 0x81, 0x7fff, &(0x7f00000002c0)=""/94, &(0x7f0000000340)=0x5e) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11298}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x4c}}, 0x4000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x800) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r7, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x8, &(0x7f0000000280)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) 440.541144ms ago: executing program 2 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) r6 = dup3(r5, r4, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r9 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r9, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r8, 0x3f420f00}, 0x10, 0x0, 0x2}, 0x2c004000) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000200)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) r10 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000000080)={0x1}) io_setup(0x5, &(0x7f0000000340)=0x0) r12 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x6, 0x40001) io_submit(r11, 0x4, &(0x7f00000006c0)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x4, r7, &(0x7f0000000380)="9ce2c12a1569e251c4c97b6812e26bf25c43e5397183805d46b207eb306b0476428c9899332310a20444785b4e4ba97a1fbb5f838de77c46e25af2cabf62c28178bbcecfa931e3df2e61aa", 0x4b, 0x6, 0x0, 0x2, r10}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0x937, r3, &(0x7f0000000440)="ad23bac9413fe5b8da95c0c8be8eff91b921c4f58e9ff6ce47d46621fda6", 0x1e, 0xffffffffffffffff, 0x0, 0x0, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x81, r12, &(0x7f00000005c0)="54babf58e9d568568822ff28212037ddcade156aeeeb5534083bb88f26c4f1a7b5084adbac8695f732d4b775e9284c768fd29c31322c9b41ac3237805fcb09e656f93598db0f1ee21df23a05b4a6f86204a7cb00b6cbf262b75b6fa5e2736f6ae31965bb9727224d4913b1a105784e467e0eef3cd8a32acba430a0d2f93e25fbd1ce953a40b8e602a22dfee3a6dbbd4bb0e14439e6c512cc08d16f821c03da1f7344fae0a41c02aa6a0be637dcd161e3fd7c413532fa16d8e0302ea21a2bb6093dfea5a19614", 0xc6, 0x9, 0x0, 0x1, r6}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x7fff, r2, &(0x7f0000000a00)="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", 0x1000, 0xb, 0x0, 0x2, r6}]) 265.977877ms ago: executing program 2 (id=276): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = getpid() r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x110250, 0x20000000000, 0x0, 0x3, 0x5, 0x0, 0x81, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='f2fs_issue_reset_zone\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x1e, 0x805, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r5, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) close(r5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x1, &(0x7f0000000000)=0x2, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 264.715907ms ago: executing program 3 (id=277): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendto$unix(r5, 0x0, 0x803e, 0x4840, 0x0, 0x0) nanosleep(0x0, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x601, 0x0, 0x1, 0x8b}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(r8, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) flock(r2, 0x2) flock(r0, 0x2) flock(r0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 89.562449ms ago: executing program 3 (id=278): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x1, 0x48) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xb00) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008, 0x8}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x81d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd25, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x200000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r3, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x178}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r7 = gettid() syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000180)='./file2\x00', 0x4a0c, &(0x7f0000003240)=ANY=[], 0x6, 0x36b, &(0x7f0000000540)="$eJzs3c9rM0UYwPEnaZImeXmbHERRkA72opelTf0DDNKCELC0jdgKwrbdaMialGyoRsS2J6/i3ZPgofSm4KGg/Qd68aYXEbz1Iniwgrqyv5LNZlPbmBptvx94yWRmns1MZgLP5u1mL1//+J1GzdJqekeSWSUJEZErkaIkJZDwH5NuOSNhR/LCo1++e3Zjq5r1KtRqeXO5pJSam//63Q9yfrezWbkovnn5c+mniycvnr78c/PtuqXqlmq2OkpXO60fOvrOrKH26lZDU2rNNHTLUPWmZbS99i/845it/f2u0pt7j/P7bcNcFml2VcPoqk5Lddpdpb+l15tK0zT1OC/4O9WT9XW9PGbw7oQHgzvSbpf1GRHJDbVUT6YyIAAAMFXR/D/ppPTj5P/bMleprKwrp3M//z997rzz6LUv5/z8/ywTl/+/+L13rIH83zmd6Of/rY6+YxqqNpj/W5bSo/n/p3KL/H84I3pYxs7/i3cwGIxnPjNUlRh45uT/ef/z6zp+43TRLZD/AwAAAAAAAAAAAAAAAAAAAADwf3Bl2wXbtgvBY/CvfwmB/xz30qj1nxWRrLP6Nut/n21sbUvWvXDPWWPzo4PqQdV79Duci4gpxh92lLM3giuPlKMo35iHfvzhQXXGbSnXpO7Ey5IUpOjup1C8ba++UllZUh4/vneZUj4cX5KCPBGO/8rdnU58aTDef/2MPL8QitekIN/uSktM2XMj+6//4ZJSL79aicTn3H4i8uO/vigAAAAAAEyYpnpiz981bVS79ysj5Zr7NZEhi1KQ3+PP7xdjz89ThWdS0549AAAAAAAPg9V9v6FL0mi7BdOMK+RkZNMECqmBmrSIxHbORGrS1x15JjTDm44nI94dTP7pvD4L3tXbRAV/SOEMvNfk31FFxhtPMH+3JpHqNf1223kljsTdAEfhpqTcIDwVHfy8U6FiOy+MPM6xP5FeTfC1UWbE+yxrw8dJXrMT0kM1dmK8DfDUJ5//OrHPRX8LvxfbJxFegmPTsA/lJosSKTibbLgp7b+y90UeAAAAgHuhn/QHNS+Fm8M3EgnfLIf/uQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYILu5Cf9IoVpzxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4r/grAAD///p59Ds=") socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = io_uring_setup(0x4d1c, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 0x400000, 0x137}) close_range(r8, 0xffffffffffffffff, 0x0) process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff03006043778cff9e14f086dd", 0x0, 0x209, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 88.724039ms ago: executing program 0 (id=279): mknod$loop(0x0, 0x6000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x410c84, &(0x7f0000000440)={[{@auto_da_alloc_val}, {@quota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) r8 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file2'}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRES16=r7, @ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRESDEC=r1, @ANYRES64=r2, @ANYRES32, @ANYRESHEX=r2, @ANYRESOCT=r2], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x18) syz_io_uring_setup(0x894, &(0x7f0000000140)={0x0, 0xf4dc, 0x0, 0x20002, 0xbfdff7f8}, &(0x7f0000000240)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) syz_io_uring_setup(0x4022db, &(0x7f0000000400)={0x0, 0xfad9, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x81100) unshare(0x400) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r7, &(0x7f0000000600)=""/98, 0x62) socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000100)={r9, 0x2, 0x6}, 0x10) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 28.082958][ T29] audit: type=1400 audit(1748961391.012:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.084095][ T3307] cgroup: Unknown subsys name 'net' [ 28.105699][ T29] audit: type=1400 audit(1748961391.012:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.133271][ T29] audit: type=1400 audit(1748961391.042:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.291506][ T3307] cgroup: Unknown subsys name 'cpuset' [ 28.297727][ T3307] cgroup: Unknown subsys name 'rlimit' [ 28.449013][ T29] audit: type=1400 audit(1748961391.372:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.472294][ T29] audit: type=1400 audit(1748961391.372:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.492769][ T29] audit: type=1400 audit(1748961391.372:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.513162][ T29] audit: type=1400 audit(1748961391.372:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.533472][ T29] audit: type=1400 audit(1748961391.402:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.542237][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.558440][ T29] audit: type=1400 audit(1748961391.402:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.590272][ T29] audit: type=1400 audit(1748961391.492:71): avc: denied { relabelto } for pid=3311 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.624958][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.505856][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.522923][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.590581][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 30.612049][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 30.636667][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.643801][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.651081][ T3317] bridge_slave_0: entered allmulticast mode [ 30.657511][ T3317] bridge_slave_0: entered promiscuous mode [ 30.668828][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 30.684788][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.691906][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.699069][ T3317] bridge_slave_1: entered allmulticast mode [ 30.705656][ T3317] bridge_slave_1: entered promiscuous mode [ 30.734014][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.741093][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.748300][ T3319] bridge_slave_0: entered allmulticast mode [ 30.754707][ T3319] bridge_slave_0: entered promiscuous mode [ 30.774748][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.781862][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.789004][ T3319] bridge_slave_1: entered allmulticast mode [ 30.795629][ T3319] bridge_slave_1: entered promiscuous mode [ 30.829275][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.858478][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.867691][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.874888][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.882111][ T3328] bridge_slave_0: entered allmulticast mode [ 30.888444][ T3328] bridge_slave_0: entered promiscuous mode [ 30.896078][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.907442][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.914550][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.921795][ T3323] bridge_slave_0: entered allmulticast mode [ 30.928231][ T3323] bridge_slave_0: entered promiscuous mode [ 30.935691][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.950006][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.957249][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.964460][ T3328] bridge_slave_1: entered allmulticast mode [ 30.970915][ T3328] bridge_slave_1: entered promiscuous mode [ 30.987171][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.994304][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.001477][ T3323] bridge_slave_1: entered allmulticast mode [ 31.007843][ T3323] bridge_slave_1: entered promiscuous mode [ 31.047693][ T3319] team0: Port device team_slave_0 added [ 31.054125][ T3319] team0: Port device team_slave_1 added [ 31.061024][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.070781][ T3317] team0: Port device team_slave_0 added [ 31.076527][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.083695][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.090785][ T3324] bridge_slave_0: entered allmulticast mode [ 31.097199][ T3324] bridge_slave_0: entered promiscuous mode [ 31.104746][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.124461][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.133953][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.141019][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.167203][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.178826][ T3317] team0: Port device team_slave_1 added [ 31.184749][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.191908][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.199054][ T3324] bridge_slave_1: entered allmulticast mode [ 31.205807][ T3324] bridge_slave_1: entered promiscuous mode [ 31.217487][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.235947][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.242966][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.269025][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.299310][ T3328] team0: Port device team_slave_0 added [ 31.308432][ T3328] team0: Port device team_slave_1 added [ 31.319473][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.326638][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.352944][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.364943][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.374276][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.381323][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.407356][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.418621][ T3323] team0: Port device team_slave_0 added [ 31.426279][ T3323] team0: Port device team_slave_1 added [ 31.438311][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.465462][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.472458][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.498576][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.515734][ T3324] team0: Port device team_slave_0 added [ 31.531834][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.538856][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.564954][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.576241][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.583293][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.609373][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.629269][ T3324] team0: Port device team_slave_1 added [ 31.640076][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.647072][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.673115][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.707469][ T3319] hsr_slave_0: entered promiscuous mode [ 31.713614][ T3319] hsr_slave_1: entered promiscuous mode [ 31.726536][ T3317] hsr_slave_0: entered promiscuous mode [ 31.732807][ T3317] hsr_slave_1: entered promiscuous mode [ 31.738632][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.746211][ T3317] Cannot create hsr debugfs directory [ 31.752040][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.759127][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.785132][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.811862][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.818911][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.844854][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.867959][ T3328] hsr_slave_0: entered promiscuous mode [ 31.874048][ T3328] hsr_slave_1: entered promiscuous mode [ 31.879916][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.887517][ T3328] Cannot create hsr debugfs directory [ 31.895295][ T3323] hsr_slave_0: entered promiscuous mode [ 31.901445][ T3323] hsr_slave_1: entered promiscuous mode [ 31.907294][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.914972][ T3323] Cannot create hsr debugfs directory [ 31.974156][ T3324] hsr_slave_0: entered promiscuous mode [ 31.980277][ T3324] hsr_slave_1: entered promiscuous mode [ 31.986232][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.993811][ T3324] Cannot create hsr debugfs directory [ 32.164917][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.173397][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.182326][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.193131][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.213361][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.226878][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.235899][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.245216][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.288023][ T3328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.306862][ T3328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.319048][ T3328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.327994][ T3328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.351899][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.368315][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.376937][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.387728][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.396366][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.405393][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.424436][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.442014][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.449095][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.458117][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.465213][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.490629][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.507135][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.514430][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.527809][ T3324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.538560][ T3324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.547684][ T3324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.559493][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.566569][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.583645][ T3324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.638174][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.660223][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.674418][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.693660][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.710653][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.717749][ T1707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.736193][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.743270][ T1707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.771463][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.783131][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.794043][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.805017][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.823503][ T124] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.830600][ T124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.840266][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.847381][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.877338][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.902789][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.909910][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.946627][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.961696][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.968823][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.993737][ T3323] veth0_vlan: entered promiscuous mode [ 33.023144][ T3323] veth1_vlan: entered promiscuous mode [ 33.030084][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.092633][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.106566][ T3323] veth0_macvtap: entered promiscuous mode [ 33.148466][ T3319] veth0_vlan: entered promiscuous mode [ 33.162663][ T3323] veth1_macvtap: entered promiscuous mode [ 33.181995][ T3328] veth0_vlan: entered promiscuous mode [ 33.196560][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.204786][ T3319] veth1_vlan: entered promiscuous mode [ 33.216029][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.225281][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.239514][ T3319] veth0_macvtap: entered promiscuous mode [ 33.250151][ T3328] veth1_vlan: entered promiscuous mode [ 33.259338][ T3323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.268117][ T3323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.276972][ T3323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.285759][ T3323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.300721][ T3319] veth1_macvtap: entered promiscuous mode [ 33.327155][ T3317] veth0_vlan: entered promiscuous mode [ 33.327811][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.327827][ T29] audit: type=1400 audit(1748961396.252:81): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.mLDJxB/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.335136][ T3317] veth1_vlan: entered promiscuous mode [ 33.352752][ T29] audit: type=1400 audit(1748961396.272:82): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.369394][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.390474][ T29] audit: type=1400 audit(1748961396.272:83): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.mLDJxB/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.403370][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.422885][ T29] audit: type=1400 audit(1748961396.272:84): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.422927][ T29] audit: type=1400 audit(1748961396.272:85): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.mLDJxB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.451416][ T3328] veth0_macvtap: entered promiscuous mode [ 33.451899][ T29] audit: type=1400 audit(1748961396.272:86): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.mLDJxB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.497085][ T3317] veth0_macvtap: entered promiscuous mode [ 33.511483][ T29] audit: type=1400 audit(1748961396.272:87): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.519069][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.539741][ T29] audit: type=1400 audit(1748961396.322:88): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.545513][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.568365][ T29] audit: type=1400 audit(1748961396.322:89): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=3654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.577098][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.608339][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.621793][ T3328] veth1_macvtap: entered promiscuous mode [ 33.632528][ T3317] veth1_macvtap: entered promiscuous mode [ 33.644846][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.646529][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.672482][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.699368][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.712017][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.720926][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.729640][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.738417][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.756008][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.770938][ T29] audit: type=1400 audit(1748961396.692:90): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.817990][ T3328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.827004][ T3328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.835766][ T3328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.844569][ T3328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.867990][ T3324] veth0_vlan: entered promiscuous mode [ 33.888428][ T3324] veth1_vlan: entered promiscuous mode [ 33.984649][ T3324] veth0_macvtap: entered promiscuous mode [ 34.000530][ T3324] veth1_macvtap: entered promiscuous mode [ 34.020057][ T3507] loop3: detected capacity change from 0 to 512 [ 34.045188][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.137142][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.304054][ T3324] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.312938][ T3324] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.321697][ T3324] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.330492][ T3324] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.767324][ T3540] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.874812][ T3541] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 34.897976][ T3540] loop4: detected capacity change from 0 to 1024 [ 34.922658][ T3540] ======================================================= [ 34.922658][ T3540] WARNING: The mand mount option has been deprecated and [ 34.922658][ T3540] and is ignored by this kernel. Remove the mand [ 34.922658][ T3540] option from the mount to silence this warning. [ 34.922658][ T3540] ======================================================= [ 35.035897][ T3543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.062488][ T3540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.099009][ T3540] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.7: Allocating blocks 497-513 which overlap fs metadata [ 35.118924][ T3539] EXT4-fs (loop4): pa ffff888106a27070: logic 16, phys. 145, len 23 [ 35.127001][ T3539] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 35.169037][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.188230][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.195542][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.254285][ T3561] loop2: detected capacity change from 0 to 2048 [ 35.259963][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.273800][ T3561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.274498][ T3550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.327120][ T3566] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3566 comm=syz.4.12 [ 35.394579][ T3394] IPVS: starting estimator thread 0... [ 35.415761][ T3561] EXT4-fs error (device loop2): ext4_lookup:1787: inode #12: comm syz.2.11: iget: bogus i_mode (4355) [ 35.458388][ T3550] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.467384][ T3550] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.476485][ T3550] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.485393][ T3550] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.494596][ T3568] IPVS: using max 2256 ests per chain, 112800 per kthread [ 35.785450][ T3558] smc: net device bond0 applied user defined pnetid SYZ2 [ 35.798537][ T3562] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 35.819746][ T3566] bridge_slave_0: left allmulticast mode [ 35.825483][ T3566] bridge_slave_0: left promiscuous mode [ 35.831189][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.840341][ T3566] bridge_slave_1: left allmulticast mode [ 35.846099][ T3566] bridge_slave_1: left promiscuous mode [ 35.851913][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.864857][ T3550] syz.1.10 (3550) used greatest stack depth: 10768 bytes left [ 35.883604][ T3566] bond0: (slave bond_slave_0): Releasing backup interface [ 35.893380][ T3566] bond0: (slave bond_slave_1): Releasing backup interface [ 35.931099][ T3566] team0: Port device team_slave_0 removed [ 35.940338][ T3566] team0: Port device team_slave_1 removed [ 35.947373][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.954814][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.965919][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.973450][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.033198][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.080309][ T3584] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.109248][ T3566] syz.4.12 (3566) used greatest stack depth: 10176 bytes left [ 36.136656][ T3581] infiniband syz!: set active [ 36.140218][ T3588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19'. [ 36.141397][ T3581] infiniband syz!: added team_slave_0 [ 36.160315][ T3573] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 36.212764][ T3596] loop4: detected capacity change from 0 to 512 [ 36.219422][ T3581] RDS/IB: syz!: added [ 36.263044][ T3581] smc: adding ib device syz! with port count 1 [ 36.286499][ T3596] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.19: corrupted in-inode xattr: invalid ea_ino [ 36.314824][ T3581] smc: ib device syz! port 1 has pnetid [ 36.326028][ T3596] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.19: couldn't read orphan inode 15 (err -117) [ 36.344960][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.643381][ T3611] loop0: detected capacity change from 0 to 1024 [ 36.660069][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.672936][ T3611] EXT4-fs: Ignoring removed oldalloc option [ 36.688457][ T3611] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 36.714467][ T3611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.978354][ T3621] Zero length message leads to an empty skb [ 37.067264][ T3625] loop2: detected capacity change from 0 to 128 [ 37.086151][ T3590] syz.1.20 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 37.099979][ T3590] CPU: 0 UID: 0 PID: 3590 Comm: syz.1.20 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 37.100085][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 37.100105][ T3590] Call Trace: [ 37.100112][ T3590] [ 37.100122][ T3590] __dump_stack+0x1d/0x30 [ 37.100230][ T3590] dump_stack_lvl+0xe8/0x140 [ 37.100257][ T3590] dump_stack+0x15/0x1b [ 37.100274][ T3590] dump_header+0x81/0x220 [ 37.100323][ T3590] oom_kill_process+0x334/0x3f0 [ 37.100366][ T3590] out_of_memory+0x979/0xb80 [ 37.100473][ T3590] try_charge_memcg+0x5e6/0x9e0 [ 37.100515][ T3590] obj_cgroup_charge_pages+0xa6/0x150 [ 37.100550][ T3590] __memcg_kmem_charge_page+0x9f/0x170 [ 37.100608][ T3590] __alloc_frozen_pages_noprof+0x188/0x360 [ 37.100634][ T3590] alloc_pages_mpol+0xb3/0x250 [ 37.100669][ T3590] alloc_pages_noprof+0x90/0x130 [ 37.100735][ T3590] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 37.100797][ T3590] __kvmalloc_node_noprof+0x312/0x4f0 [ 37.100843][ T3590] ? ip_set_alloc+0x1f/0x30 [ 37.100900][ T3590] ? ip_set_alloc+0x1f/0x30 [ 37.100995][ T3590] ? hash_netiface_create+0x21b/0x740 [ 37.101027][ T3590] ? __kmalloc_cache_noprof+0x189/0x320 [ 37.101065][ T3590] ip_set_alloc+0x1f/0x30 [ 37.101100][ T3590] hash_netiface_create+0x282/0x740 [ 37.101177][ T3590] ? __pfx_hash_netiface_create+0x10/0x10 [ 37.101210][ T3590] ip_set_create+0x3c9/0x960 [ 37.101266][ T3590] ? __nla_parse+0x40/0x60 [ 37.101296][ T3590] nfnetlink_rcv_msg+0x4c3/0x590 [ 37.101367][ T3590] ? selinux_capable+0x1f9/0x270 [ 37.101396][ T3590] netlink_rcv_skb+0x123/0x220 [ 37.101429][ T3590] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 37.101529][ T3590] nfnetlink_rcv+0x16b/0x1690 [ 37.101562][ T3590] ? __list_del_entry_valid_or_report+0x65/0x130 [ 37.101666][ T3590] ? __rcu_read_unlock+0x4f/0x70 [ 37.101756][ T3590] ? prep_new_page+0x5c/0x200 [ 37.101780][ T3590] ? get_page_from_freelist+0x1378/0x13d0 [ 37.101809][ T3590] ? save_fpregs_to_fpstate+0x100/0x160 [ 37.101910][ T3590] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 37.101951][ T3590] ? __slab_free+0x77/0x270 [ 37.102027][ T3590] ? should_fail_ex+0x30/0x280 [ 37.102061][ T3590] ? selinux_nlmsg_lookup+0x99/0x890 [ 37.102092][ T3590] ? selinux_netlink_send+0x59f/0x5f0 [ 37.102180][ T3590] ? __rcu_read_unlock+0x34/0x70 [ 37.102202][ T3590] ? __netlink_lookup+0x266/0x2a0 [ 37.102285][ T3590] netlink_unicast+0x5a1/0x670 [ 37.102326][ T3590] netlink_sendmsg+0x58b/0x6b0 [ 37.102372][ T3590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 37.102437][ T3590] __sock_sendmsg+0x142/0x180 [ 37.102460][ T3590] ____sys_sendmsg+0x31e/0x4e0 [ 37.102574][ T3590] ___sys_sendmsg+0x17b/0x1d0 [ 37.102637][ T3590] __x64_sys_sendmsg+0xd4/0x160 [ 37.102683][ T3590] x64_sys_call+0x2999/0x2fb0 [ 37.102752][ T3590] do_syscall_64+0xd2/0x200 [ 37.102793][ T3590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 37.102837][ T3590] ? clear_bhb_loop+0x40/0x90 [ 37.102867][ T3590] ? clear_bhb_loop+0x40/0x90 [ 37.102952][ T3590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.102980][ T3590] RIP: 0033:0x7efe8781e969 [ 37.103007][ T3590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.103032][ T3590] RSP: 002b:00007efe85e87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.103057][ T3590] RAX: ffffffffffffffda RBX: 00007efe87a45fa0 RCX: 00007efe8781e969 [ 37.103142][ T3590] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 37.103158][ T3590] RBP: 00007efe878a0ab1 R08: 0000000000000000 R09: 0000000000000000 [ 37.103174][ T3590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.103190][ T3590] R13: 0000000000000000 R14: 00007efe87a45fa0 R15: 00007fff1ca89b18 [ 37.103217][ T3590] [ 37.472376][ T3590] memory: usage 307200kB, limit 307200kB, failcnt 301 [ 37.479160][ T3590] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 37.487318][ T3590] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 37.494669][ T3590] Memory cgroup stats for /syz1: [ 37.528584][ T3628] netlink: 76 bytes leftover after parsing attributes in process `syz.2.25'. [ 37.528812][ T3590] cache 0 [ 37.538987][ T3630] loop3: detected capacity change from 0 to 128 [ 37.542612][ T3590] rss 0 [ 37.554688][ T3590] shmem 0 [ 37.557635][ T3590] mapped_file 0 [ 37.561132][ T3590] dirty 0 [ 37.564100][ T3590] writeback 0 [ 37.567454][ T3590] workingset_refault_anon 64 [ 37.572090][ T3590] workingset_refault_file 233 [ 37.576791][ T3590] swap 204800 [ 37.580196][ T3590] swapcached 0 [ 37.580207][ T3590] nr_memmap_boot_pages 574 [ 37.588032][ T3590] pgpgin 574 [ 37.591284][ T3590] pglazyfree 620 [ 37.594856][ T3590] pgfault 55 [ 37.597654][ T3630] FAT-fs (loop3): Directory bread(block 32) failed [ 37.598053][ T3590] a_other 0 [ 37.598065][ T3590] inactive_anon 0 [ 37.610496][ T3630] FAT-fs (loop3): Directory bread(block 33) failed [ 37.611737][ T3590] active_anon 0 [ 37.618080][ T3630] FAT-fs (loop3): Directory bread(block 34) failed [ 37.621459][ T3590] inactive_file 0 [ 37.621470][ T3590] active_file 0 [ 37.621486][ T3590] hierarchical_memory_limit 314572800 [ 37.621498][ T3590] hierarchical_memsw_limit 9223372036854771712 [ 37.642882][ T3630] FAT-fs (loop3): Directory bread(block 35) failed [ 37.646680][ T3590] total_cache 0 [ 37.654895][ T3630] FAT-fs (loop3): Directory bread(block 36) failed [ 37.656662][ T3590] total_rss 0 [ 37.656674][ T3590] total_shmem 0 [ 37.663474][ T3630] FAT-fs (loop3): Directory bread(block 37) failed [ 37.666455][ T3590] total_mapped_file 0 [ 37.666467][ T3590] total_dirty 0 [ 37.666476][ T3590] total_writeback 0 [ 37.670104][ T3630] FAT-fs (loop3): Directory bread(block 38) failed [ 37.676479][ T3590] total_workingset_refault_anon 64 [ 37.676492][ T3590] total_workingset_refault_file 233 [ 37.676506][ T3590] total_swap 204800 [ 37.676515][ T3590] total_swapcached 0 [ 37.676524][ T3590] total_nr_memmap_boot_pages 574 [ 37.676535][ T3590] total_pgpgin 574 [ 37.709932][ T3630] FAT-fs (loop3): Directory bread(block 39) failed [ 37.713168][ T3590] total_pglazyfree 620 [ 37.713178][ T3590] total_pgfault 55 [ 37.713187][ T3590] total_a_other 0 [ 37.713196][ T3590] total_inactive_anon 0 [ 37.713205][ T3590] total_active_anon 0 [ 37.713214][ T3590] total_inactive_file 0 [ 37.713223][ T3590] total_active_file 0 [ 37.713232][ T3590] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg= [ 37.722245][ T3630] FAT-fs (loop3): Directory bread(block 40) failed [ 37.728584][ T3590] /syz1,task=syz.1.20,pid=3587,uid=0 [ 37.734334][ T3630] FAT-fs (loop3): Directory bread(block 41) failed [ 37.736497][ T3590] Memory cgroup out of memory: Killed process 3587 (syz.1.20) total-vm:95928kB, anon-rss:1016kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 37.807353][ T3606] syz.1.20 (3606) used greatest stack depth: 9832 bytes left [ 37.816863][ T3587] syz.1.20 (3587) used greatest stack depth: 9688 bytes left [ 37.842284][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.981464][ C0] hrtimer: interrupt took 47377 ns [ 38.278452][ T3644] loop0: detected capacity change from 0 to 2048 [ 38.316233][ T3644] EXT4-fs: Ignoring removed bh option [ 38.364926][ T3644] ext4: Unknown parameter 'subj_type' [ 38.583341][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 38.583358][ T29] audit: type=1400 audit(1748963449.514:371): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.631176][ T29] audit: type=1400 audit(1748963449.554:372): avc: denied { read } for pid=3649 comm="syz.3.32" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.654658][ T29] audit: type=1400 audit(1748963449.554:373): avc: denied { open } for pid=3649 comm="syz.3.32" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.684824][ T3635] tipc: Started in network mode [ 38.689738][ T3635] tipc: Node identity 4, cluster identity 4711 [ 38.695961][ T3635] tipc: Node number set to 4 [ 38.702396][ T29] audit: type=1400 audit(1748963449.634:374): avc: denied { append } for pid=3649 comm="syz.3.32" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.725332][ T29] audit: type=1400 audit(1748963449.644:375): avc: denied { write } for pid=3649 comm="syz.3.32" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 38.824487][ T29] audit: type=1326 audit(1748963449.744:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 38.847856][ T29] audit: type=1326 audit(1748963449.744:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 38.871084][ T29] audit: type=1326 audit(1748963449.744:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 38.889383][ T3655] loop2: detected capacity change from 0 to 2048 [ 38.894608][ T29] audit: type=1326 audit(1748963449.744:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 38.924757][ T29] audit: type=1326 audit(1748963449.744:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3652 comm="syz.4.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d29d5d2d0 code=0x7ffc0000 [ 38.948820][ T3590] syz.1.20 (3590) used greatest stack depth: 6952 bytes left [ 38.960032][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.120094][ T3664] loop0: detected capacity change from 0 to 164 [ 39.135172][ T3664] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.167080][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.199894][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.36'. [ 39.556884][ T3672] loop2: detected capacity change from 0 to 512 [ 39.588999][ T3677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 39.738505][ T3679] loop3: detected capacity change from 0 to 2048 [ 39.836475][ T3661] Set syz1 is full, maxelem 65536 reached [ 39.858732][ T3672] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.868421][ T3672] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 40.258766][ T3698] syzkaller1: entered promiscuous mode [ 40.264327][ T3698] syzkaller1: entered allmulticast mode [ 40.272542][ T3700] loop0: detected capacity change from 0 to 128 [ 40.314147][ T3686] mmap: syz.4.41 (3686) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.388794][ T3704] ALSA: seq fatal error: cannot create timer (-19) [ 40.497660][ T3700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3700 comm=syz.0.47 [ 40.792100][ T3707] syz.0.47: attempt to access beyond end of device [ 40.792100][ T3707] loop0: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 40.810803][ T3707] syz.0.47: attempt to access beyond end of device [ 40.810803][ T3707] loop0: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 40.824826][ T3707] syz.0.47: attempt to access beyond end of device [ 40.824826][ T3707] loop0: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 40.838085][ T3707] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 40.847146][ T3707] syz.0.47: attempt to access beyond end of device [ 40.847146][ T3707] loop0: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 40.860415][ T3707] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 40.883373][ T3707] syz.0.47: attempt to access beyond end of device [ 40.883373][ T3707] loop0: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 40.896672][ T3707] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 40.907651][ T3707] syz.0.47: attempt to access beyond end of device [ 40.907651][ T3707] loop0: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 40.920934][ T3707] Buffer I/O error on dev loop0, logical block 145, lost async page write [ 40.926146][ T3712] netlink: 'syz.4.49': attribute type 4 has an invalid length. [ 40.930980][ T3707] syz.0.47: attempt to access beyond end of device [ 40.930980][ T3707] loop0: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 40.950372][ T3707] Buffer I/O error on dev loop0, logical block 146, lost async page write [ 40.959077][ T3707] syz.0.47: attempt to access beyond end of device [ 40.959077][ T3707] loop0: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 40.972507][ T3707] Buffer I/O error on dev loop0, logical block 147, lost async page write [ 40.993648][ T3714] netlink: 232 bytes leftover after parsing attributes in process `syz.1.50'. [ 41.002828][ T3707] syz.0.47: attempt to access beyond end of device [ 41.002828][ T3707] loop0: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 41.016115][ T3707] Buffer I/O error on dev loop0, logical block 156, lost async page write [ 41.024784][ T3707] syz.0.47: attempt to access beyond end of device [ 41.024784][ T3707] loop0: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 41.038151][ T3707] Buffer I/O error on dev loop0, logical block 157, lost async page write [ 41.049705][ T3707] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 41.058373][ T3707] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 41.220357][ T3719] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.50'. [ 41.250232][ T3714] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.50'. [ 41.336271][ T3723] loop3: detected capacity change from 0 to 512 [ 41.381183][ T3725] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 41.387839][ T3725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.395396][ T3725] vhci_hcd vhci_hcd.0: Device attached [ 41.449961][ T3729] loop2: detected capacity change from 0 to 1024 [ 41.559047][ T3733] ip6t_rpfilter: unknown options [ 41.654774][ T3725] netlink: 'syz.4.49': attribute type 4 has an invalid length. [ 41.662518][ T2972] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 42.220750][ T3723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.233943][ T3723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.244744][ T3729] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 42.255688][ T3729] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 42.268805][ T3723] EXT4-fs (loop3): 1 truncate cleaned up [ 42.275736][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.375608][ T3729] JBD2: no valid journal superblock found [ 42.381384][ T3729] EXT4-fs (loop2): Could not load journal inode [ 43.788751][ T29] kauditd_printk_skb: 426 callbacks suppressed [ 43.788771][ T29] audit: type=1400 audit(1748963454.603:807): avc: denied { getopt } for pid=3728 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.834752][ T3729] Cannot find add_set index 0 as target [ 43.885402][ T29] audit: type=1400 audit(1748963454.753:808): avc: denied { create } for pid=3728 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.904812][ T29] audit: type=1400 audit(1748963454.763:809): avc: denied { write } for pid=3728 comm="syz.2.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.923992][ T29] audit: type=1326 audit(1748963454.783:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 43.947252][ T29] audit: type=1326 audit(1748963454.783:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 43.970551][ T29] audit: type=1326 audit(1748963454.783:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 43.993735][ T29] audit: type=1326 audit(1748963454.783:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 44.016899][ T29] audit: type=1326 audit(1748963454.783:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 44.040272][ T29] audit: type=1326 audit(1748963454.783:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 44.064434][ T3726] vhci_hcd: connection reset by peer [ 44.186143][ T3523] vhci_hcd: stop threads [ 44.190441][ T3523] vhci_hcd: release socket [ 44.194899][ T3523] vhci_hcd: disconnect device [ 44.480980][ T29] audit: type=1326 audit(1748963455.003:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3748 comm="syz.1.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 44.507163][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.603420][ T3749] netlink: 'syz.1.57': attribute type 13 has an invalid length. [ 44.611142][ T3749] netlink: 152 bytes leftover after parsing attributes in process `syz.1.57'. [ 44.660886][ T3749] erspan0: refused to change device tx_queue_len [ 44.667418][ T3749] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 44.740603][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 44.749444][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 44.783473][ T3752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 44.925187][ T3780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.975448][ T3787] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 45.006245][ T3792] capability: warning: `syz.1.62' uses deprecated v2 capabilities in a way that may be insecure [ 45.286627][ T3769] loop0: detected capacity change from 0 to 128 [ 45.321491][ T3769] FAT-fs (loop0): bogus number of FAT structure [ 45.327864][ T3769] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 45.337218][ T3769] FAT-fs (loop0): Can't find a valid FAT filesystem [ 45.391706][ T3822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 45.449098][ T3830] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 45.483161][ T3830] SELinux: failed to load policy [ 45.723913][ T3865] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 45.730578][ T3865] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.738331][ T3865] vhci_hcd vhci_hcd.0: Device attached [ 45.844310][ T3857] bridge0: port 1(gretap0) entered blocking state [ 45.850848][ T3857] bridge0: port 1(gretap0) entered disabled state [ 45.864302][ T3857] gretap0: entered allmulticast mode [ 45.870724][ T3857] gretap0: entered promiscuous mode [ 45.877650][ T3857] bridge0: port 1(gretap0) entered blocking state [ 45.884263][ T3857] bridge0: port 1(gretap0) entered forwarding state [ 45.897280][ T3857] gretap0: left allmulticast mode [ 45.902397][ T3857] gretap0: left promiscuous mode [ 45.907519][ T3857] bridge0: port 1(gretap0) entered disabled state [ 45.924401][ T3857] netlink: 'syz.4.69': attribute type 3 has an invalid length. [ 45.932538][ T3882] capability: warning: `syz.1.71' uses 32-bit capabilities (legacy support in use) [ 45.944639][ T3866] vhci_hcd: connection closed [ 45.945144][ T3461] vhci_hcd: stop threads [ 45.954310][ T3461] vhci_hcd: release socket [ 45.958749][ T3461] vhci_hcd: disconnect device [ 46.007251][ T3892] vcan0: entered allmulticast mode [ 46.014114][ T3892] vcan0: left allmulticast mode [ 46.130174][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.73'. [ 46.368780][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.377432][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.389014][ T3946] loop0: detected capacity change from 0 to 256 [ 46.722266][ T2972] usb 9-1: enqueue for inactive port 0 [ 46.727834][ T2972] usb 9-1: enqueue for inactive port 0 [ 46.803074][ T2972] vhci_hcd: vhci_device speed not set [ 46.997090][ T3958] tmpfs: Bad value for 'nr_inodes' [ 47.003292][ T3958] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 47.247396][ T3972] netlink: 3 bytes leftover after parsing attributes in process `syz.1.86'. [ 47.256261][ T3972] 0X: renamed from caif0 [ 47.262737][ T3972] 0X: entered allmulticast mode [ 47.268015][ T3972] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 47.390515][ T3976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.392433][ T3972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.86'. [ 47.392790][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 47.459178][ T3978] futex_wake_op: syz.4.88 tries to shift op by -1; fix this program [ 48.932502][ T29] kauditd_printk_skb: 954 callbacks suppressed [ 48.932518][ T29] audit: type=1326 audit(1748963459.832:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe87815927 code=0x7ffc0000 [ 48.961961][ T29] audit: type=1326 audit(1748963459.832:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe877bab39 code=0x7ffc0000 [ 48.985537][ T29] audit: type=1326 audit(1748963459.832:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 49.008928][ T29] audit: type=1326 audit(1748963459.832:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 49.032151][ T29] audit: type=1326 audit(1748963459.832:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 49.055478][ T29] audit: type=1326 audit(1748963459.832:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe87815927 code=0x7ffc0000 [ 49.078669][ T29] audit: type=1326 audit(1748963459.832:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe877bab39 code=0x7ffc0000 [ 49.101978][ T29] audit: type=1326 audit(1748963459.832:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 49.125378][ T29] audit: type=1326 audit(1748963459.842:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efe87815927 code=0x7ffc0000 [ 49.148530][ T29] audit: type=1326 audit(1748963459.842:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.1.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efe877bab39 code=0x7ffc0000 [ 49.176643][ T4004] veth0: entered promiscuous mode [ 49.194223][ T4004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 49.254849][ T3392] Process accounting resumed [ 49.343247][ T4008] netlink: 232 bytes leftover after parsing attributes in process `syz.1.96'. [ 49.401261][ T4006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 49.463861][ T4014] loop3: detected capacity change from 0 to 512 [ 49.511210][ T4014] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.533882][ T4008] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.96'. [ 49.544450][ T4016] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.96'. [ 49.567561][ T4018] bond0: entered promiscuous mode [ 49.705183][ T3323] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.954884][ T4036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.101'. [ 50.053128][ T4046] netlink: 224 bytes leftover after parsing attributes in process `syz.0.105'. [ 50.076709][ T4025] 9pnet: p9_errstr2errno: server reported unknown error @L  [ 50.102957][ T4027] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 50.111820][ T4046] smc: net device bond0 erased user defined pnetid SYZ2 [ 50.249188][ T4069] loop3: detected capacity change from 0 to 512 [ 50.316323][ T4074] sctp: [Deprecated]: syz.1.108 (pid 4074) Use of int in max_burst socket option. [ 50.316323][ T4074] Use struct sctp_assoc_value instead [ 50.319975][ T4069] EXT4-fs (loop3): 1 orphan inode deleted [ 50.340095][ T1460] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 50.408897][ T4069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.455870][ T4069] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.534250][ T4099] process 'syz.1.109' launched './file0' with NULL argv: empty string added [ 50.586771][ T4069] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 50.607838][ T4107] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.629581][ T4107] tipc: Enabling of bearer rejected, failed to enable media [ 50.663709][ T4107] loop4: detected capacity change from 0 to 2050 [ 50.675793][ T4107] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 64 [ 50.797579][ T4119] loop4: detected capacity change from 0 to 512 [ 50.819361][ T4119] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.836641][ T4119] EXT4-fs (loop4): 1 truncate cleaned up [ 50.846893][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.892325][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.924937][ T4131] loop4: detected capacity change from 0 to 128 [ 51.026226][ T4143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4143 comm=syz.4.112 [ 51.041833][ T4143] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.050681][ T4143] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.059455][ T4143] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.068247][ T4143] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.077140][ T4143] vxlan0: entered promiscuous mode [ 51.091032][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.172574][ T4150] hsr_slave_0: left promiscuous mode [ 51.190769][ T4150] hsr_slave_1: left promiscuous mode [ 51.239920][ T4155] vhci_hcd: ClearPortFeature: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 51.665933][ T4200] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 51.729948][ T4204] syz.3.119 uses obsolete (PF_INET,SOCK_PACKET) [ 51.744995][ T4204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.752481][ T4204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.762459][ T4171] hub 4-0:1.0: USB hub found [ 51.763277][ T4204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.770402][ T4171] hub 4-0:1.0: 8 ports detected [ 51.774689][ T4204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.282108][ T4231] dvmrp1: entered allmulticast mode [ 52.545459][ T4240] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 52.629387][ T4244] loop4: detected capacity change from 0 to 512 [ 52.645137][ T4244] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.129: Failed to acquire dquot type 1 [ 52.645590][ T4244] EXT4-fs (loop4): 1 truncate cleaned up [ 52.645965][ T4244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.646109][ T4244] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.698027][ T4244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4244 comm=syz.4.129 [ 52.720387][ T4244] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.129: Failed to acquire dquot type 1 [ 52.746827][ T4248] __nla_validate_parse: 8 callbacks suppressed [ 52.746849][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 52.762072][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.762111][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.765794][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.786317][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.833251][ T4249] netlink: 'syz.0.130': attribute type 10 has an invalid length. [ 52.833269][ T4249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.130'. [ 52.859793][ T4249] dummy0: entered promiscuous mode [ 52.860483][ T4249] bridge0: port 3(dummy0) entered blocking state [ 52.860511][ T4249] bridge0: port 3(dummy0) entered disabled state [ 52.860657][ T4249] dummy0: entered allmulticast mode [ 52.861355][ T4249] bridge0: port 3(dummy0) entered blocking state [ 52.861466][ T4249] bridge0: port 3(dummy0) entered forwarding state [ 52.957319][ T4254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.132'. [ 52.967889][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.615899][ T4272] loop0: detected capacity change from 0 to 2048 [ 53.685675][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 53.698038][ T4272] loop0: p3 < > p4 < > [ 53.702243][ T4272] loop0: partition table partially beyond EOD, truncated [ 53.710510][ T4272] loop0: p3 start 4284289 is beyond EOD, truncated [ 53.720288][ T3009] loop0: p3 < > p4 < > [ 53.724507][ T3009] loop0: partition table partially beyond EOD, truncated [ 53.731628][ T3009] loop0: p3 start 4284289 is beyond EOD, truncated [ 53.812165][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.820210][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.828014][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.835855][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.843668][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.851429][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.851829][ T4284] loop0: detected capacity change from 0 to 1024 [ 53.859184][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.873477][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.881292][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.886674][ T4284] EXT4-fs: Ignoring removed oldalloc option [ 53.889066][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.902723][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.910768][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.913982][ T4284] EXT4-fs: Ignoring removed orlov option [ 53.918658][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.932042][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.940139][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.948002][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.955822][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.956811][ T4284] EXT4-fs (loop0): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 53.963693][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.981473][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.989322][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 53.997177][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.004977][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.007612][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 54.012709][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.024246][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 54.024263][ T29] audit: type=1326 audit(1748963464.852:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d29cfab39 code=0x7fc00000 [ 54.029306][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.035443][ T29] audit: type=1326 audit(1748963464.852:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7d29cfabff code=0x7fc00000 [ 54.058610][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.058640][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.066354][ T29] audit: type=1326 audit(1748963464.852:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4257 comm="syz.4.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7d29d5e969 code=0x7fc00000 [ 54.128653][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.136424][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.144197][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.151943][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.155052][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 54.159755][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.177317][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.185132][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.192886][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.200664][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.208444][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.216268][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.224036][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.231872][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.239643][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.247426][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.255344][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.263232][ T36] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 54.275232][ T36] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.309216][ T4284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.359320][ T29] audit: type=1400 audit(1748963465.282:2220): avc: denied { create } for pid=4283 comm="syz.0.139" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.430501][ T4284] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 54.461281][ T4292] fido_id[4292]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.482753][ T4284] EXT4-fs (loop0): Remounting filesystem read-only [ 54.544951][ T4301] loop3: detected capacity change from 0 to 128 [ 54.594858][ T4301] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.617213][ T4301] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 54.688816][ T4303] C: renamed from team_slave_0 (while UP) [ 54.706195][ T29] audit: type=1400 audit(1748963465.582:2221): avc: denied { read write open } for pid=4299 comm="syz.3.142" path="/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.810707][ T4301] vhci_hcd: invalid port number 23 [ 54.825110][ T4303] netlink: 'syz.2.141': attribute type 3 has an invalid length. [ 54.832800][ T4303] netlink: 152 bytes leftover after parsing attributes in process `syz.2.141'. [ 54.842952][ T4303] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 54.896428][ T4306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.144'. [ 54.946437][ T29] audit: type=1400 audit(1748963465.722:2222): avc: denied { setattr } for pid=4299 comm="syz.3.142" name="file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.968448][ T29] audit: type=1400 audit(1748963465.802:2223): avc: denied { append } for pid=4299 comm="syz.3.142" path="/23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/freezer.self_freezing" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 55.046199][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.057082][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.103037][ T4310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=4310 comm=syz.3.145 [ 55.148909][ T29] audit: type=1400 audit(1748963466.072:2224): avc: denied { execute } for pid=4312 comm="syz.0.146" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 55.157102][ T4313] loop0: detected capacity change from 0 to 128 [ 55.306874][ T4319] syz.3.147 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 55.333048][ T29] audit: type=1400 audit(1748963466.222:2225): avc: denied { ioctl } for pid=4318 comm="syz.3.147" path="/dev/input/event3" dev="devtmpfs" ino=256 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.339188][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x2 [ 55.358726][ T29] audit: type=1326 audit(1748963466.252:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4316 comm="syz.1.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 55.366156][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.397025][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.404517][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.412014][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.420097][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.427564][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.435018][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.442452][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.449966][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x6 [ 55.457567][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.465075][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.472662][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.480254][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.481602][ T4328] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 55.487676][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.487705][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.510917][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.518351][ T10] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 55.536042][ T10] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 55.566915][ T4332] fido_id[4332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 55.574056][ T4334] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 55.586361][ T4321] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.600265][ T4321] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.890758][ T4342] loop3: detected capacity change from 0 to 512 [ 55.998823][ T4344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 56.091572][ T4321] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.114659][ T4321] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.479670][ T4350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.155'. [ 56.564732][ T4350] netlink: 340 bytes leftover after parsing attributes in process `syz.0.155'. [ 56.656496][ T4352] loop0: detected capacity change from 0 to 164 [ 56.784149][ T4342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.811723][ T4321] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 56.822124][ T4321] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.848014][ T4342] EXT4-fs (loop3): 1 truncate cleaned up [ 56.854886][ T4342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.088447][ T4321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 58.098834][ T4321] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.243041][ T4321] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.251387][ T4321] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.292125][ T4321] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.300540][ T4321] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.327730][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.328566][ T4321] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.345110][ T4321] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.357242][ T4321] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.365482][ T4321] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.419255][ T4380] __nla_validate_parse: 3 callbacks suppressed [ 58.419274][ T4380] netlink: 52 bytes leftover after parsing attributes in process `syz.2.159'. [ 58.444617][ T4381] netlink: 'syz.0.161': attribute type 13 has an invalid length. [ 58.452380][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 58.465925][ T4382] netlink: 100 bytes leftover after parsing attributes in process `syz.1.162'. [ 58.497985][ T4375] bridge0: port 3(dummy0) entered disabled state [ 58.504538][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.511728][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.523699][ T4380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.159'. [ 58.598651][ T4375] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.607664][ T4375] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.617104][ T4375] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.626010][ T4375] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.638826][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 58.700185][ T4389] bond1: entered promiscuous mode [ 58.705477][ T4389] bond1: entered allmulticast mode [ 58.763696][ T4389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.771639][ T4392] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 58.778222][ T4392] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 58.786006][ T4392] vhci_hcd vhci_hcd.0: Device attached [ 58.846177][ T4392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 58.877908][ T4393] vhci_hcd: connection closed [ 58.879574][ T3523] vhci_hcd: stop threads [ 58.888719][ T3523] vhci_hcd: release socket [ 58.893155][ T3523] vhci_hcd: disconnect device [ 58.906711][ T4399] loop0: detected capacity change from 0 to 512 [ 58.934303][ T4399] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.970335][ T4399] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.166: invalid indirect mapped block 4294967295 (level 1) [ 59.009170][ T4399] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.166: invalid indirect mapped block 4294967295 (level 1) [ 59.036635][ T4399] EXT4-fs (loop0): 2 truncates cleaned up [ 59.042950][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.087803][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.118968][ T4377] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 59.141176][ T4405] loop0: detected capacity change from 0 to 512 [ 59.153577][ T4377] netlink: 'syz.3.160': attribute type 13 has an invalid length. [ 59.179340][ T4405] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm +}[@: bg 0: block 5: invalid block bitmap [ 59.203193][ T4405] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 59.221274][ T4405] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm +}[@: invalid indirect mapped block 3 (level 2) [ 59.259180][ T4405] EXT4-fs (loop0): 2 truncates cleaned up [ 59.274336][ T4405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.314757][ T4405] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 59.365512][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.442392][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 59.442406][ T29] audit: type=1400 audit(1748963470.361:2268): avc: denied { read } for pid=4416 comm="syz.0.171" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.471538][ T29] audit: type=1400 audit(1748963470.361:2269): avc: denied { open } for pid=4416 comm="syz.0.171" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.508745][ T4422] loop3: detected capacity change from 0 to 128 [ 59.515684][ T4422] vfat: Unknown parameter '' [ 59.522484][ T4422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.172'. [ 59.537463][ T4422] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.545538][ T29] audit: type=1326 audit(1748963470.471:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d29d5e969 code=0x0 [ 59.546445][ T4422] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.577899][ T4422] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.586713][ T4422] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.595510][ T4422] vxlan0: entered promiscuous mode [ 59.607284][ T29] audit: type=1400 audit(1748963470.531:2271): avc: denied { mount } for pid=4412 comm="syz.1.170" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.621166][ T4413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 59.678583][ T29] audit: type=1326 audit(1748963470.551:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 59.702063][ T29] audit: type=1326 audit(1748963470.551:2273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 59.725475][ T29] audit: type=1326 audit(1748963470.561:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 59.748913][ T29] audit: type=1326 audit(1748963470.561:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 59.754790][ T4422] xt_TCPMSS: Only works on TCP SYN packets [ 59.772383][ T29] audit: type=1326 audit(1748963470.561:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 59.801732][ T29] audit: type=1326 audit(1748963470.561:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4424 comm="syz.4.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d29d5e969 code=0x7ffc0000 [ 59.835282][ T4413] hsr_slave_1 (unregistering): left promiscuous mode [ 59.853005][ T4430] loop0: detected capacity change from 0 to 1024 [ 59.860455][ T4430] EXT4-fs: Ignoring removed orlov option [ 59.866190][ T4430] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.886109][ T4430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.009096][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.070379][ T4445] can: request_module (can-proto-0) failed. [ 60.433537][ T4458] loop4: detected capacity change from 0 to 1024 [ 60.441705][ T4458] EXT4-fs: Ignoring removed nobh option [ 60.468048][ T4458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.447193][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.515521][ T4472] loop3: detected capacity change from 0 to 512 [ 61.530413][ T4472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.567301][ T4472] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.585895][ T4472] EXT4-fs (loop3): 1 truncate cleaned up [ 61.594273][ T4472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.651384][ T4460] team0 (unregistering): Port device team_slave_0 removed [ 61.678723][ T4460] team0 (unregistering): Port device team_slave_1 removed [ 61.782036][ T4486] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 61.827695][ T4486] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.836057][ T4486] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.844396][ T4486] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.852660][ T4486] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 61.862238][ T4486] bond2: (slave geneve2): making interface the new active one [ 61.870945][ T4486] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 61.890315][ T4486] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.919346][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.963391][ T4493] loop4: detected capacity change from 0 to 1764 [ 62.080184][ T4507] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 62.154206][ T4506] bond0: entered promiscuous mode [ 62.159349][ T4506] bond_slave_0: entered promiscuous mode [ 62.165141][ T4506] bond_slave_1: entered promiscuous mode [ 62.230459][ T4516] loop4: detected capacity change from 0 to 512 [ 62.238440][ T4516] EXT4-fs: quotafile must be on filesystem root [ 62.441079][ T4522] loop4: detected capacity change from 0 to 512 [ 62.459222][ T4522] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 62.529641][ T4517] 9pnet: p9_errstr2errno: server reported unknown error @L  [ 62.735227][ T4523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.762272][ T4523] loop2: detected capacity change from 0 to 128 [ 62.771040][ T4523] FAT-fs (loop2): bogus number of FAT structure [ 62.777377][ T4523] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 62.786755][ T4523] FAT-fs (loop2): Can't find a valid FAT filesystem [ 62.890913][ T4534] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 63.045442][ T4536] loop2: detected capacity change from 0 to 128 [ 63.154793][ T4541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4541 comm=syz.2.204 [ 63.167982][ T4540] loop4: detected capacity change from 0 to 512 [ 63.200705][ T4540] EXT4-fs (loop4): 1 orphan inode deleted [ 63.213936][ T4540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.232175][ T3461] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:11: Failed to release dquot type 1 [ 63.254493][ T4544] loop3: detected capacity change from 0 to 512 [ 63.271399][ T4544] EXT4-fs: quotafile must be on filesystem root [ 63.316377][ T4540] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.359237][ T4548] bio_check_eod: 4 callbacks suppressed [ 63.359253][ T4548] syz.2.204: attempt to access beyond end of device [ 63.359253][ T4548] loop2: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 63.380235][ T4548] syz.2.204: attempt to access beyond end of device [ 63.380235][ T4548] loop2: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 63.394103][ T4548] syz.2.204: attempt to access beyond end of device [ 63.394103][ T4548] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 63.407610][ T4548] buffer_io_error: 2 callbacks suppressed [ 63.407648][ T4548] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 63.423455][ T4548] syz.2.204: attempt to access beyond end of device [ 63.423455][ T4548] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 63.436876][ T4548] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 63.446748][ T4540] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.456042][ T4548] syz.2.204: attempt to access beyond end of device [ 63.456042][ T4548] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 63.469562][ T4548] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 63.483958][ T4548] syz.2.204: attempt to access beyond end of device [ 63.483958][ T4548] loop2: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 63.497318][ T4548] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 63.513608][ T4548] syz.2.204: attempt to access beyond end of device [ 63.513608][ T4548] loop2: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 63.527083][ T4548] Buffer I/O error on dev loop2, logical block 146, lost async page write [ 63.538186][ T4548] syz.2.204: attempt to access beyond end of device [ 63.538186][ T4548] loop2: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 63.551593][ T4548] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 63.560260][ T4548] syz.2.204: attempt to access beyond end of device [ 63.560260][ T4548] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 63.573629][ T4548] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 63.585249][ T4553] loop3: detected capacity change from 0 to 512 [ 63.591887][ T4553] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 63.602221][ T4548] syz.2.204: attempt to access beyond end of device [ 63.602221][ T4548] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 63.615581][ T4548] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 63.634012][ T4548] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 63.642753][ T4548] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 63.894028][ T4559] sctp: [Deprecated]: syz.2.208 (pid 4559) Use of int in max_burst socket option. [ 63.894028][ T4559] Use struct sctp_assoc_value instead [ 64.019921][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.093810][ T4550] Set syz1 is full, maxelem 65536 reached [ 64.163307][ T4564] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.266796][ T4564] tipc: Enabling of bearer rejected, failed to enable media [ 64.278784][ T4565] bond0: entered promiscuous mode [ 64.283851][ T4565] bond_slave_0: entered promiscuous mode [ 64.289603][ T4565] bond_slave_1: entered promiscuous mode [ 64.330314][ T4564] loop3: detected capacity change from 0 to 2050 [ 64.341298][ T4570] loop0: detected capacity change from 0 to 512 [ 64.350506][ T4572] netlink: 'syz.4.222': attribute type 8 has an invalid length. [ 64.384629][ T4570] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.398185][ T4564] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 64.418232][ T4570] EXT4-fs (loop0): 1 truncate cleaned up [ 64.444828][ T4570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.460800][ T4576] __nla_validate_parse: 5 callbacks suppressed [ 64.460818][ T4576] netlink: 232 bytes leftover after parsing attributes in process `syz.2.213'. [ 64.516170][ T4576] loop2: detected capacity change from 0 to 2048 [ 64.577234][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.656655][ T4583] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.213'. [ 64.674775][ T4576] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.213'. [ 64.709519][ T4587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 64.735778][ T4587] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 64.746386][ T4590] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.865800][ T4586] 9pnet: p9_errstr2errno: server reported unknown error @L  [ 64.932401][ T4580] loop3: detected capacity change from 0 to 128 [ 64.944070][ T4580] FAT-fs (loop3): bogus number of FAT structure [ 64.950471][ T4580] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 64.959964][ T4580] FAT-fs (loop3): Can't find a valid FAT filesystem [ 64.971143][ T4586] netlink: 52 bytes leftover after parsing attributes in process `syz.1.218'. [ 65.210052][ T29] kauditd_printk_skb: 523 callbacks suppressed [ 65.210070][ T29] audit: type=1326 audit(1748963476.130:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.239843][ T29] audit: type=1326 audit(1748963476.130:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.264038][ T29] audit: type=1326 audit(1748963476.130:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.287499][ T29] audit: type=1326 audit(1748963476.130:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.311037][ T29] audit: type=1326 audit(1748963476.130:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.334444][ T29] audit: type=1326 audit(1748963476.130:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.357858][ T29] audit: type=1326 audit(1748963476.130:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.417041][ T4611] dvmrp1: entered allmulticast mode [ 65.427744][ T4606] sctp: [Deprecated]: syz.0.223 (pid 4606) Use of int in max_burst socket option. [ 65.427744][ T4606] Use struct sctp_assoc_value instead [ 65.464756][ T29] audit: type=1326 audit(1748963476.390:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.488375][ T29] audit: type=1326 audit(1748963476.390:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4604 comm="syz.0.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.555638][ T29] audit: type=1326 audit(1748963476.480:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.0.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a96f9e969 code=0x7ffc0000 [ 65.580947][ T4617] netlink: 596 bytes leftover after parsing attributes in process `syz.1.226'. [ 65.676275][ T4625] bond0: entered promiscuous mode [ 65.681385][ T4625] bond_slave_0: entered promiscuous mode [ 65.687184][ T4625] bond_slave_1: entered promiscuous mode [ 65.720881][ T4627] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.737847][ T4627] tipc: Enabling of bearer rejected, failed to enable media [ 65.748257][ T4629] loop0: detected capacity change from 0 to 2048 [ 65.767229][ T4629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.900165][ T4640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.234'. [ 65.971154][ T4644] netlink: 108 bytes leftover after parsing attributes in process `syz.1.233'. [ 66.046270][ T4637] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 66.604126][ T4652] netlink: 232 bytes leftover after parsing attributes in process `syz.4.238'. [ 66.618630][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.627795][ T4652] loop4: detected capacity change from 0 to 2048 [ 66.715912][ T4653] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.238'. [ 66.909657][ T4657] loop0: detected capacity change from 0 to 2048 [ 66.926827][ T4661] loop2: detected capacity change from 0 to 2048 [ 66.934077][ T4657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.966872][ T4664] sctp: [Deprecated]: syz.3.239 (pid 4664) Use of int in max_burst socket option. [ 66.966872][ T4664] Use struct sctp_assoc_value instead [ 67.042666][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.051342][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.122427][ T4669] hsr_slave_0: left promiscuous mode [ 67.134545][ T4669] hsr_slave_1: left promiscuous mode [ 67.342748][ T4673] SELinux: syz.3.245 (4673) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.371686][ T4675] bond0: entered promiscuous mode [ 67.376879][ T4675] bond_slave_0: entered promiscuous mode [ 67.382690][ T4675] bond_slave_1: entered promiscuous mode [ 67.642747][ T4682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.653109][ T4682] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.690313][ T4680] loop2: detected capacity change from 0 to 512 [ 67.697134][ T4680] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.710066][ T4680] EXT4-fs (loop2): 1 truncate cleaned up [ 67.716092][ T4680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.804701][ T4682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.815214][ T4682] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.915935][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.944740][ T4686] C: renamed from team_slave_0 [ 67.962967][ T4686] netlink: 'syz.1.246': attribute type 3 has an invalid length. [ 67.970742][ T4686] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 68.001755][ T4689] dvmrp1: entered allmulticast mode [ 68.203370][ T4682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.213961][ T4682] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.312159][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.369540][ T4682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.380031][ T4682] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.523787][ T4682] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.532139][ T4682] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.582055][ T4682] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.590485][ T4682] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.962883][ T4682] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.971186][ T4682] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.055086][ T4682] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.063522][ T4682] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.171095][ T4717] loop4: detected capacity change from 0 to 512 [ 70.102823][ T4717] EXT4-fs: Ignoring removed i_version option [ 70.125983][ T4717] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.540704][ T4727] __nla_validate_parse: 9 callbacks suppressed [ 70.540761][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 70.590031][ T4717] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.846723][ T4717] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 70.880527][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 70.880544][ T29] audit: type=1326 audit(1748963481.800:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe8781e969 code=0x0 [ 70.965315][ T4731] loop2: detected capacity change from 0 to 128 [ 70.969010][ T29] audit: type=1326 audit(1748963481.870:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 70.995457][ T29] audit: type=1326 audit(1748963481.870:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.003299][ T4736] loop3: detected capacity change from 0 to 2048 [ 71.019131][ T29] audit: type=1326 audit(1748963481.870:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.048905][ T29] audit: type=1326 audit(1748963481.870:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.072415][ T29] audit: type=1326 audit(1748963481.870:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.095689][ T29] audit: type=1326 audit(1748963481.870:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.096723][ T4731] vfat: Unknown parameter '' [ 71.119180][ T29] audit: type=1326 audit(1748963481.870:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.120473][ T29] audit: type=1326 audit(1748963481.910:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.170866][ T29] audit: type=1326 audit(1748963481.910:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4732 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8781e969 code=0x7ffc0000 [ 71.221394][ T4736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.246300][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 71.353591][ T4731] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.362504][ T4731] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.371376][ T4731] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.379651][ T4745] xt_TCPMSS: Only works on TCP SYN packets [ 71.380097][ T4731] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.394856][ T4731] vxlan0: entered promiscuous mode [ 71.735047][ T4761] dvmrp1: entered allmulticast mode [ 71.816837][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.850321][ T4759] loop4: detected capacity change from 0 to 1024 [ 71.873581][ T4759] EXT4-fs: Ignoring removed orlov option [ 71.879372][ T4759] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.890639][ T4772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.269'. [ 71.907108][ T4759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.911901][ T4772] netlink: 340 bytes leftover after parsing attributes in process `syz.3.269'. [ 71.954004][ T4766] netlink: 108 bytes leftover after parsing attributes in process `syz.2.265'. [ 71.986821][ T4778] loop3: detected capacity change from 0 to 164 [ 72.008084][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.029390][ T4780] bond0: left promiscuous mode [ 72.034237][ T4780] bond_slave_0: left promiscuous mode [ 72.039706][ T4780] bond_slave_1: left promiscuous mode [ 72.056959][ T4783] loop2: detected capacity change from 0 to 1024 [ 72.083129][ T4783] EXT4-fs: Ignoring removed oldalloc option [ 72.089959][ T4783] EXT4-fs: Ignoring removed orlov option [ 72.100099][ T4787] netlink: 232 bytes leftover after parsing attributes in process `syz.4.270'. [ 72.115980][ T4783] EXT4-fs (loop2): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 72.133804][ T4780] netlink: 'syz.1.280': attribute type 13 has an invalid length. [ 72.141677][ T4780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 72.141772][ T4787] loop4: detected capacity change from 0 to 2048 [ 72.161956][ T4784] netlink: 52 bytes leftover after parsing attributes in process `syz.3.271'. [ 72.186812][ T4783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.191576][ T4784] netlink: 20 bytes leftover after parsing attributes in process `syz.3.271'. [ 72.219049][ T4783] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 72.241690][ T4794] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.270'. [ 72.256071][ T4783] EXT4-fs (loop2): Remounting filesystem read-only [ 72.319144][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.338000][ T4798] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 72.511018][ T4807] SELinux: syz.2.276 (4807) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 72.598281][ T4807] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.608824][ T4807] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.649891][ T4807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.660532][ T4807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.698857][ T4818] loop3: detected capacity change from 0 to 128 [ 72.732651][ T4807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.743015][ T4807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.743257][ T4816] loop0: detected capacity change from 0 to 2048 [ 72.781791][ T4816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.799322][ T4807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 72.809744][ T4807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.880857][ T4807] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.889280][ T4807] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.904815][ T4807] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.913106][ T4807] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.926530][ T4807] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.934859][ T4807] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.949394][ T4807] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.957688][ T4807] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.005333][ T4816] ================================================================== [ 73.013466][ T4816] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 73.022885][ T4816] [ 73.025226][ T4816] read-write to 0xffff8881004e9758 of 4 bytes by task 4825 on cpu 1: [ 73.033307][ T4816] __writeback_single_inode+0x1e3/0x7c0 [ 73.038897][ T4816] writeback_single_inode+0x167/0x3e0 [ 73.044304][ T4816] sync_inode_metadata+0x5b/0x90 [ 73.049272][ T4816] generic_buffers_fsync_noflush+0xd9/0x120 [ 73.055179][ T4816] ext4_sync_file+0x1ab/0x690 [ 73.059883][ T4816] vfs_fsync_range+0x10d/0x130 [ 73.064671][ T4816] ext4_buffered_write_iter+0x34f/0x3c0 [ 73.070243][ T4816] ext4_file_write_iter+0x383/0xf00 [ 73.075468][ T4816] iter_file_splice_write+0x5f2/0x970 [ 73.080874][ T4816] direct_splice_actor+0x153/0x2a0 [ 73.086020][ T4816] splice_direct_to_actor+0x30f/0x680 [ 73.091432][ T4816] do_splice_direct+0xda/0x150 [ 73.096211][ T4816] do_sendfile+0x380/0x650 [ 73.100662][ T4816] __x64_sys_sendfile64+0x105/0x150 [ 73.105886][ T4816] x64_sys_call+0xb39/0x2fb0 [ 73.110605][ T4816] do_syscall_64+0xd2/0x200 [ 73.115143][ T4816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.121082][ T4816] [ 73.123431][ T4816] read to 0xffff8881004e9758 of 4 bytes by task 4816 on cpu 0: [ 73.130991][ T4816] generic_buffers_fsync_noflush+0x80/0x120 [ 73.136917][ T4816] ext4_sync_file+0x1ab/0x690 [ 73.141641][ T4816] vfs_fsync_range+0x10d/0x130 [ 73.146460][ T4816] ext4_buffered_write_iter+0x34f/0x3c0 [ 73.152053][ T4816] ext4_file_write_iter+0x383/0xf00 [ 73.157284][ T4816] iter_file_splice_write+0x5f2/0x970 [ 73.162673][ T4816] direct_splice_actor+0x153/0x2a0 [ 73.167884][ T4816] splice_direct_to_actor+0x30f/0x680 [ 73.173282][ T4816] do_splice_direct+0xda/0x150 [ 73.178067][ T4816] do_sendfile+0x380/0x650 [ 73.182527][ T4816] __x64_sys_sendfile64+0x105/0x150 [ 73.187752][ T4816] x64_sys_call+0xb39/0x2fb0 [ 73.192377][ T4816] do_syscall_64+0xd2/0x200 [ 73.196916][ T4816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.202912][ T4816] [ 73.205260][ T4816] value changed: 0x00000022 -> 0x00000000 [ 73.210997][ T4816] [ 73.213335][ T4816] Reported by Kernel Concurrency Sanitizer on: [ 73.219505][ T4816] CPU: 0 UID: 0 PID: 4816 Comm: syz.0.279 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(voluntary) [ 73.231695][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.241787][ T4816] ================================================================== [ 73.547431][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.