last executing test programs: 5m59.427744548s ago: executing program 4 (id=672): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c092402020800018002092402010901080959090501094002061005072501000107000904020000010200000904020101"], 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) sched_setscheduler(0x0, 0x5, 0x0) ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246) writev(r7, &(0x7f0000000d80)=[{&(0x7f0000000440)="5bb26c08f797edb1f5e9285413074cdac440f7537069eefc2e8ef798aa2a53ed199e3f8d496a", 0x26}, {&(0x7f0000000880)="5ad89c468696eff2cefe6dbca5cd8a89a0e23ed2eee0ec61ab17d993c6d239fdfb8515896bc66c96241d659070d34a29757aaecc5cd4c4b9f7112b69981c9f2e547abc7e9fe6547f0cfafcf5ac0e076d907c5470fef15c5bfbd71cd7de47e2d84a709792a08b81ab406337978f2781067873e4ecb1a29de81691f4b4903b6be72d0780830c2b566e1dba47b663c6ec9e152a47a3b4c85b39f7f3eabce9f9b1e3a7f73af77246981bfb0565fb29d83f8fdd", 0xb1}, {&(0x7f0000000a80)="889752c8e2198dc6be344c6927dcc359961e95391a6a7d8e8bcc16f457253c7be43656a87a3f305b5252bcc50f5cef9ca5531bba1ee41ae4adb9856a9982225dc8ca48722e29061ebb327b94b250634ab372099be12ba36fea1d03c0b325565dd71a0ac230", 0x65}, {&(0x7f0000000480)="ed537e7c3d1c0a20093a7d45e0233d554cb38481fabd19ccb9a8167d75de1c95225ccd30a51b", 0x26}, {&(0x7f0000000b00)="89b5177c1f0b3addb51f06226a7f76d874a97b4cdbf38ec87956114d03c797dd2a9a459cf791476f03b8362b64f24ff5e035ea8c9b48b90f9b014fb506c26c1bb9f0c7d0c0f8cadc19002d73747c6d07b6095142d3d1229a591431c5f872e19b4a123d4e0a96263363a31fdaff4d5a7e0d5786eff7cdeed9378454db477454dd0a19703e06e1e620a864cfc1853ca16a9b2b79cfb4d5f30180cfd62153b7439d670a94e8f249e0d2af40639bb69bb80000000000000000", 0xb7}, {&(0x7f0000000bc0)="f93108c613828368ceb319119842cf691e403c016c3e34f16c8c05dd3be69c8d1196156ef38278ede9d83e64a02d0b151156a72f602a2f61bbe5a985d32122a96da9", 0x42}, {&(0x7f0000000a00)="18936d5775c94f85831e8a5c283dc50cd8a5a35457096976cb1c6779dfbfb0060d", 0x21}, {&(0x7f0000000c40)="79b998985b5302f6f48cd5b577ca8b455c678b581aa801b4bc41ee5d1661775907f22cb88c5ac577c963d31f41e073e8d9fc2991e77c4754a730f21c545c3516c10cd1d3e044cfe7ce9643cf14f7b41009e2d050297d235caee59d37b1b50ee4831297dc81dc13cffad4e47f90761f9ae5d0fc049049f147", 0x78}, {&(0x7f0000000f00)="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", 0xfe}], 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) fchmodat(0xffffffffffffffff, &(0x7f0000000200)='./file0/../file0\x00', 0x10c) 5m58.925323568s ago: executing program 4 (id=689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000e0ffffffff81000000000000000000000008000d"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001040)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40) 5m58.895294061s ago: executing program 4 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010100000000f00000000000000005000400000000000900020073797a30000000000500010007000000050005000a010000140007800800114000000000080012400000ffff12000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) ioctl$FICLONE(r1, 0x40049409, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0xc0105500, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000f80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='nr_inodes=m,inode32=']) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 5m58.824612176s ago: executing program 4 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 5m58.758999902s ago: executing program 4 (id=694): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r10 = dup(r9) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 5m58.740409993s ago: executing program 2 (id=695): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x2070b921, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x1, 0x594}}}}]}, 0x44}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r10 = dup(r9) write$P9_RLERRORu(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r10, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r12}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 5m58.542328859s ago: executing program 4 (id=700): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x401}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80130, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc10a, 0x4, @perf_config_ext={0x6, 0xc6b}, 0x0, 0x0, 0x7131, 0x0, 0x7fff, 0x200, 0x53a1, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=']) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5m58.524745s ago: executing program 32 (id=700): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x401}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x5, 0x0, 0x9, 0x0, 0x0, 0x80130, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc10a, 0x4, @perf_config_ext={0x6, 0xc6b}, 0x0, 0x0, 0x7131, 0x0, 0x7fff, 0x200, 0x53a1, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x6, 0x6, @remote}, 0x14) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=']) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5m58.434762888s ago: executing program 2 (id=702): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000100)=""/177, 0x39) pread64(r1, &(0x7f0000000280)=""/125, 0x7d, 0x5) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 5m58.376105873s ago: executing program 2 (id=703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000340)='\x00', &(0x7f00000003c0)='GPL\x00', &(0x7f0000000400)='logon\x00', &(0x7f00000004c0)='GPL\x00']}, &(0x7f00000006c0)={[&(0x7f0000000540)='e355a76a11a1be18', &(0x7f0000000580)='fscrypt:', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='\x00', &(0x7f0000000640)='\x00', &(0x7f0000000680)='\x00']}) 5m58.375837963s ago: executing program 2 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 5m58.345954945s ago: executing program 2 (id=705): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000002}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) r1 = msgget$private(0x0, 0x790) msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) msgctl$IPC_RMID(r1, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKMODE={0x5, 0x11, 0x1}, @IFLA_OPERSTATE={0x5, 0x10, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0, 0x0, 0x4e) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5m58.085578926s ago: executing program 2 (id=706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0xeffb, 0x9) syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0), &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) 5m58.085200636s ago: executing program 33 (id=706): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x0, 0xeffb, 0x9) syz_io_uring_setup(0x10d2, 0x0, &(0x7f00000000c0), &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r6) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) 1.927989975s ago: executing program 5 (id=8503): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0xff, 0x2}]}) 1.813356854s ago: executing program 5 (id=8506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0)) 1.781126587s ago: executing program 5 (id=8507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 1.753753139s ago: executing program 5 (id=8508): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0740ab0edca98b15e55d3a8026"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b7"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000340)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004fc0)=@delchain={0x1240, 0x65, 0x2, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x11d8, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11b0, 0x1, [@m_skbmod={0x10b4, 0xb, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="8933497753dd"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffff4, 0x0, 0xffffffffffffffff, 0xffff}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x100, 0x4, 0x100}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x6fa4, 0x3, 0x0, 0x1}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="3d209ce6ac25"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7364113918751d5d, 0x3, '\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x34, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x5, 0x6, 'J'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{}, {0x0, 0x5, [{0x7b, 0x1, 0x1, 0x7ff}]}}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x1240}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) close(r0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r9) prctl$PR_GET_CHILD_SUBREAPER(0x25) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x7ff, 0x401, 0x5}]}]}, 0x1ec}}, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_GET_CHILD_SUBREAPER(0x25) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.287671607s ago: executing program 1 (id=8522): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.225478551s ago: executing program 1 (id=8524): r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x244) socket(0x17, 0x1, 0x7ff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x40850) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r2 = signalfd4(r1, &(0x7f0000000180), 0x8, 0x0) ioctl$RTC_ALM_READ(r2, 0x40187013, 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000280)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000003c0)={0x0, 'veth0_vlan\x00', {0x3}, 0x81}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000600000000000088fde57d5408875531666f2e3a4747d500000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fusectl\x00', 0x400, &(0x7f0000000340)='%\\,)\\\x00') capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r7, &(0x7f0000000780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 1.198772843s ago: executing program 1 (id=8525): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) write$char_usb(r1, &(0x7f00000002c0)='AS', 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x1, 0xffffffffffffffff, 0xd) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r3) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646f74732c757365667265652c666d61736b3d30303030303030303030303032303030303030303027d95d216f647d483c3a4a00d8df6172642c6e6f646fd3732c6e6f646f74732c6e6f636173652c6e6f646f74732c00"], 0x1, 0x159, &(0x7f0000000340)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) 1.163605606s ago: executing program 5 (id=8526): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000010000000000009a000000000000495c47d855bd26", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0xf8, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fb, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x20, 0xc, 0x0, 0xfffd}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWSET={0x104, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_DESC={0x0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfffffff7}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x16f0}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xa}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfe}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xe3c}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9b}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x15d}, @NFTA_SET_FIELD_LEN={0xfffffffffffffe6e, 0x1, 0x1, 0x0, 0x4}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xbe}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xc2}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfffff735}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x2e96}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x809}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xbc700000}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xab0d}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x7}]}, {0x0, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x0, 0x1, 0x1, 0x0, 0xca}]}]}]}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x5, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x0, 0x4, 0x1, 0x0, 0x4}]}], {0x14}}, 0x12c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x24044888) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpid() syz_pidfd_open(r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000200000000000000000000e5000000000000"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.097860812s ago: executing program 5 (id=8528): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000003d80)=[{{&(0x7f0000001a00)=@can={0x1d, r1}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001a80)="3c351f69d9210311454873bc0f87b1e4d0e5ec72d3c54e4305b0820851f6ca8122dba8652bddc322972e461b95cdc1e317bb2ef0f68f3ff0fae39987ea5b09066b91040cb586da04dcb27083d5e277e12645ca022541add06ed87e8cc8b282127dcae76a06a9a191a8d71bffebe74049ba94649fefca5ae1", 0x78}, {&(0x7f0000001b00)="144a97d3bf5d7cf9e4c8a88a05c01e319f6dafce476c1eb429f6f56b0469a3d1c8372a50e065173f68b66fdfd7649fb8ea4e25d5a090fb81bfffb8589cf36c2b70ce95036815a64393934ccde57b3006d749e5db0f7bcad15d3ab8608f81ad57313272a14eb55d4a097106d612d28a8bdd1f5371e716af3c573876f41d1641d38fed214c8aef243ea946b22da4db6bfcac1f49163438a5a4809ccfb2eb595c7366d6b21dd86c6f2c4ee8826cd2682584398fa13dbb3a0f6b4162fc08ebdd6322d34079402cfddfcc66685204fc1856570ae8c6ca4487184ac1350e1135d9f3c72c0abe7f21c8c4322790ff15eedf2fd0e1308a9bcb590f86dd78fd567b0b9a33c295afda5433bfc197bdca052bbddf2f369d58a1608c129c1a0ee16d154464900f71370f25f220246047016be4f241fef9169252345db3df5ecd70622499040f939b234fcb089e556e2f6339fbaad42bac3a84fbeebe59018bff6770f09c8f556b29150871d6e039c7341bc65b7b8c916cea8f4f799c452d407aa091bece89d409301651c88699ea2cc1b0050d6827b02cb53c63727557d317c618a668904f7dd80c1e3b9e2ceb25f920ab292d353c27a18bf467a9bd6a4ac1993f9ce2c4c0eab9e583050791068fee4a20a31b2f55b406ee97f63a3447df8e29fb07702abc755bc21a3e067aa78224e23820567e4db0d6b3bca35007b53705edde421a9f613721d8fb0bbea70175b2bb3c1feeaa51b5c8905693f21061b0b726fcba000f56671991a65e0cf2911f52a1e9e54ac7b5e765f1e919356abc234aa2f5d2dabd71cec6ac99a5cffe441de5086f020bfbb403fb7adc6d0a606c3e45398945139099e976430e44586ab83eca33896c300ece2ec21af85c75908a092fbda01f2fff4d54c8963a6fb591dcade3af5a78f65d8673222e06b6e1c30759eae41a4cf97a93987fc1b9a57818b8eb666494fe21999726c7bde72db669fe485fb2813aaada8d6e59132c421c070874bbc870526f6d4f9e090c566b1cb7ce5dc7653f3dba5d02e5a2273b22e55e72f12641579fe2dc276894a4d94e76ac1f281ef394237ab2f1b38689d1950fc033031f8759b1ab3f239bc7c315b646ce1243d8afc427fd51cd25f541d08390d2dcc8180a2bf9d357676050e05bebe6243c525460b21ebe3d8ee1f223710be2fa9ce3b349b7e3b2098d52fe514865ffdf852296e25eea0da62e7699aa5530a0c92103fb103fb502f3bfcf86cee56fd06b06d24caba19eb0949edda0f92a1d4f95b4eb513129851171fd466b5be86ecc68703b7b54127e11fa6d1a0e467ed2be801876894e1d15f7cda540d204bda763d21a43eaced4849bb0ee0350dcc5590397a2c57c7b78ddb6376cf958e963a6de613448ef5c5a2e20f84159ce1f5d1ef1b5a2fa1f786b4ca5e20e2e9bdf8bad973d328ab73fe7bf303259ff75b2df787a61d11849ca1dc259b7da933e7af07a537a0bf59d5f243c756c29dc814ac81d484c5e008df852df565306d3148c380bb7d8b16bf214119c2490cdc3236a1f62658da660358c80099c0bee6595aec7c2139731a2d1928cd2821441af2af95c060c015438ddd2024d945f5bf706f03d4840027ad92af8cb3fc4585ad9602d2df161618a58743591eb65667c04cf89135f870bb8ff8e46040342823fc4f30500b86d11865543ea561e79c5fe6895eab388322abe5eaf129331a590b71b83e14816111c10e477733a059369dfb01e48393ae98ea1d2831d9aa8dc038b348f92591837ba0f18f849d5508ca76c6487d5d53fe1f90f8cde39c564c6397a8ef0548404c54f2899ee4b3d0858c85921bd5de096e178aa31caca04c89de62534a66bbc0d825beec7be0db194a9c50a33e8d7b5e4d416aa2666cd350d3d5938a9fb4faf1d692ac9d7ac49b4f4784bf86167fcb8960f84b5c554c9b0fbbb8ebf74ee6644d682469b51292b433712a5af087240b0a3d51f442ce7a1f9ff9f62845138d774ce1a1dca92e356f29e972cb9abbabc1813169db4dfb926545029f4476e284195f55a24ef6c49452ab60ccfd53e153b6aff97f3341c38a2d564c4a83c9712ea1b5452542eba6eeec7962565603dea6950198118ee5c8f1912eb9a32477faa486588d09e7af304aca2ac19da4af79078002681a7f58a6d0bc8e74af9c17aab05a793bffa7098dbfc4ebc326c794d92adfbe8d6df931367c3d0d8b947ccaafd82b6e42d843e27ad43a8bbff09e07d1d09119b6fb7a3de23183cd28deb1ed85245f5a79a7610c99ed11adbef4c88d38887fc465b9cb581179409e527d24a6e14477432f7e19dff8f718c0ab29621fdeedfe197518d3c38b04e67b9a33c8230533a5ef8f03320d2243a815053a53599de71e22ca7cc88bda7f5f2162e64efdc15d91f7ea1bcfee96c3a2ff15c175add1def03a88d8bc6c0fed618accb4e7e003772427701ec2b12ee3bef6ac31fa0438850335b56cc2d58b2392e8cee7f3fc06a175ab27b0c7162922005785116361709bda8ed93899e083a08b0e52f599f3efc91306e3707fd3974c32941ad486157655e8edabe7e5820ab6f2ef44de987fd2edac30d04e6c30b87a1c8634298f7eaf336bda072ce56c24447eb85bf8b3e6f10762249567ecf9c27f969c87af94fa5ae2785d7a1a903ef026335e11469da78280d8bc2968335a3cd549c62ad81f307cbf5de55aba21367c9943929f1d7cac869abec63f23f55fa4662e2117ead6f6a08091f320e9a5a869f5a47bfa98b4e31e88d8e4c5671a435065bea6a6127c657d8cd6f2e02578252b31c35eb7f1b8c494361c686ef28dcf0eb420d2a527b56f041e7151897451813b4e83b8ecc4870d91afc1f4d79215e11aea4d8c6b9a82af97c832b71502feb2a89e7712f6c99845e589fb3021282f5e84e64bfbcb40497b57a6791c8616c2436db4a27edeae9e0744280b3e02fec38c60f73055359ad2771667ff34526f3435324998d62968a18a23258bf8e3fecc25b6ee7f3055f0a82cee7119ca3f04c093da7efe0b4c23c73fbab56bb44d21142deec5120674d8eb66c2624f662a22a979c679d2d56a9792bf08a82d90cdaeac9c0ab72503933d155e8d17a475b1a961e781383356ffd9c86c1b0feb1baa91f63f858b936370b315fd7b8e5d4e9e80cf2bbc91040123cac95db9e4d00670fa05611c33f27e882a1197b2824f817142b618d3f53fbb066d4acaa2b9fe0054cb7173d4d36388e3401e14e4afd28c61901de0607a1bb062aa88440d29b01cc2e4e195765b9d8cd47c676a24d5b47418ed943f4be66118b0b3305cf27bcdf92b48c7f1371cab4eb0d8a2d68c575dc09ac5d44eb003efff4d2986e9189c1326f519756d6742a11de79cca12260db465217ddf5fc641ecc225efe487f60187fd4abee857e00d0318dfd2393d859393179c22a32ed4e1a456e51d58be547ea31fb4866351e3e2f0170efa0641e2748224bdb30ac0e0796f70fc47140665ef3c39ddaea3245727c4caf684d4234e935d65364ad0f665c8d9a4aa1e6aa87e544a86a6d1dafbf0f6672ee9330b461d07da3ac09220820a6fd6918c04c6982261488eb566926a7f02165795ed63fb4b44bd2efa0a63eb79895f6e2198333cadcd8497f37bd36e561f20b1c2ef1ff5c0e42ca0423b0a0cc749ba558e8d310b90313e136696bca2f36cb916306612446b73dd576d7cd9f33fbac5980337e634865e4c3552a0b6ff38fd804b99cfd92eb15b432829e3dc2e0bde5597e77fe2bf9c114de58d50cc5436024db8127f6b3c2e7f1e0e141d02460c828be1c77dd98d5580d196065faf14160536d9f1b7846f1653b2f57ef8cb959b7cb9297fa07439677e6d661389d8c1bf5fb9c571a47402878fb97b4e9e327d93552300eecdc48ed8ba47aa865a68cfbb77cf5e8d95752d0abdca64a9404ba165d3cbc1b67bf203fe3a9897d96d2e3b392f6369ce915343bfd6d70a28174e23a2b25906316e498f0b265067b0e039e9671cecc0114795aebb0b0c2318b297800f5a20448c9c4cc9eaa0ea9d9a479c2640c9b8327fa014e38defc2af662caf80983317cf838b20c50e59743212eef0bed6a343a8d8215cdae458eaadd56091176944bdf2f61203e6486178060d0b795279996b3a044eea0795408556c32190183a971afe6b42cc5db7fc683956dc0e3952b7c14cba7a4465e4b3416c5beaae5f17f60473f378a0acfb397aa81ef45632e83c9aa0b649b2aa372be39ed3f2d99f03ac21efa5662c7a040f7d043a26f6128a967e02d327fb4a227bc1e3dd39794da15fcea46bd643d9abbddd7efb0ca23f9465eacabbccbde488706f564ae43e0eb4a8905fb0e2a7c932fc10b4a8db3ba54b677d5f9b05819812688b86a281e6afb230c196de8be01402f581b304f3be98866679098787d259c1b4dbbb3fcac9a686175b343746484754d66e8815f8972e92ae9abdace7866c09bb786e3c76ca6a38260165410b5dfa9878e0de19a8dee7368a0670d20607d4ca6501ba411718409c33fef9b7355a8a48d363fbed7fc48374f3bd5b548d8727c19543d5a620df4de4184fc48490becab420e8a41d12d9e75ca8319e33dca751f84e61948bfb1252114dd47220a9094ebb750170ffa0570f914164345f10a24ae9120d91113c6d029516784570bcb550daf401d8438c4d8f52d829b06bf0456a3d5eb35c67b6a24dac4d9f6a7b3ff62562f5e682d013a5ed6e6e6e11f434e52f48ec775f52db58cf0a7e785c1d5f846a526a0311d11b419217719f4f2c53a8fad1cd5a2b0340a5247c52382f85799bc0946a5ca5185df602c5e98119d59a89f81e3bd0969f641c39d0ebb4cc1bf66681925a13395e7660217724f622acd6ba08f5949c0990b138ee3166de831d1ecff275b502ac01dd3d590a54666e99dc28d86a1b82ca189d005cc69cb330e67542858145c756c4a6dfb5e127b127e5d16b93239edebe04ae2a432c1a9b27b047b2efc370446ea0054d9bfb7c77d8c10aa09e9f40cbc4928fb891a6bc3fcf771b6e5a47515b647d1f65cfba565322cfc5129a042c606dc2e1eb6575575c2d390c9d4093a7f6d250cdf99a8a46fe55a42dda2d515694ca75b9a2a999805e137820aef92ec5f0a18648fde35588715b7418a9b6d6145dd04b4a58f2e1d6260b25703d44b8af4c5537a580399a572cf3ec436e2440f3b09789566caaab664931fc7d53ccf42ee08961cb1967a15e4b4fc19d8e88ea1de0c5cb3516126238bbd4ae9cfabd0e8747910d5f59cf44ba70561aef7891b741603276db73b3705598ada4e2137dbec893a8c2bfcb930b514a60186cd15c40f9b403dd8f0117ebe29d022333dc040c047cf866e39560dd329b7d2dc81c8d54d52a8575b845e9dfea763f1e1b84e962034cb94467133d855407845d0e433fef8b3701855c6d59d80a2ad7c37e8fd6caecc07d70acc9480db6f59009d05e858ef54c82cd73200ad85eb91efead7c95a252c7846adcb943eafdb4ad241a7b980b3c5701ddf34b82f9ddddf208397974aad7fc915c88d9abcb1b9681fb6ada6a936c0bb40be9e33c8729b19823e278c11a277690bb2f43cb1909784d76e19caca96b8e3364ca9a23e619aa68af55f7d0e2ed2fc1d11cd73d93f177e8284797cc8a68b25ae1a283c6218cd9f5cfa6b00cfc03f688907cde499cf17f6e383eda31a99f6f231ceee99c7eb01d56567eee73b66433028a4db0783ce20539e8ed4cd1a8a81e1db9afc1c6c7abc5a88bfdba923267713c62a311403e3659101b36e3ff04f4dd654644b3d9ca4884ee09af83c48", 0x1000}], 0x2, &(0x7f0000002b40)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000002c00)="66e276a14236e6ff02acd3bc89274b2f95690c42133b305e95d009db72ac37da10b45cf7337fe5f032738df9e88bb7e029a3e5c71f5846d73758f65c60e0fca17aee1fc4a6dd8dd5b672ce06e25dacb62aa0d147c52adefbc57652e71490ccdf530cd7b1c2a0fb913ba0cad58659c407bc6bdf9f061ec1e2d4e70c6493dcb00f0acab7fdefd1779afd6337beb9bfbde608a18d0fe26468aeaca0feee3e507c8919729fe47a05012b0f8b6a3d6d3aa5b58f0491b6d036f16713801d0980", 0xbd}, {&(0x7f0000002cc0)="39299f807e65681a5d6d3fdf23ea492c7989da01501d7bf2b04a8ad4adaf", 0x1e}, {&(0x7f0000002d00)="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", 0x630}], 0x3, &(0x7f0000003d40)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}], 0x18}}], 0x2, 0x4000000) 944.895344ms ago: executing program 0 (id=8532): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) 944.370594ms ago: executing program 0 (id=8533): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0740ab0edca98b15e55d3a8026"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b7"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000340)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004fc0)=@delchain={0x1240, 0x65, 0x2, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x11d8, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11b0, 0x1, [@m_skbmod={0x10b4, 0xb, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="8933497753dd"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffff4, 0x0, 0xffffffffffffffff, 0xffff}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x100, 0x4, 0x100}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x6fa4, 0x3, 0x0, 0x1}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="3d209ce6ac25"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7364113918751d5d, 0x3, '\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x34, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x5, 0x6, 'J'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{}, {0x0, 0x5, [{0x7b, 0x1, 0x1, 0x7ff}]}}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x1240}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) close(r0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r9) prctl$PR_GET_CHILD_SUBREAPER(0x25) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x7ff, 0x401, 0x5}]}]}, 0x1ec}}, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_GET_CHILD_SUBREAPER(0x25) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 856.388601ms ago: executing program 1 (id=8534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0)) 839.023482ms ago: executing program 1 (id=8535): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000000)='./cgroup\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000002080)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) (fail_nth: 2) 731.848601ms ago: executing program 1 (id=8537): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@ipv6_newrule={0x60, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @private0}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x800}, @FRA_DST={0x14, 0x1, @remote}]}, 0x60}}, 0x20040044) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02", @ANYBLOB="3ae8ef4b5e4aad464f8c4f02971d3b663949b00f0d07144f43933960481abe116a71e9b07918dc3ac05360858a42d120d67f8cd265459bbc0ecdf7aa2c662f8d3bc7ea516eac7bad12c5f69bd8009859b9f771085a7b0e7ed9d6dd5dbc89affdcdaf79403424dd4dccb798f69642d63df94c9df759a1df1969de5ba741801d2404edf7144442ae6ea76c1552603ac354549eeabf0a17386a38482b786be5a1e1cfe6b955f98f60724bdcb734dbf1146ce2236679ed4375f7"], 0x5c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000e40)=@sr0, 0x0, &(0x7f0000000fc0)) 672.081576ms ago: executing program 0 (id=8538): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 631.426129ms ago: executing program 0 (id=8539): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) write$char_usb(r2, &(0x7f00000002c0)='AS', 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x4, 0x0, 0x0, 0x21ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa80}, 0x0, 0x1, 0xffffffffffffffff, 0xd) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x10, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x64, 0x8b}, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f646f74732c757365667265652c666d61736b3d30303030303030303030303032303030303030303027d95d216f647d483c3a4a00d8df6172642c6e6f646fd3732c6e6f646f74732c6e6f636173652c6e6f646f74732c00"], 0x1, 0x159, &(0x7f0000000340)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f) 468.175222ms ago: executing program 6 (id=8543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800e50000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 455.141053ms ago: executing program 6 (id=8545): syz_io_uring_setup(0x10d, 0x0, 0x0, &(0x7f0000000280)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2a}, 0x48) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000005080)={{0x1, 0x1, 0x18, r6}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r8, @ANYBLOB="6efefb2a2ef5b409c4f737252ed1e3876bef7f9906a62d3033c6dcae0a6fb0c2d552e0a2e3a7cb12dd124e5e2048e3c01baa5f85faa7cc1c3504825ecc6c0a162a9c82e488e11f6d88f8486b5e4e824e52c9750abacfa25a673c466124f942d9da"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) timer_create(0x2, &(0x7f0000000240)={0x0, 0x22, 0x0, @tid=r3}, &(0x7f00000002c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2000, @fd, 0x2, 0x5, 0x8020, 0x7, 0x0, {0x3}}) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r10, 0x0, 0x8}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0xffffffff, @private1, 0xfff}, @in={0x2, 0x0, @multicast2}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x30}, 0x7e6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0x449, 0x8000, 0x3ff, 0x8, r11}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000680)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x25dfdbfb, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x6, 0x4}, {0x35, 0x0, 0x5}, {0x0, 0x0, 0x3b}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) 399.908978ms ago: executing program 6 (id=8548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa7b4236b318185a1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003000128008000100736974002400028008000c00d773000008000100", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x40800) 279.781947ms ago: executing program 6 (id=8550): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0740ab0edca98b15e55d3a8026"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b7"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000340)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1}, 0x7fff}], 0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000004fc0)=@delchain={0x1240, 0x65, 0x2, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x11d8, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x11b0, 0x1, [@m_skbmod={0x10b4, 0xb, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="8933497753dd"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffff4, 0x0, 0xffffffffffffffff, 0xffff}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x100, 0x4, 0x100}, 0x4}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x6fa4, 0x3, 0x0, 0x1}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="3d209ce6ac25"}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7364113918751d5d, 0x3, '\x00'}]}, {0x59, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x34, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x34, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0x5, 0x6, 'J'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BPF_OPS={{}, {0x0, 0x5, [{0x7b, 0x1, 0x1, 0x7ff}]}}, @TCA_BPF_FD={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}]}, 0x1240}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) close(r0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r9) prctl$PR_GET_CHILD_SUBREAPER(0x25) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ec, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0xc4, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in=@multicast1, 0x4d4, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3504, 0x2, 0x2, 0x6, 0x0, 0x1}, {{@in=@broadcast, 0x4d2, 0x6c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x5, 0x7ff, 0x401, 0x5}]}]}, 0x1ec}}, 0x0) getsockopt$inet6_tcp_int(r10, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_GET_CHILD_SUBREAPER(0x25) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 272.309258ms ago: executing program 0 (id=8551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x6b, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c6173"], 0x140}}, 0x0) 232.733651ms ago: executing program 3 (id=8553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001300)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0xffffffff, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x0, 0x2, 0x4, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x800000, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x10, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x40001000, 0x0, 0xb8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x2, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0x401, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0x80000007, 0x5, 0x1, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x9, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0xfffffffe, 0x8fb, 0x84, 0x9, 0x4, 0x9, 0x80000001, 0x6, 0x0, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x4, 0x4, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x80000001, 0x2, 0x4, 0x0, 0x4, 0x8000, 0x0, 0x9, 0x80, 0x7, 0xe9, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x7, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0xfffffffe, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x6, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x3, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0x1, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x1, 0x10005, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x4, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x5, 0x9, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0x0, 0x1, 0x40000723, 0x0, 0xe, 0xe, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xffffffff, 0x2, 0x7f, 0x2, 0x80000001, 0x0, 0x9, 0xf, 0xfffffffe, 0x928, 0x4, 0x2, 0x5, 0xd1b, 0xb87, 0x3, 0x8d8d, 0x55, 0x101, 0x8, 0x64e8, 0x8, 0x82c, 0x772, 0x80a, 0xfff, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) migrate_pages(0x0, 0x2, 0x0, &(0x7f0000000400)=0x3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r4}, 0x20) sendmsg$nl_route(r4, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000004300020025bd7000ffdbdf251c0000000500"/32], 0x20}, 0x1, 0x0, 0x0, 0xc005}, 0x4000000) (async) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000c00)={[], [{@smackfsroot={'smackfsroot', 0x3d, ')'}}, {@uid_lt}, {@audit}, {@context={'context', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'GPL\x00'}}]}, 0x6, 0x5ad, &(0x7f0000000180)="$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") syz_open_dev$sg(&(0x7f0000000800), 0x3, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 144.978418ms ago: executing program 0 (id=8555): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@ipv6_newrule={0x60, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10017}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @private0}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x800}, @FRA_DST={0x14, 0x1, @remote}]}, 0x60}}, 0x20040044) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc02", @ANYBLOB="3ae8ef4b5e4aad464f8c4f02971d3b663949b00f0d07144f43933960481abe116a71e9b07918dc3ac05360858a42d120d67f8cd265459bbc0ecdf7aa2c662f8d3bc7ea516eac7bad12c5f69bd8009859b9f771085a7b0e7ed9d6dd5dbc89affdcdaf79403424dd4dccb798f69642d63df94c9df759a1df1969de5ba741801d2404edf7144442ae6ea76c1552603ac354549eeabf0a17386a38482b786be5a1e1cfe6b955f98f60724bdcb734dbf1146ce2236679ed4375f7"], 0x5c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) r3 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000e40)=@sr0, 0x0, &(0x7f0000000fc0)) 105.103921ms ago: executing program 3 (id=8556): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) 104.801322ms ago: executing program 3 (id=8557): creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) chown(&(0x7f0000006300)='./file0\x00', 0x0, 0x0) 79.340983ms ago: executing program 3 (id=8558): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x2b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 71.987424ms ago: executing program 6 (id=8559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 55.980675ms ago: executing program 3 (id=8560): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffefffffffffff, r2, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x1) acct(&(0x7f0000000340)='\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = syz_open_dev$vcsu(&(0x7f0000000100), 0x9, 0x10080) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000007020000f8ffffffb703000008000000b70400000000000085000000010000009500"/65], &(0x7f0000000240)='GPL\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r3}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0x8000000100000}, 0x18) copy_file_range(r4, &(0x7f00000005c0)=0x7, r5, &(0x7f0000000600)=0xfff, 0x3, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="8c32d000000000020000000000000000"], 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000500), 0x1, 0x4f8, &(0x7f0000001900)="$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") r7 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) io_uring_enter(r9, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=8561): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000140)=[{0x3, 0xd, 0x6, 0xf2, @time={0x23, 0x7}, {0x0, 0x1}, {}, @connect={{0xa, 0xff}, {0xdf, 0x4}}}, {0x6, 0x0, 0x1, 0x81, @tick=0x2, {0x8, 0x30}, {0x2}, @result={0x0, 0x800}}], 0x38) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x49}, {0xffffffffffffffff, 0x7419}, {r0, 0xd400}, {r1, 0x200}], 0x4, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)={[0xc99]}, 0x8) kernel console output (not intermixed with test programs): imestamps until 2038-01-19 (0x7fffffff) [ 402.160309][T24819] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.165363][T24837] hub 9-0:1.0: USB hub found [ 402.180859][T24837] hub 9-0:1.0: 8 ports detected [ 402.230855][T24817] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 402.288107][T24845] loop5: detected capacity change from 0 to 512 [ 402.294922][T24845] EXT4-fs: Ignoring removed nobh option [ 402.323116][T24845] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.7902: corrupted inode contents [ 402.353053][T24856] loop6: detected capacity change from 0 to 512 [ 402.376791][T24856] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7906: bg 0: block 248: padding at end of block bitmap is not set [ 402.392730][T24845] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.7902: mark_inode_dirty error [ 402.409790][T24856] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7906: Failed to acquire dquot type 1 [ 402.428865][T24845] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.7902: corrupted inode contents [ 402.442737][T24856] EXT4-fs (loop6): 1 truncate cleaned up [ 402.448770][T24856] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.472726][T24856] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.490642][T24845] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.7902: mark_inode_dirty error [ 402.538018][T24845] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7902: Failed to acquire dquot type 0 [ 402.565568][T21788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.574785][T24845] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7902: corrupted inode contents [ 402.587341][ T3717] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 1 [ 402.599564][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.635535][T24845] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.7902: mark_inode_dirty error [ 402.663031][T24845] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7902: corrupted inode contents [ 402.692788][T24845] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.7902: mark_inode_dirty error [ 402.729069][T24864] loop6: detected capacity change from 0 to 512 [ 402.745273][T24845] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7902: corrupted inode contents [ 402.760967][ T29] kauditd_printk_skb: 833 callbacks suppressed [ 402.760982][ T29] audit: type=1326 audit(1754682175.856:49329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e51d95ba7 code=0x7ffc0000 [ 402.773669][T24845] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 402.801063][T24864] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 402.809147][T24864] EXT4-fs (loop6): orphan cleanup on readonly fs [ 402.810071][ T29] audit: type=1326 audit(1754682175.886:49330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24838 comm="syz.3.7900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 402.839055][ T29] audit: type=1326 audit(1754682175.886:49331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e51d3add9 code=0x7ffc0000 [ 402.862649][ T29] audit: type=1326 audit(1754682175.886:49332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e51d95ba7 code=0x7ffc0000 [ 402.886128][ T29] audit: type=1326 audit(1754682175.886:49333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e51d3add9 code=0x7ffc0000 [ 402.909595][ T29] audit: type=1326 audit(1754682175.886:49334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 402.933166][ T29] audit: type=1326 audit(1754682175.896:49335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24838 comm="syz.3.7900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 402.938215][T24864] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.7909: corrupted inode contents [ 402.956897][ T29] audit: type=1326 audit(1754682175.896:49336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e51d95ba7 code=0x7ffc0000 [ 402.992028][ T29] audit: type=1326 audit(1754682175.896:49337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e51d3add9 code=0x7ffc0000 [ 403.015514][ T29] audit: type=1326 audit(1754682175.896:49338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24857 comm="syz.1.7907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 403.041301][T24845] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7902: corrupted inode contents [ 403.105530][T24864] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.7909: mark_inode_dirty error [ 403.123422][T24845] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.7902: mark_inode_dirty error [ 403.135656][T24864] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.7909: corrupted inode contents [ 403.148436][T24845] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 403.158803][T24864] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.7909: mark_inode_dirty error [ 403.171921][T24845] EXT4-fs (loop5): 1 truncate cleaned up [ 403.177932][T24845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.191594][T24864] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.7909: corrupted inode contents [ 403.236646][T24845] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.247168][T24864] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 403.273227][T24845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.282796][T24864] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.7909: corrupted inode contents [ 403.295455][T24864] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.7909: mark_inode_dirty error [ 403.308180][T24864] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 403.320495][T24864] EXT4-fs (loop6): 1 truncate cleaned up [ 403.327724][T24845] __nla_validate_parse: 15 callbacks suppressed [ 403.327736][T24845] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.7902'. [ 403.344744][ T3725] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 403.357943][T24864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.379239][T24845] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 403.380727][T24881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7916'. [ 403.418845][T24864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7909'. [ 403.439719][T21788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.481402][T24889] loop3: detected capacity change from 0 to 512 [ 403.498798][T24889] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 403.504672][T24891] lo speed is unknown, defaulting to 1000 [ 403.528537][T24891] lo speed is unknown, defaulting to 1000 [ 403.561494][T24896] netlink: 'syz.6.7921': attribute type 3 has an invalid length. [ 403.600941][T24889] EXT4-fs (loop3): 1 truncate cleaned up [ 403.607015][T24889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.645144][T24889] EXT4-fs error (device loop3): __ext4_iget:5464: inode #12: block 17104912: comm syz.3.7920: invalid block [ 403.657748][T24889] EXT4-fs error (device loop3): __ext4_iget:5464: inode #12: block 17104912: comm syz.3.7920: invalid block [ 403.701170][T24908] lo speed is unknown, defaulting to 1000 [ 403.707760][T24889] EXT4-fs error (device loop3): __ext4_iget:5464: inode #12: block 17104912: comm syz.3.7920: invalid block [ 403.719058][T24908] lo speed is unknown, defaulting to 1000 [ 403.731036][T24910] loop6: detected capacity change from 0 to 512 [ 403.744240][T20166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.801825][T24911] netlink: 'syz.1.7927': attribute type 3 has an invalid length. [ 403.820239][T24910] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7928: bg 0: block 248: padding at end of block bitmap is not set [ 403.838720][T24910] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7928: Failed to acquire dquot type 1 [ 403.854768][T24920] loop3: detected capacity change from 0 to 512 [ 403.881101][T24910] EXT4-fs (loop6): 1 truncate cleaned up [ 403.887749][T24910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.910841][T24920] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 403.911396][T24910] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.935787][T24920] EXT4-fs (loop3): orphan cleanup on readonly fs [ 403.951387][T24920] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7932: corrupted inode contents [ 403.975009][T24920] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.7932: mark_inode_dirty error [ 403.975892][T21788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.986792][T24920] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7932: corrupted inode contents [ 404.007611][ T3717] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 1 [ 404.028746][T24920] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.7932: mark_inode_dirty error [ 404.043322][T24920] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7932: corrupted inode contents [ 404.059753][T24920] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 404.068446][T24920] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7932: corrupted inode contents [ 404.080650][T24920] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.7932: mark_inode_dirty error [ 404.094532][T24920] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 404.116025][T24931] lo speed is unknown, defaulting to 1000 [ 404.122195][T24931] lo speed is unknown, defaulting to 1000 [ 404.135241][T24921] lo speed is unknown, defaulting to 1000 [ 404.144112][T24920] EXT4-fs (loop3): 1 truncate cleaned up [ 404.150499][ T3725] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 404.163848][T24920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.170940][T24938] netlink: 'syz.6.7934': attribute type 3 has an invalid length. [ 404.184023][T24921] lo speed is unknown, defaulting to 1000 [ 404.210393][T20166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.342674][T24921] chnl_net:caif_netlink_parms(): no params data found [ 404.356556][T24958] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 404.364304][T24958] vhci_hcd: invalid port number 253 [ 404.369570][T24958] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 404.372688][T24960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7943'. [ 404.429113][T24921] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.436194][T24921] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.443588][T24921] bridge_slave_0: entered allmulticast mode [ 404.444774][T24967] loop5: detected capacity change from 0 to 512 [ 404.451838][T24921] bridge_slave_0: entered promiscuous mode [ 404.463348][T24921] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.470470][T24921] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.471857][T24967] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 404.477653][T24921] bridge_slave_1: entered allmulticast mode [ 404.487623][T24967] EXT4-fs (loop5): orphan cleanup on readonly fs [ 404.492137][T24921] bridge_slave_1: entered promiscuous mode [ 404.499948][T24967] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7945: corrupted inode contents [ 404.515655][T24967] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.7945: mark_inode_dirty error [ 404.533011][T24967] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7945: corrupted inode contents [ 404.534180][T24921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.545307][T24967] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.7945: mark_inode_dirty error [ 404.557444][T24921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.565913][T24967] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7945: corrupted inode contents [ 404.586372][T24967] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 404.595467][T24967] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.7945: corrupted inode contents [ 404.609497][T24921] team0: Port device team_slave_0 added [ 404.615364][T24967] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.7945: mark_inode_dirty error [ 404.625414][T24921] team0: Port device team_slave_1 added [ 404.633836][T24967] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 404.643584][T24967] EXT4-fs (loop5): 1 truncate cleaned up [ 404.649738][ T3720] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 1 [ 404.657874][T24973] lo speed is unknown, defaulting to 1000 [ 404.663545][T24921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.667572][T24967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.674110][T24921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.712334][T24921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.724414][T24973] lo speed is unknown, defaulting to 1000 [ 404.731961][T24921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.738988][T24921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.764934][T24921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.765591][T24974] netlink: 'syz.1.7946': attribute type 3 has an invalid length. [ 404.778281][T24967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7945'. [ 404.807527][T22436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.823897][T24921] hsr_slave_0: entered promiscuous mode [ 404.830246][T24921] hsr_slave_1: entered promiscuous mode [ 404.836350][T24921] debugfs: 'hsr0' already exists in 'hsr' [ 404.842124][T24921] Cannot create hsr debugfs directory [ 404.955756][T24986] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 404.963625][T24986] vhci_hcd: invalid port number 253 [ 404.968948][T24986] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 405.011327][T24991] loop1: detected capacity change from 0 to 512 [ 405.028982][T24991] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 405.037106][T24991] EXT4-fs (loop1): orphan cleanup on readonly fs [ 405.044710][T24991] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7952: corrupted inode contents [ 405.056879][T24991] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.7952: mark_inode_dirty error [ 405.068525][T24991] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7952: corrupted inode contents [ 405.081683][T24991] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.7952: mark_inode_dirty error [ 405.093202][T24991] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7952: corrupted inode contents [ 405.105316][T24991] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 405.114321][T24991] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7952: corrupted inode contents [ 405.126595][T24991] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.7952: mark_inode_dirty error [ 405.140137][T24991] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 405.149672][T24991] EXT4-fs (loop1): 1 truncate cleaned up [ 405.155644][ T3718] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:25: Failed to release dquot type 1 [ 405.169762][T24991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 405.191361][ T3725] bridge_slave_1: left allmulticast mode [ 405.197053][ T3725] bridge_slave_1: left promiscuous mode [ 405.202805][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.219640][ T3725] bridge_slave_0: left allmulticast mode [ 405.225346][ T3725] bridge_slave_0: left promiscuous mode [ 405.231040][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.297649][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.322874][T25002] loop1: detected capacity change from 0 to 512 [ 405.357325][T25002] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 405.380366][T25002] EXT4-fs (loop1): 1 truncate cleaned up [ 405.387853][T25002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.404447][T25002] EXT4-fs error (device loop1): __ext4_iget:5464: inode #12: block 17104912: comm syz.1.7956: invalid block [ 405.417234][T25002] EXT4-fs error (device loop1): __ext4_iget:5464: inode #12: block 17104912: comm syz.1.7956: invalid block [ 405.442972][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.478657][T25011] netlink: 'syz.3.7954': attribute type 3 has an invalid length. [ 405.573675][T25014] loop1: detected capacity change from 0 to 512 [ 405.588128][T25014] EXT4-fs: Ignoring removed nobh option [ 405.620372][T25014] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.7959: corrupted inode contents [ 405.634322][T25014] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.7959: mark_inode_dirty error [ 405.646520][T25014] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.7959: corrupted inode contents [ 405.659874][T25014] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.7959: mark_inode_dirty error [ 405.673411][T25014] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.7959: Failed to acquire dquot type 0 [ 405.686703][T25014] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7959: corrupted inode contents [ 405.700428][T25014] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.7959: mark_inode_dirty error [ 405.736072][T25014] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7959: corrupted inode contents [ 405.769202][T25020] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7961'. [ 405.779577][T25014] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.7959: mark_inode_dirty error [ 405.805308][T25014] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7959: corrupted inode contents [ 405.820539][T25014] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 405.829828][T25014] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.7959: corrupted inode contents [ 405.843384][T25014] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.7959: mark_inode_dirty error [ 405.854805][T25014] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 405.866060][T25014] EXT4-fs (loop1): 1 truncate cleaned up [ 405.872346][T25014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.887859][T25014] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.899671][T25014] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.913309][T25013] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.7959'. [ 406.668709][ T3725] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.678286][ T3725] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.687102][ T3725] bond0 (unregistering): Released all slaves [ 406.703467][T24921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 406.723708][T25014] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 406.742189][T24998] lo speed is unknown, defaulting to 1000 [ 406.743483][T24921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 406.765646][T24998] lo speed is unknown, defaulting to 1000 [ 406.765719][T24921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 406.785213][T25029] loop1: detected capacity change from 0 to 512 [ 406.789291][T24921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.794553][T25029] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 406.813047][T25029] EXT4-fs (loop1): 1 truncate cleaned up [ 406.819745][T25029] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.833133][T24921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.851507][T25029] EXT4-fs error (device loop1): __ext4_iget:5464: inode #12: block 17104912: comm syz.1.7965: invalid block [ 406.864592][T25029] EXT4-fs error (device loop1): __ext4_iget:5464: inode #12: block 17104912: comm syz.1.7965: invalid block [ 406.880252][T24921] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.899329][ T3725] hsr_slave_0: left promiscuous mode [ 406.905380][ T3725] hsr_slave_1: left promiscuous mode [ 406.911201][ T3725] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.911542][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.927836][ T3725] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.945008][T25044] loop1: detected capacity change from 0 to 512 [ 406.953798][T25044] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 406.969339][ T3725] team0 (unregistering): Port device team_slave_1 removed [ 406.973082][T25044] EXT4-fs (loop1): 1 truncate cleaned up [ 406.983408][ T3725] team0 (unregistering): Port device team_slave_0 removed [ 406.991105][T25044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.025608][T25044] EXT4-fs error (device loop1): __ext4_iget:5464: inode #12: block 17104912: comm syz.1.7968: invalid block [ 407.050902][T25044] EXT4-fs error (device loop1): __ext4_iget:5464: inode #12: block 17104912: comm syz.1.7968: invalid block [ 407.083999][ T3721] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.091078][ T3721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.100968][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.114832][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.121904][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.147652][T24921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.526457][T25065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7974'. [ 407.554347][T24921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.659058][T24921] veth0_vlan: entered promiscuous mode [ 407.675443][T24921] veth1_vlan: entered promiscuous mode [ 407.700962][T24921] veth0_macvtap: entered promiscuous mode [ 407.714820][T24921] veth1_macvtap: entered promiscuous mode [ 407.734401][T24921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.755025][T24921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.775595][ T3727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.784792][ T29] kauditd_printk_skb: 829 callbacks suppressed [ 407.784807][ T29] audit: type=1326 audit(1754682180.869:50159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 407.819885][ T29] audit: type=1326 audit(1754682180.879:50160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 407.843485][ T29] audit: type=1326 audit(1754682180.889:50161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 407.867123][ T29] audit: type=1326 audit(1754682180.899:50162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 407.892421][ T3727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.903725][ T3727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.920888][ T3727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.933301][ T29] audit: type=1326 audit(1754682180.959:50163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 407.957005][ T29] audit: type=1326 audit(1754682180.969:50164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 407.980724][ T29] audit: type=1326 audit(1754682180.979:50165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 408.004358][ T29] audit: type=1326 audit(1754682180.989:50166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25081 comm="syz.1.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 408.028084][ T29] audit: type=1400 audit(1754682181.009:50167): avc: denied { mounton } for pid=24921 comm="syz-executor" path="/root/syzkaller.c4aHje/syz-tmp" dev="sda1" ino=2071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 408.052723][ T29] audit: type=1400 audit(1754682181.009:50168): avc: denied { mount } for pid=24921 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 408.087750][T25090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7931'. [ 408.165089][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119333400: rx timeout, send abort [ 408.198345][T25098] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 408.205806][T25098] vhci_hcd: invalid port number 253 [ 408.211092][T25098] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 408.247998][T25100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7984'. [ 408.357402][ T3721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.403854][T25112] netlink: 'syz.3.7990': attribute type 10 has an invalid length. [ 408.411861][T25112] __nla_validate_parse: 1 callbacks suppressed [ 408.411876][T25112] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7990'. [ 408.632402][T25123] loop3: detected capacity change from 0 to 512 [ 408.659301][T25123] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 408.667238][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119361a00: rx timeout, send abort [ 408.675513][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119333400: abort rx timeout. Force session deactivation [ 408.690487][T25123] EXT4-fs (loop3): orphan cleanup on readonly fs [ 408.706456][T25123] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7994: corrupted inode contents [ 408.718643][T25123] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.7994: mark_inode_dirty error [ 408.736705][T25123] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7994: corrupted inode contents [ 408.760691][T25123] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.7994: mark_inode_dirty error [ 408.788745][T25123] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7994: corrupted inode contents [ 408.800822][T25123] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 408.809677][T25123] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.7994: corrupted inode contents [ 408.821946][T25123] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.7994: mark_inode_dirty error [ 408.834138][T25123] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 408.844874][T25123] EXT4-fs (loop3): 1 truncate cleaned up [ 408.851720][ T3724] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 408.863996][T25123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.912587][T20166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.932054][T25133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7997'. [ 408.953223][T25135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7998'. [ 409.006148][T25139] lo speed is unknown, defaulting to 1000 [ 409.012310][T25139] lo speed is unknown, defaulting to 1000 [ 409.060956][T25140] netlink: 'syz.3.8000': attribute type 3 has an invalid length. [ 409.130823][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8001'. [ 409.167038][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888119361a00: abort rx timeout. Force session deactivation [ 409.238032][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8004'. [ 409.349396][T25153] loop0: detected capacity change from 0 to 512 [ 409.366875][T25153] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 409.374828][T25153] EXT4-fs (loop0): orphan cleanup on readonly fs [ 409.382535][T25153] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8006: corrupted inode contents [ 409.394872][T25153] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.8006: mark_inode_dirty error [ 409.406937][T25153] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8006: corrupted inode contents [ 409.419054][T25153] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8006: mark_inode_dirty error [ 409.431357][T25153] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8006: corrupted inode contents [ 409.443547][T25153] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 409.452994][T25153] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8006: corrupted inode contents [ 409.465159][T25153] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.8006: mark_inode_dirty error [ 409.477209][T25153] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 409.486594][T25153] EXT4-fs (loop0): 1 truncate cleaned up [ 409.492348][ T3724] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 409.504638][T25153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.539187][T24921] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.560068][T25159] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8008'. [ 409.669358][T25162] rdma_rxe: rxe_newlink: failed to add lo [ 409.712185][T25162] loop0: detected capacity change from 0 to 128 [ 409.720515][T25162] msdos: Bad value for 'fmask' [ 409.922553][T25179] lo speed is unknown, defaulting to 1000 [ 409.936994][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a8fca00: rx timeout, send abort [ 409.949144][T25179] lo speed is unknown, defaulting to 1000 [ 409.950224][T25182] loop3: detected capacity change from 0 to 512 [ 409.985258][T25182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8018: bg 0: block 248: padding at end of block bitmap is not set [ 410.007270][T25182] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8018: Failed to acquire dquot type 1 [ 410.028784][T25182] EXT4-fs (loop3): 1 truncate cleaned up [ 410.047235][T25182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.082160][T25189] netlink: 'syz.6.8016': attribute type 3 has an invalid length. [ 410.101386][T25182] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.135205][T25193] lo speed is unknown, defaulting to 1000 [ 410.141423][T25193] lo speed is unknown, defaulting to 1000 [ 410.206630][T20166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.236063][ T3725] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 410.277988][T25206] netlink: 'syz.0.8020': attribute type 3 has an invalid length. [ 410.291571][T25208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8027'. [ 410.336971][T25210] tipc: Started in network mode [ 410.341905][T25210] tipc: Node identity 8a0a2d4204a8, cluster identity 4711 [ 410.349061][T25210] tipc: Enabled bearer , priority 0 [ 410.445064][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a8fca00: abort rx timeout. Force session deactivation [ 410.468486][T25219] loop3: detected capacity change from 0 to 512 [ 410.475055][T25219] EXT4-fs: Ignoring removed mblk_io_submit option [ 410.485076][T25217] rdma_rxe: rxe_newlink: failed to add lo [ 410.492227][T25219] ext4: Bad value for 'min_batch_time' [ 410.498147][T25222] loop5: detected capacity change from 0 to 512 [ 410.551492][T25222] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 410.560442][T25222] EXT4-fs (loop5): orphan cleanup on readonly fs [ 410.571344][T25222] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8032: corrupted inode contents [ 410.599238][T25222] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.8032: mark_inode_dirty error [ 410.611858][T25222] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8032: corrupted inode contents [ 410.649870][T25217] loop6: detected capacity change from 0 to 128 [ 410.656523][T25217] msdos: Bad value for 'fmask' [ 410.661768][T25222] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8032: mark_inode_dirty error [ 410.673431][T25222] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8032: corrupted inode contents [ 410.692149][T25222] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 410.701378][T25222] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8032: corrupted inode contents [ 410.706256][T25238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8039'. [ 410.716383][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8038'. [ 410.750611][T25222] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.8032: mark_inode_dirty error [ 410.762629][T25222] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 410.773541][T25222] EXT4-fs (loop5): 1 truncate cleaned up [ 410.779882][ T3724] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 410.793249][T25222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.831149][T25246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8043'. [ 410.860706][T22436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.873854][T25249] loop1: detected capacity change from 0 to 512 [ 410.880900][T25249] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 410.892403][T25249] EXT4-fs (loop1): 1 truncate cleaned up [ 410.898541][T25249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.920482][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.054016][T25267] lo speed is unknown, defaulting to 1000 [ 411.070260][T25267] lo speed is unknown, defaulting to 1000 [ 411.072279][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a926000: rx timeout, send abort [ 411.136039][T25268] netlink: 'syz.1.8051': attribute type 3 has an invalid length. [ 411.189718][T25270] loop1: detected capacity change from 0 to 512 [ 411.207455][T25270] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8052: bg 0: block 248: padding at end of block bitmap is not set [ 411.222480][T25270] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.8052: Failed to acquire dquot type 1 [ 411.235991][T25270] EXT4-fs (loop1): 1 truncate cleaned up [ 411.242109][T25270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.254975][T25270] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.297833][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.307354][ T3721] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 411.349446][T25276] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 411.357093][T25276] vhci_hcd: invalid port number 253 [ 411.362319][T25276] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 411.403226][T25278] lo speed is unknown, defaulting to 1000 [ 411.409425][T25278] lo speed is unknown, defaulting to 1000 [ 411.465124][T19083] tipc: Node number set to 2392993090 [ 411.507264][T25278] netlink: 'syz.1.8055': attribute type 3 has an invalid length. [ 411.572069][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a926e00: rx timeout, send abort [ 411.584031][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a926000: abort rx timeout. Force session deactivation [ 411.716524][T25302] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 411.723869][T25302] vhci_hcd: invalid port number 253 [ 411.729112][T25302] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 411.821444][T25308] lo speed is unknown, defaulting to 1000 [ 411.828542][T25308] lo speed is unknown, defaulting to 1000 [ 411.935177][T25308] netlink: 'syz.5.8068': attribute type 3 has an invalid length. [ 411.992796][T25323] loop3: detected capacity change from 0 to 512 [ 412.005451][T25323] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 412.013516][T25323] EXT4-fs (loop3): orphan cleanup on readonly fs [ 412.021360][T25323] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8073: corrupted inode contents [ 412.033684][T25323] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8073: mark_inode_dirty error [ 412.047430][T25323] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8073: corrupted inode contents [ 412.059763][T25323] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8073: mark_inode_dirty error [ 412.072526][T25323] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8073: corrupted inode contents [ 412.084390][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a926e00: abort rx timeout. Force session deactivation [ 412.097609][T25323] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 412.109391][T25323] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8073: corrupted inode contents [ 412.121862][T25323] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8073: mark_inode_dirty error [ 412.140854][T25323] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 412.150144][T25323] EXT4-fs (loop3): 1 truncate cleaned up [ 412.157042][ T3721] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 412.160520][T25329] netlink: '+}[@': attribute type 21 has an invalid length. [ 412.169790][T25323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 412.195062][ T1036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.208444][T25331] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 412.215789][T25331] vhci_hcd: invalid port number 253 [ 412.221003][T25331] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 412.670796][T25342] netlink: 'syz.6.8080': attribute type 21 has an invalid length. [ 412.855665][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a927200: rx timeout, send abort [ 412.896473][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 412.896488][ T29] audit: type=1326 audit(1754682185.991:50763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 412.928804][ T29] audit: type=1326 audit(1754682185.991:50764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 412.952498][ T29] audit: type=1326 audit(1754682185.991:50765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 412.976094][ T29] audit: type=1326 audit(1754682185.991:50766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 412.999742][ T29] audit: type=1326 audit(1754682185.991:50767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 413.023346][ T29] audit: type=1326 audit(1754682186.021:50768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 413.046958][ T29] audit: type=1326 audit(1754682186.021:50769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 413.060983][T25358] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.071279][ T29] audit: type=1326 audit(1754682186.141:50770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 413.101578][ T29] audit: type=1326 audit(1754682186.141:50771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 413.125300][ T29] audit: type=1326 audit(1754682186.141:50772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25357 comm="syz.6.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7eaeaebe9 code=0x7ffc0000 [ 413.149109][T25358] vhci_hcd: invalid port number 253 [ 413.154458][T25358] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 413.339599][T25368] rdma_rxe: rxe_newlink: failed to add lo [ 413.360992][T25368] loop6: detected capacity change from 0 to 128 [ 413.363730][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811a927200: abort rx timeout. Force session deactivation [ 413.367838][T25368] msdos: Bad value for 'fmask' [ 413.435887][T25373] loop0: detected capacity change from 0 to 512 [ 413.442396][T25373] EXT4-fs: Ignoring removed nobh option [ 413.455968][T25373] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.8094: corrupted inode contents [ 413.468100][T25373] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.8094: mark_inode_dirty error [ 413.479813][ T3724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.491320][T25373] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.8094: corrupted inode contents [ 413.503244][T25373] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8094: mark_inode_dirty error [ 413.515877][T25373] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8094: Failed to acquire dquot type 0 [ 413.528016][T25373] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8094: corrupted inode contents [ 413.541946][T25373] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.8094: mark_inode_dirty error [ 413.553823][T25373] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8094: corrupted inode contents [ 413.566064][T25373] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8094: mark_inode_dirty error [ 413.577505][T25373] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8094: corrupted inode contents [ 413.589835][T25373] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 413.598687][T25373] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8094: corrupted inode contents [ 413.610699][T25373] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.8094: mark_inode_dirty error [ 413.621888][T25373] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 413.631333][T25373] EXT4-fs (loop0): 1 truncate cleaned up [ 413.637488][T25373] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.664265][T25373] __nla_validate_parse: 10 callbacks suppressed [ 413.664280][T25373] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.8094'. [ 413.681646][T25373] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 413.723663][T25390] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.731467][T25390] vhci_hcd: invalid port number 253 [ 413.736709][T25390] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 413.788990][T25399] loop6: detected capacity change from 0 to 512 [ 413.800055][T25399] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8105: bg 0: block 131: padding at end of block bitmap is not set [ 413.815809][T25399] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 413.825536][T25399] EXT4-fs (loop6): 1 truncate cleaned up [ 414.015079][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811aa9ce00: rx timeout, send abort [ 414.132053][T25413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8110'. [ 414.192397][T25417] lo speed is unknown, defaulting to 1000 [ 414.199380][T25417] lo speed is unknown, defaulting to 1000 [ 414.294494][T25421] netlink: 'syz.1.8112': attribute type 3 has an invalid length. [ 414.383077][T25427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8115'. [ 414.474536][T25431] loop1: detected capacity change from 0 to 512 [ 414.481299][T25431] EXT4-fs: Ignoring removed nobh option [ 414.505761][T25431] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.8117: corrupted inode contents [ 414.514855][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811aa9c200: rx timeout, send abort [ 414.519486][T25431] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.8117: mark_inode_dirty error [ 414.529929][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811aa9ce00: abort rx timeout. Force session deactivation [ 414.549536][T25431] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.8117: corrupted inode contents [ 414.561466][T25431] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8117: mark_inode_dirty error [ 414.574484][T25435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8118'. [ 414.584517][T25431] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.8117: Failed to acquire dquot type 0 [ 414.596255][T25431] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8117: corrupted inode contents [ 414.609341][T25431] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8117: mark_inode_dirty error [ 414.641300][T25431] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8117: corrupted inode contents [ 414.655432][T25431] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8117: mark_inode_dirty error [ 414.669421][T25431] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8117: corrupted inode contents [ 414.687105][T25431] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 414.698383][T25431] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8117: corrupted inode contents [ 414.700473][T25442] bridge0: entered promiscuous mode [ 414.715167][T25431] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8117: mark_inode_dirty error [ 414.726703][T25442] bridge0: left promiscuous mode [ 414.727372][T25431] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 414.741074][T25431] EXT4-fs (loop1): 1 truncate cleaned up [ 414.747219][T25431] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.775873][T25431] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.8117'. [ 414.815666][T25448] lo speed is unknown, defaulting to 1000 [ 414.823039][T25448] lo speed is unknown, defaulting to 1000 [ 414.875591][T25457] loop6: detected capacity change from 0 to 512 [ 414.902277][T25457] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 414.940785][T25457] EXT4-fs (loop6): orphan cleanup on readonly fs [ 414.943232][T25448] netlink: 'syz.0.8124': attribute type 3 has an invalid length. [ 414.959220][T25457] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8128: corrupted inode contents [ 414.972390][T25457] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.8128: mark_inode_dirty error [ 414.984765][T25457] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8128: corrupted inode contents [ 414.999019][T25457] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8128: mark_inode_dirty error [ 415.010801][T25457] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8128: corrupted inode contents [ 415.025537][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811aa9c200: abort rx timeout. Force session deactivation [ 415.035848][T25457] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 415.045567][T25457] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8128: corrupted inode contents [ 415.050556][T25466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8131'. [ 415.067450][T25457] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.8128: mark_inode_dirty error [ 415.079230][T25457] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 415.094241][T25457] EXT4-fs (loop6): 1 truncate cleaned up [ 415.100378][ T3724] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 415.158829][T25457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8128'. [ 415.224293][T25475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8132'. [ 415.246353][T25475] netlink: 'syz.0.8132': attribute type 10 has an invalid length. [ 415.254205][T25475] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8132'. [ 415.502192][T25487] lo speed is unknown, defaulting to 1000 [ 415.508381][T25487] lo speed is unknown, defaulting to 1000 [ 415.641480][T25490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8139'. [ 415.822134][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811aa9de00: rx timeout, send abort [ 416.226893][T25514] loop6: detected capacity change from 0 to 512 [ 416.254895][T25514] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8148: bg 0: block 248: padding at end of block bitmap is not set [ 416.269775][T25514] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8148: Failed to acquire dquot type 1 [ 416.282535][T25514] EXT4-fs (loop6): 1 truncate cleaned up [ 416.288690][T25514] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.311440][ T3725] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 416.330223][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811aa9de00: abort rx timeout. Force session deactivation [ 416.347884][T25519] loop0: detected capacity change from 0 to 512 [ 416.354756][T25519] EXT4-fs: Ignoring removed nobh option [ 416.365098][T25519] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.8149: corrupted inode contents [ 416.377413][T25519] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.8149: mark_inode_dirty error [ 416.390271][T25519] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.8149: corrupted inode contents [ 416.402608][T25519] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8149: mark_inode_dirty error [ 416.419527][T25519] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8149: Failed to acquire dquot type 0 [ 416.431536][T25519] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8149: corrupted inode contents [ 416.443697][T25519] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.8149: mark_inode_dirty error [ 416.456155][T25519] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8149: corrupted inode contents [ 416.472873][T25519] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8149: mark_inode_dirty error [ 416.518725][T25519] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8149: corrupted inode contents [ 416.551786][T25519] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 416.572235][T25519] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8149: corrupted inode contents [ 416.592814][T25519] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.8149: mark_inode_dirty error [ 416.604902][T25519] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 416.620374][T25536] loop3: detected capacity change from 0 to 512 [ 416.623998][T25519] EXT4-fs (loop0): 1 truncate cleaned up [ 416.627319][T25536] EXT4-fs: Ignoring removed nobh option [ 416.643140][T25519] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.674449][T25536] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8155: corrupted inode contents [ 416.686643][T25536] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.8155: mark_inode_dirty error [ 416.704621][T25536] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8155: corrupted inode contents [ 416.751227][T25536] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8155: mark_inode_dirty error [ 416.765973][T25536] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8155: Failed to acquire dquot type 0 [ 416.778532][T25536] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8155: corrupted inode contents [ 416.792135][T25536] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8155: mark_inode_dirty error [ 416.873677][T25536] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8155: corrupted inode contents [ 416.909889][T25536] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8155: mark_inode_dirty error [ 416.953015][T25536] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8155: corrupted inode contents [ 416.985438][T25536] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 416.995465][T25536] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8155: corrupted inode contents [ 417.008705][T25536] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8155: mark_inode_dirty error [ 417.032567][T25536] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 417.041881][T25536] EXT4-fs (loop3): 1 truncate cleaned up [ 417.061291][T25536] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.268552][T25573] netlink: 'syz.6.8168': attribute type 21 has an invalid length. [ 417.403410][T25595] loop6: detected capacity change from 0 to 512 [ 417.415437][T25595] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8179: bg 0: block 248: padding at end of block bitmap is not set [ 417.430952][T25595] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8179: Failed to acquire dquot type 1 [ 417.443825][T25595] EXT4-fs (loop6): 1 truncate cleaned up [ 417.453514][T25595] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.547284][ T3724] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 417.606246][T25603] tipc: Started in network mode [ 417.611103][T25603] tipc: Node identity d222653b61e1, cluster identity 4711 [ 417.618300][T25603] tipc: Enabled bearer , priority 0 [ 417.657849][T25605] ip6gretap0: entered promiscuous mode [ 417.666964][T25605] ip6gretap0: left promiscuous mode [ 417.903809][ T29] kauditd_printk_skb: 668 callbacks suppressed [ 417.903822][ T29] audit: type=1326 audit(1754682191.003:51426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e51d95ba7 code=0x7ffc0000 [ 417.933584][ T29] audit: type=1326 audit(1754682191.003:51427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e51d3add9 code=0x7ffc0000 [ 417.957422][ T29] audit: type=1326 audit(1754682191.003:51428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 417.983100][ T29] audit: type=1326 audit(1754682191.063:51429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e51d95ba7 code=0x7ffc0000 [ 418.006685][ T29] audit: type=1326 audit(1754682191.063:51430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e51d3add9 code=0x7ffc0000 [ 418.030189][ T29] audit: type=1326 audit(1754682191.063:51431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 418.053750][ T29] audit: type=1326 audit(1754682191.063:51432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e51d95ba7 code=0x7ffc0000 [ 418.077247][ T29] audit: type=1326 audit(1754682191.063:51433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e51d3add9 code=0x7ffc0000 [ 418.100785][ T29] audit: type=1326 audit(1754682191.063:51434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f6e51d9ebe9 code=0x7ffc0000 [ 418.124401][ T29] audit: type=1326 audit(1754682191.073:51435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25575 comm="syz.1.8170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e51d95ba7 code=0x7ffc0000 [ 418.185894][T25624] loop1: detected capacity change from 0 to 512 [ 418.203690][T25624] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 418.211699][T25624] EXT4-fs (loop1): orphan cleanup on readonly fs [ 418.227011][T25624] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8190: corrupted inode contents [ 418.239342][T25624] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8190: mark_inode_dirty error [ 418.254465][T25624] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8190: corrupted inode contents [ 418.266793][T25624] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8190: mark_inode_dirty error [ 418.280148][T25624] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8190: corrupted inode contents [ 418.292648][T25624] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 418.301414][T25624] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8190: corrupted inode contents [ 418.315123][T25624] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8190: mark_inode_dirty error [ 418.327375][T25624] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 418.350939][T25624] EXT4-fs (loop1): 1 truncate cleaned up [ 418.357006][ T3720] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 1 [ 418.427722][T25636] lo speed is unknown, defaulting to 1000 [ 418.435358][T25636] lo speed is unknown, defaulting to 1000 [ 418.513855][T25636] netlink: 'syz.1.8195': attribute type 3 has an invalid length. [ 418.592272][ T3721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.731628][ T3409] tipc: Node number set to 3015927099 [ 418.761221][T25668] lo speed is unknown, defaulting to 1000 [ 418.767796][T25668] lo speed is unknown, defaulting to 1000 [ 418.774171][T25670] FAULT_INJECTION: forcing a failure. [ 418.774171][T25670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.787315][T25670] CPU: 0 UID: 0 PID: 25670 Comm: syz.6.8210 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 418.787346][T25670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.787430][T25670] Call Trace: [ 418.787436][T25670] [ 418.787445][T25670] __dump_stack+0x1d/0x30 [ 418.787494][T25670] dump_stack_lvl+0xe8/0x140 [ 418.787514][T25670] dump_stack+0x15/0x1b [ 418.787535][T25670] should_fail_ex+0x265/0x280 [ 418.787611][T25670] should_fail+0xb/0x20 [ 418.787644][T25670] should_fail_usercopy+0x1a/0x20 [ 418.787676][T25670] copy_fpstate_to_sigframe+0x628/0x7d0 [ 418.787715][T25670] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 418.787752][T25670] ? x86_task_fpu+0x36/0x60 [ 418.787784][T25670] get_sigframe+0x34d/0x490 [ 418.787807][T25670] ? get_signal+0xdc8/0xf70 [ 418.787842][T25670] x64_setup_rt_frame+0xa8/0x580 [ 418.787868][T25670] arch_do_signal_or_restart+0x27c/0x480 [ 418.787922][T25670] exit_to_user_mode_loop+0x7a/0x100 [ 418.787976][T25670] do_syscall_64+0x1d6/0x200 [ 418.787999][T25670] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 418.788022][T25670] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 418.788114][T25670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.788137][T25670] RIP: 0033:0x7fa7eaeaebe9 [ 418.788155][T25670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.788235][T25670] RSP: 002b:00007fa7e9917038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 418.788257][T25670] RAX: 0000000000000000 RBX: 00007fa7eb0d5fa0 RCX: 00007fa7eaeaebe9 [ 418.788321][T25670] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000000 [ 418.788334][T25670] RBP: 00007fa7e9917090 R08: 0000000000000000 R09: 0000000000000000 [ 418.788345][T25670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.788357][T25670] R13: 00007fa7eb0d6038 R14: 00007fa7eb0d5fa0 R15: 00007fff8e96e3c8 [ 418.788376][T25670] [ 419.018524][T25671] netlink: 'syz.3.8208': attribute type 3 has an invalid length. [ 419.074848][T25679] loop6: detected capacity change from 0 to 512 [ 419.083052][T25682] loop0: detected capacity change from 0 to 512 [ 419.089530][T25682] EXT4-fs: Ignoring removed nobh option [ 419.091009][T25679] EXT4-fs: Ignoring removed nobh option [ 419.105330][T25684] loop3: detected capacity change from 0 to 512 [ 419.113415][T25679] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.8211: corrupted inode contents [ 419.125421][T25682] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.8212: corrupted inode contents [ 419.138012][T25679] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.8211: mark_inode_dirty error [ 419.138130][T25682] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.8212: mark_inode_dirty error [ 419.151662][T25679] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.8211: corrupted inode contents [ 419.163497][T25682] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.8212: corrupted inode contents [ 419.173545][T25679] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.8211: mark_inode_dirty error [ 419.185613][T25684] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8215: bg 0: block 248: padding at end of block bitmap is not set [ 419.196364][T25679] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8211: Failed to acquire dquot type 0 [ 419.211942][T25682] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.8212: mark_inode_dirty error [ 419.221704][T25679] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8211: corrupted inode contents [ 419.233210][T25684] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8215: Failed to acquire dquot type 1 [ 419.245292][T25682] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.8212: Failed to acquire dquot type 0 [ 419.256367][T25679] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.8211: mark_inode_dirty error [ 419.267567][T25684] EXT4-fs (loop3): 1 truncate cleaned up [ 419.279209][T25682] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8212: corrupted inode contents [ 419.297081][T25684] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.301366][T25682] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.8212: mark_inode_dirty error [ 419.308155][T25679] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8211: corrupted inode contents [ 419.334099][T25682] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8212: corrupted inode contents [ 419.339632][T25679] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8211: mark_inode_dirty error [ 419.355573][T25682] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8212: mark_inode_dirty error [ 419.368772][T25679] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8211: corrupted inode contents [ 419.381837][T25682] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8212: corrupted inode contents [ 419.399403][T25679] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 419.408489][T25682] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 419.418188][T25679] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8211: corrupted inode contents [ 419.430980][T25682] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8212: corrupted inode contents [ 419.437321][T25695] __nla_validate_parse: 25 callbacks suppressed [ 419.437337][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8217'. [ 419.445502][T25682] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.8212: mark_inode_dirty error [ 419.449786][ T146] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 419.458204][T25679] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.8211: mark_inode_dirty error [ 419.492047][T25682] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 419.502685][T25682] EXT4-fs (loop0): 1 truncate cleaned up [ 419.508562][T25679] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 419.518048][T25682] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.527094][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8219'. [ 419.529742][T25679] EXT4-fs (loop6): 1 truncate cleaned up [ 419.544355][T25679] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.589076][T25707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8221'. [ 419.624451][T25709] lo speed is unknown, defaulting to 1000 [ 419.630608][T25709] lo speed is unknown, defaulting to 1000 [ 419.664073][T25711] lo speed is unknown, defaulting to 1000 [ 419.689878][T25711] lo speed is unknown, defaulting to 1000 [ 419.816495][T25720] netlink: 'syz.1.8223': attribute type 3 has an invalid length. [ 419.849601][T25729] lo speed is unknown, defaulting to 1000 [ 419.869173][T25729] lo speed is unknown, defaulting to 1000 [ 419.958331][T25732] netlink: 'syz.6.8228': attribute type 3 has an invalid length. [ 420.121714][T25740] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 420.130782][T25740] vhci_hcd: invalid port number 253 [ 420.136054][T25740] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 420.146528][T25742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8234'. [ 420.313980][T25757] loop1: detected capacity change from 0 to 512 [ 420.318696][T25756] lo speed is unknown, defaulting to 1000 [ 420.339186][T25756] lo speed is unknown, defaulting to 1000 [ 420.364310][T25759] lo speed is unknown, defaulting to 1000 [ 420.371029][T25757] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8241: bg 0: block 248: padding at end of block bitmap is not set [ 420.394521][T25757] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.8241: Failed to acquire dquot type 1 [ 420.413863][T25759] lo speed is unknown, defaulting to 1000 [ 420.457572][T25756] netlink: 'syz.6.8240': attribute type 3 has an invalid length. [ 420.489420][T25765] netlink: 'syz.5.8242': attribute type 3 has an invalid length. [ 420.499274][T25757] EXT4-fs (loop1): 1 truncate cleaned up [ 420.505508][T25757] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.548692][T25770] netlink: 'syz.6.8243': attribute type 21 has an invalid length. [ 420.558226][T25770] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8243'. [ 420.595171][T25770] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8243'. [ 420.604410][T25770] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8243'. [ 420.613482][T25770] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8243'. [ 420.646146][T25770] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8243'. [ 420.655270][T25770] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8243'. [ 420.679831][T25777] loop1: detected capacity change from 0 to 8192 [ 420.727052][T25777] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 420.819459][T25783] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:0 [ 420.893884][T25771] loop5: detected capacity change from 0 to 128 [ 420.909966][T25771] msdos: Bad value for 'fmask' [ 421.039640][T25799] loop6: detected capacity change from 0 to 512 [ 421.052146][T25799] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 421.061928][T25799] EXT4-fs (loop6): orphan cleanup on readonly fs [ 421.072454][T25799] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8254: corrupted inode contents [ 421.085971][T25799] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.8254: mark_inode_dirty error [ 421.098163][T25799] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8254: corrupted inode contents [ 421.112712][T25799] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8254: mark_inode_dirty error [ 421.125086][T25799] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8254: corrupted inode contents [ 421.147763][T25802] loop3: detected capacity change from 0 to 512 [ 421.159064][T25799] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 421.172039][T25802] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8253: bg 0: block 248: padding at end of block bitmap is not set [ 421.222059][T25799] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8254: corrupted inode contents [ 421.256225][T25799] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.8254: mark_inode_dirty error [ 421.267559][T25802] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8253: Failed to acquire dquot type 1 [ 421.280974][T25799] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 421.290410][T25802] EXT4-fs (loop3): 1 truncate cleaned up [ 421.297178][T25802] ext4 filesystem being mounted at /414/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.310014][T25799] EXT4-fs (loop6): 1 truncate cleaned up [ 421.310672][ T3725] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 421.345317][ T3725] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 421.357575][T25806] loop5: detected capacity change from 0 to 512 [ 421.374875][T25806] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8255: bg 0: block 248: padding at end of block bitmap is not set [ 421.402940][T25810] loop6: detected capacity change from 0 to 512 [ 421.412255][T25810] msdos: Bad value for 'uid' [ 421.416854][T25810] msdos: Bad value for 'uid' [ 421.439867][T25822] netlink: 'syz.3.8260': attribute type 4 has an invalid length. [ 421.446110][T25806] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.8255: Failed to acquire dquot type 1 [ 421.450674][T25822] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 421.473418][T25806] EXT4-fs (loop5): 1 truncate cleaned up [ 421.503625][T25806] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.581559][T25835] tipc: Started in network mode [ 421.586466][T25835] tipc: Node identity 766587ebd63, cluster identity 4711 [ 421.593559][T25835] tipc: Enabled bearer , priority 0 [ 421.637712][T25837] loop1: detected capacity change from 0 to 512 [ 421.644397][T25837] EXT4-fs: Ignoring removed mblk_io_submit option [ 421.650944][T25837] ext4: Bad value for 'min_batch_time' [ 421.806678][ T3720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.886045][T25855] FAULT_INJECTION: forcing a failure. [ 421.886045][T25855] name failslab, interval 1, probability 0, space 0, times 0 [ 421.898745][T25855] CPU: 0 UID: 0 PID: 25855 Comm: syz.5.8272 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 421.898777][T25855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 421.898809][T25855] Call Trace: [ 421.898839][T25855] [ 421.898847][T25855] __dump_stack+0x1d/0x30 [ 421.898872][T25855] dump_stack_lvl+0xe8/0x140 [ 421.898893][T25855] dump_stack+0x15/0x1b [ 421.898911][T25855] should_fail_ex+0x265/0x280 [ 421.898992][T25855] should_failslab+0x8c/0xb0 [ 421.899020][T25855] kmem_cache_alloc_node_noprof+0x57/0x320 [ 421.899103][T25855] ? __alloc_skb+0x101/0x320 [ 421.899136][T25855] __alloc_skb+0x101/0x320 [ 421.899165][T25855] ? audit_log_start+0x365/0x6c0 [ 421.899199][T25855] audit_log_start+0x380/0x6c0 [ 421.899244][T25855] audit_seccomp+0x48/0x100 [ 421.899319][T25855] ? __seccomp_filter+0x68c/0x10d0 [ 421.899343][T25855] __seccomp_filter+0x69d/0x10d0 [ 421.899429][T25855] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 421.899460][T25855] ? vfs_write+0x75e/0x8e0 [ 421.899481][T25855] ? __rcu_read_unlock+0x4f/0x70 [ 421.899598][T25855] ? __fget_files+0x184/0x1c0 [ 421.899698][T25855] __secure_computing+0x82/0x150 [ 421.899722][T25855] syscall_trace_enter+0xcf/0x1e0 [ 421.899749][T25855] do_syscall_64+0xac/0x200 [ 421.899777][T25855] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 421.899804][T25855] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 421.899857][T25855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.899881][T25855] RIP: 0033:0x7fbc642debe9 [ 421.899897][T25855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.899916][T25855] RSP: 002b:00007fbc62d3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 421.899938][T25855] RAX: ffffffffffffffda RBX: 00007fbc64505fa0 RCX: 00007fbc642debe9 [ 421.899952][T25855] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 421.900018][T25855] RBP: 00007fbc62d3f090 R08: 0000000000000000 R09: 0000000000000000 [ 421.900031][T25855] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 421.900048][T25855] R13: 00007fbc64506038 R14: 00007fbc64505fa0 R15: 00007ffd1fdd44c8 [ 421.900068][T25855] [ 422.223296][T25868] tipc: Enabling of bearer rejected, already enabled [ 422.448491][T25879] netlink: 'syz.5.8282': attribute type 21 has an invalid length. [ 422.511545][T25884] loop3: detected capacity change from 0 to 512 [ 422.521547][T25884] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 422.529706][T25884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 422.537974][T25884] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8284: corrupted inode contents [ 422.550146][T25884] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8284: mark_inode_dirty error [ 422.562145][T25884] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8284: corrupted inode contents [ 422.575345][T25884] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8284: mark_inode_dirty error [ 422.586957][T25884] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8284: corrupted inode contents [ 422.600342][T25884] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 422.601945][T25892] FAULT_INJECTION: forcing a failure. [ 422.601945][T25892] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.609195][T25884] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8284: corrupted inode contents [ 422.622134][T25892] CPU: 0 UID: 0 PID: 25892 Comm: syz.1.8287 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 422.622163][T25892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.622174][T25892] Call Trace: [ 422.622182][T25892] [ 422.622191][T25892] __dump_stack+0x1d/0x30 [ 422.622215][T25892] dump_stack_lvl+0xe8/0x140 [ 422.622276][T25892] dump_stack+0x15/0x1b [ 422.622294][T25892] should_fail_ex+0x265/0x280 [ 422.622330][T25892] should_fail_alloc_page+0xf2/0x100 [ 422.622429][T25892] __alloc_frozen_pages_noprof+0xff/0x360 [ 422.622468][T25892] alloc_pages_mpol+0xb3/0x250 [ 422.622524][T25892] vma_alloc_folio_noprof+0x1aa/0x300 [ 422.622563][T25892] do_wp_page+0x5db/0x24e0 [ 422.622588][T25892] ? __rcu_read_lock+0x37/0x50 [ 422.622694][T25892] handle_mm_fault+0x77d/0x2c20 [ 422.622868][T25892] do_user_addr_fault+0x636/0x1090 [ 422.622916][T25892] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 422.622945][T25892] exc_page_fault+0x62/0xa0 [ 422.622967][T25892] asm_exc_page_fault+0x26/0x30 [ 422.622989][T25892] RIP: 0033:0x7f6e51d58735 [ 422.623006][T25892] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 422.623082][T25892] RSP: 002b:00007f6e50805de0 EFLAGS: 00010293 [ 422.623099][T25892] RAX: 0000000000000008 RBX: 00007f6e52af7d60 RCX: 0000000000000000 [ 422.623113][T25892] RDX: 0000000000000000 RSI: 00007f6e51e5f95e RDI: 00007f6e52af7d60 [ 422.623126][T25892] RBP: 00007f6e50805f00 R08: 0000000000000000 R09: 0000000000000005 [ 422.623210][T25892] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f6e51e5f500 [ 422.623244][T25892] R13: 0000000000000016 R14: 00007f6e51f97460 R15: 0000000000000000 [ 422.623264][T25892] [ 422.623277][T25892] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 422.669866][T25884] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8284: mark_inode_dirty error [ 422.701533][ T1036] tipc: Node number set to 2689959915 [ 422.833049][T25884] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 422.843458][T25884] EXT4-fs (loop3): 1 truncate cleaned up [ 422.849542][ T3720] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 1 [ 422.850021][T25894] bridge0: entered promiscuous mode [ 422.868093][T25894] bridge0: port 3(macsec1) entered blocking state [ 422.874670][T25894] bridge0: port 3(macsec1) entered disabled state [ 422.882250][T25894] macsec1: entered allmulticast mode [ 422.887557][T25894] bridge0: entered allmulticast mode [ 422.893844][T25894] macsec1: left allmulticast mode [ 422.898883][T25894] bridge0: left allmulticast mode [ 422.905629][T25894] bridge0: left promiscuous mode [ 422.934887][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 422.934902][ T29] audit: type=1326 audit(1754682196.036:51767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 422.936526][T25898] loop1: detected capacity change from 0 to 512 [ 422.965750][ T29] audit: type=1326 audit(1754682196.046:51768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 422.994739][ T29] audit: type=1326 audit(1754682196.046:51769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.018427][ T29] audit: type=1326 audit(1754682196.046:51770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.042046][ T29] audit: type=1326 audit(1754682196.046:51771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.070197][ T29] audit: type=1326 audit(1754682196.096:51772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.071717][T25900] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 423.093850][ T29] audit: type=1326 audit(1754682196.096:51773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.102633][T25900] vhci_hcd: invalid port number 253 [ 423.124721][ T29] audit: type=1326 audit(1754682196.166:51774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.124754][ T29] audit: type=1326 audit(1754682196.176:51775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.126123][ T29] audit: type=1326 audit(1754682196.176:51776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25899 comm="syz.3.8290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075822ebe9 code=0x7ffc0000 [ 423.130051][T25900] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 423.209543][T25898] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 423.217700][T25898] EXT4-fs (loop1): orphan cleanup on readonly fs [ 423.225513][T25898] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8291: corrupted inode contents [ 423.238344][T25898] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8291: mark_inode_dirty error [ 423.260719][T25898] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8291: corrupted inode contents [ 423.273448][T25898] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8291: mark_inode_dirty error [ 423.326900][T25898] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8291: corrupted inode contents [ 423.349329][T25898] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 423.362231][T25898] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8291: corrupted inode contents [ 423.375587][T25898] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8291: mark_inode_dirty error [ 423.394368][T25898] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 423.403762][T25898] EXT4-fs (loop1): 1 truncate cleaned up [ 423.409871][ T3721] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 423.629983][T25921] loop5: detected capacity change from 0 to 512 [ 423.642692][T25921] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 423.650784][T25921] EXT4-fs (loop5): orphan cleanup on readonly fs [ 423.662271][T25921] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8297: corrupted inode contents [ 423.674367][T25921] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.8297: mark_inode_dirty error [ 423.686058][T25921] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8297: corrupted inode contents [ 423.698059][T25921] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8297: mark_inode_dirty error [ 423.710236][T25921] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8297: corrupted inode contents [ 423.722260][T25921] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 423.732654][T25921] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8297: corrupted inode contents [ 423.744817][T25921] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.8297: mark_inode_dirty error [ 423.768011][T25921] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 423.789567][T25921] EXT4-fs (loop5): 1 truncate cleaned up [ 423.795608][ T146] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 423.824726][T25933] netlink: 'syz.6.8302': attribute type 10 has an invalid length. [ 423.904825][T25938] IPVS: Error joining to the multicast group [ 423.960239][T25941] gretap0: entered promiscuous mode [ 423.966005][T25941] macsec1: entered promiscuous mode [ 423.975752][T25941] macsec1: entered allmulticast mode [ 423.981723][T25941] gretap0: entered allmulticast mode [ 424.001910][T25941] gretap0: left allmulticast mode [ 424.014446][T25941] gretap0: left promiscuous mode [ 424.279825][T25960] loop3: detected capacity change from 0 to 512 [ 424.286707][T25960] EXT4-fs: Ignoring removed mblk_io_submit option [ 424.293985][T25960] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 424.304265][T25960] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 424.312454][T25960] EXT4-fs (loop3): orphan cleanup on readonly fs [ 424.319480][T25960] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.8314: Invalid block bitmap block 0 in block_group 0 [ 424.333676][T25960] EXT4-fs (loop3): Remounting filesystem read-only [ 424.340497][T25960] EXT4-fs (loop3): 1 orphan inode deleted [ 424.353417][T25958] tmpfs: Bad value for 'size' [ 424.360929][ T3721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 424.379522][T25952] rdma_rxe: rxe_newlink: failed to add lo [ 424.405981][T25952] loop6: detected capacity change from 0 to 128 [ 424.412776][T25952] msdos: Bad value for 'fmask' [ 424.463027][T25974] lo speed is unknown, defaulting to 1000 [ 424.470177][T25974] lo speed is unknown, defaulting to 1000 [ 424.471169][T25972] lo speed is unknown, defaulting to 1000 [ 424.479143][T25977] __nla_validate_parse: 24 callbacks suppressed [ 424.479158][T25977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8320'. [ 424.522957][T25972] lo speed is unknown, defaulting to 1000 [ 424.610498][T25979] netlink: 'syz.3.8319': attribute type 3 has an invalid length. [ 424.846304][T25993] netlink: 'syz.6.8326': attribute type 21 has an invalid length. [ 424.870278][T25993] netlink: 132 bytes leftover after parsing attributes in process `syz.6.8326'. [ 424.884956][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 424.894071][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 424.903118][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 424.930740][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 424.939932][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 424.949076][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 424.991312][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 425.000441][T25993] netlink: 108 bytes leftover after parsing attributes in process `syz.6.8326'. [ 425.141949][T26007] lo speed is unknown, defaulting to 1000 [ 425.147992][T26007] lo speed is unknown, defaulting to 1000 [ 425.166981][T26009] netlink: 'syz.5.8332': attribute type 21 has an invalid length. [ 425.304433][T26007] netlink: 'syz.6.8331': attribute type 3 has an invalid length. [ 425.417036][T26033] tipc: Enabling of bearer rejected, already enabled [ 425.466058][T26023] rdma_rxe: rxe_newlink: failed to add lo [ 425.475303][T26040] bridge0: entered promiscuous mode [ 425.484012][T26040] bridge0: port 3(macsec1) entered blocking state [ 425.490784][T26040] bridge0: port 3(macsec1) entered disabled state [ 425.497277][T26042] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 425.497297][T26042] vhci_hcd: invalid port number 253 [ 425.497319][T26042] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 425.504383][T26023] loop3: detected capacity change from 0 to 128 [ 425.507170][T26040] macsec1: entered allmulticast mode [ 425.524695][T26023] msdos: Bad value for 'fmask' [ 425.528910][T26040] bridge0: entered allmulticast mode [ 425.539258][T26040] macsec1: left allmulticast mode [ 425.544299][T26040] bridge0: left allmulticast mode [ 425.551158][T26040] bridge0: left promiscuous mode [ 425.899661][T26086] netlink: 'syz.6.8362': attribute type 10 has an invalid length. [ 425.962153][T26096] loop5: detected capacity change from 0 to 512 [ 425.988977][T26096] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 425.995869][T26102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.997158][T26096] EXT4-fs (loop5): orphan cleanup on readonly fs [ 426.005757][T26102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.041929][T26104] loop0: detected capacity change from 0 to 512 [ 426.048748][T26104] EXT4-fs: Ignoring removed mblk_io_submit option [ 426.056764][T26104] ext4: Bad value for 'min_batch_time' [ 426.089155][T26096] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8369: corrupted inode contents [ 426.101329][T26096] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.8369: mark_inode_dirty error [ 426.116442][T26096] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8369: corrupted inode contents [ 426.128949][T26096] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8369: mark_inode_dirty error [ 426.140652][T26096] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8369: corrupted inode contents [ 426.153272][T26096] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 426.162212][T26096] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.8369: corrupted inode contents [ 426.182727][T26096] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.8369: mark_inode_dirty error [ 426.192761][T26111] lo speed is unknown, defaulting to 1000 [ 426.194194][T26096] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 426.200887][T26111] lo speed is unknown, defaulting to 1000 [ 426.273336][T26096] EXT4-fs (loop5): 1 truncate cleaned up [ 426.279965][ T146] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 426.304087][T26096] EXT4-fs mount: 41 callbacks suppressed [ 426.304107][T26096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 426.333645][T26111] netlink: 'syz.0.8375': attribute type 3 has an invalid length. [ 426.355388][T22436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.407859][T26116] random: crng reseeded on system resumption [ 426.467435][T26122] tipc: Enabling of bearer rejected, already enabled [ 426.521684][T26128] loop5: detected capacity change from 0 to 512 [ 426.523526][T26133] loop3: detected capacity change from 0 to 512 [ 426.528350][T26128] EXT4-fs: Ignoring removed mblk_io_submit option [ 426.541157][T26128] ext4: Bad value for 'min_batch_time' [ 426.554997][T26133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.567958][T26133] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.636921][T26133] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 426.652775][T26133] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28 [ 426.665386][T26133] EXT4-fs (loop3): This should not happen!! Data will be lost [ 426.665386][T26133] [ 426.675201][T26133] EXT4-fs (loop3): Total free blocks count 0 [ 426.681304][T26133] EXT4-fs (loop3): Free/Dirty block details [ 426.687197][T26133] EXT4-fs (loop3): free_blocks=65280 [ 426.692518][T26133] EXT4-fs (loop3): dirty_blocks=1029 [ 426.697781][T26133] EXT4-fs (loop3): Block reservation details [ 426.704048][T26133] EXT4-fs (loop3): i_reserved_data_blocks=1029 [ 426.744724][T20166] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.781823][T26156] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 426.798925][T26156] vhci_hcd: invalid port number 253 [ 426.804243][T26156] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 426.973511][T26181] netlink: 'syz.3.8403': attribute type 10 has an invalid length. [ 427.044520][T26190] loop1: detected capacity change from 0 to 2048 [ 427.058918][T26194] loop6: detected capacity change from 0 to 512 [ 427.067043][T26190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.074584][T26194] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 427.083798][T26190] tc_dump_action: action bad kind [ 427.089703][T26194] EXT4-fs (loop6): orphan cleanup on readonly fs [ 427.106094][T26194] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8411: corrupted inode contents [ 427.118240][T26194] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.8411: mark_inode_dirty error [ 427.119894][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.129910][T26194] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8411: corrupted inode contents [ 427.151212][T26194] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8411: mark_inode_dirty error [ 427.163183][T26194] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8411: corrupted inode contents [ 427.175720][T26194] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 427.184960][T26194] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8411: corrupted inode contents [ 427.197392][T26194] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.8411: mark_inode_dirty error [ 427.209608][T26194] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 427.219561][T26194] EXT4-fs (loop6): 1 truncate cleaned up [ 427.225561][ T3721] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 427.239373][T26194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 427.251916][T26202] loop1: detected capacity change from 0 to 512 [ 427.258700][T26202] EXT4-fs: Ignoring removed mblk_io_submit option [ 427.265213][T26202] ext4: Bad value for 'min_batch_time' [ 427.283494][T21788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.306904][T26207] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.316607][T26207] vhci_hcd: invalid port number 253 [ 427.321885][T26207] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 427.372008][T26213] loop1: detected capacity change from 0 to 512 [ 427.389201][T26213] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 427.397221][T26213] EXT4-fs (loop1): orphan cleanup on readonly fs [ 427.405123][T26213] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8417: corrupted inode contents [ 427.417173][T26213] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8417: mark_inode_dirty error [ 427.429401][T26213] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8417: corrupted inode contents [ 427.475220][T26213] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8417: mark_inode_dirty error [ 427.494278][T26219] FAULT_INJECTION: forcing a failure. [ 427.494278][T26219] name failslab, interval 1, probability 0, space 0, times 0 [ 427.506999][T26219] CPU: 1 UID: 0 PID: 26219 Comm: syz.0.8419 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 427.507033][T26219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.507048][T26219] Call Trace: [ 427.507056][T26219] [ 427.507065][T26219] __dump_stack+0x1d/0x30 [ 427.507120][T26219] dump_stack_lvl+0xe8/0x140 [ 427.507143][T26219] dump_stack+0x15/0x1b [ 427.507162][T26219] should_fail_ex+0x265/0x280 [ 427.507200][T26219] should_failslab+0x8c/0xb0 [ 427.507233][T26219] kmem_cache_alloc_noprof+0x50/0x310 [ 427.507262][T26219] ? prepare_creds+0x37/0x4c0 [ 427.507284][T26219] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 427.507315][T26219] prepare_creds+0x37/0x4c0 [ 427.507351][T26219] copy_creds+0x8f/0x3f0 [ 427.507374][T26219] copy_process+0x658/0x2000 [ 427.507399][T26219] ? kstrtouint+0x76/0xc0 [ 427.507434][T26219] ? __rcu_read_unlock+0x4f/0x70 [ 427.507493][T26219] kernel_clone+0x16c/0x5c0 [ 427.507519][T26219] ? vfs_write+0x75e/0x8e0 [ 427.507543][T26219] __x64_sys_clone+0xe6/0x120 [ 427.507602][T26219] x64_sys_call+0x119c/0x2ff0 [ 427.507624][T26219] do_syscall_64+0xd2/0x200 [ 427.507706][T26219] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 427.507816][T26219] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 427.507838][T26219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.507860][T26219] RIP: 0033:0x7f02e59febe9 [ 427.507875][T26219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.507920][T26219] RSP: 002b:00007f02e441cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 427.507939][T26219] RAX: ffffffffffffffda RBX: 00007f02e5c26180 RCX: 00007f02e59febe9 [ 427.507952][T26219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 427.507965][T26219] RBP: 00007f02e441d090 R08: 0000000000000000 R09: 0000000000000000 [ 427.507977][T26219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 427.508109][T26219] R13: 00007f02e5c26218 R14: 00007f02e5c26180 R15: 00007ffdbfa58838 [ 427.508128][T26219] [ 427.715520][ T3720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.733588][T26213] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8417: corrupted inode contents [ 427.746454][T26213] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 427.758397][T26213] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8417: corrupted inode contents [ 427.846225][T26213] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8417: mark_inode_dirty error [ 427.931366][T26225] tipc: Enabling of bearer rejected, already enabled [ 427.954701][T26213] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 427.980879][T26228] loop6: detected capacity change from 0 to 512 [ 428.002167][T26213] EXT4-fs (loop1): 1 truncate cleaned up [ 428.072151][T26228] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 428.080363][ T3721] __quota_error: 1208 callbacks suppressed [ 428.080379][ T3721] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 428.084091][T26235] bridge0: entered promiscuous mode [ 428.086212][ T3721] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 428.096155][T26228] EXT4-fs (loop6): orphan cleanup on readonly fs [ 428.106535][T26213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.113502][T26235] bridge0: port 1(macsec1) entered blocking state [ 428.132407][T26228] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8424: corrupted inode contents [ 428.137822][T26235] bridge0: port 1(macsec1) entered disabled state [ 428.156174][ T29] audit: type=1400 audit(1754682201.258:52978): avc: denied { create } for pid=26239 comm="syz.5.8428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 428.177090][T26228] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.8424: mark_inode_dirty error [ 428.188627][ T29] audit: type=1400 audit(1754682201.278:52979): avc: denied { bind } for pid=26239 comm="syz.5.8428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 428.208347][T26235] macsec1: entered allmulticast mode [ 428.209461][T26228] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8424: corrupted inode contents [ 428.213660][T26235] bridge0: entered allmulticast mode [ 428.231553][T26228] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8424: mark_inode_dirty error [ 428.246237][T26235] macsec1: left allmulticast mode [ 428.251415][T26235] bridge0: left allmulticast mode [ 428.274978][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.275469][T26228] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8424: corrupted inode contents [ 428.298748][T26228] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 428.307469][T26235] bridge0: left promiscuous mode [ 428.307939][T26228] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8424: corrupted inode contents [ 428.325233][T26228] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.8424: mark_inode_dirty error [ 428.336644][T26228] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 428.358453][T26228] EXT4-fs (loop6): 1 truncate cleaned up [ 428.364340][ T3721] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 428.374204][ T3721] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 428.411085][ T29] audit: type=1326 audit(1754682201.488:52980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.5.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc642debe9 code=0x7ffc0000 [ 428.420749][T26228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.434746][ T29] audit: type=1326 audit(1754682201.488:52981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.5.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fbc642debe9 code=0x7ffc0000 [ 428.470569][ T29] audit: type=1326 audit(1754682201.488:52982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.5.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc642debe9 code=0x7ffc0000 [ 428.494151][ T29] audit: type=1326 audit(1754682201.508:52983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.5.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc642debe9 code=0x7ffc0000 [ 428.517872][ T29] audit: type=1326 audit(1754682201.508:52984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.5.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc642debe9 code=0x7ffc0000 [ 428.541444][ T29] audit: type=1326 audit(1754682201.508:52985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26245 comm="syz.5.8431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc642debe9 code=0x7ffc0000 [ 428.585517][T26257] loop1: detected capacity change from 0 to 512 [ 428.596425][T26252] netlink: 'syz.0.8432': attribute type 10 has an invalid length. [ 428.610367][T21788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.646222][T26257] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 428.654320][T26257] EXT4-fs (loop1): orphan cleanup on readonly fs [ 428.661179][T26255] rdma_rxe: rxe_newlink: failed to add lo [ 428.670492][T26257] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8435: corrupted inode contents [ 428.687890][T26257] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8435: mark_inode_dirty error [ 428.721181][T26257] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8435: corrupted inode contents [ 428.751063][T26257] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8435: mark_inode_dirty error [ 428.763557][T26255] loop5: detected capacity change from 0 to 128 [ 428.770227][T26257] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8435: corrupted inode contents [ 428.782388][T26257] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 428.793147][T26255] msdos: Bad value for 'fmask' [ 428.800292][T26257] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8435: corrupted inode contents [ 428.816631][T26257] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8435: mark_inode_dirty error [ 428.829831][T26257] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 428.841073][T26257] EXT4-fs (loop1): 1 truncate cleaned up [ 428.847169][ T3721] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 1 [ 428.860791][T26257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.911379][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.993353][T26283] netlink: 'syz.3.8447': attribute type 3 has an invalid length. [ 429.004320][T26283] netlink: 'syz.3.8447': attribute type 39 has an invalid length. [ 429.049928][T26287] lo speed is unknown, defaulting to 1000 [ 429.056133][T26287] lo speed is unknown, defaulting to 1000 [ 429.059810][T26286] bridge0: entered promiscuous mode [ 429.086220][T26286] bridge0: port 3(macsec1) entered blocking state [ 429.092923][T26286] bridge0: port 3(macsec1) entered disabled state [ 429.102311][T26286] macsec1: entered allmulticast mode [ 429.107726][T26286] bridge0: entered allmulticast mode [ 429.113779][T26286] macsec1: left allmulticast mode [ 429.118849][T26286] bridge0: left allmulticast mode [ 429.124533][T26286] bridge0: left promiscuous mode [ 429.161094][T26296] tipc: Enabling of bearer rejected, already enabled [ 429.210236][T26302] tipc: Enabling of bearer rejected, already enabled [ 429.334854][T26323] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 429.341121][T26324] loop0: detected capacity change from 0 to 512 [ 429.342487][T26323] vhci_hcd: invalid port number 253 [ 429.353744][T26323] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 429.368002][T26324] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 429.376117][T26324] EXT4-fs (loop0): orphan cleanup on readonly fs [ 429.394750][T26324] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8464: corrupted inode contents [ 429.414852][T26324] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.8464: mark_inode_dirty error [ 429.461125][T26324] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8464: corrupted inode contents [ 429.482085][T26332] __nla_validate_parse: 17 callbacks suppressed [ 429.482103][T26332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8468'. [ 429.506219][T26324] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.8464: mark_inode_dirty error [ 429.535559][T26337] lo speed is unknown, defaulting to 1000 [ 429.544545][T26337] lo speed is unknown, defaulting to 1000 [ 429.546404][T26324] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8464: corrupted inode contents [ 429.550964][T26344] lo speed is unknown, defaulting to 1000 [ 429.580362][T26324] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 429.644901][T26347] netlink: 'syz.1.8473': attribute type 3 has an invalid length. [ 429.655754][T26324] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.8464: corrupted inode contents [ 429.670180][T26344] lo speed is unknown, defaulting to 1000 [ 429.702586][T26354] bridge0: entered promiscuous mode [ 429.707990][T26324] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.8464: mark_inode_dirty error [ 429.721377][T26354] bridge0: port 3(macsec1) entered blocking state [ 429.727961][T26354] bridge0: port 3(macsec1) entered disabled state [ 429.732319][T26356] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 429.735498][T26354] macsec1: entered allmulticast mode [ 429.742072][T26324] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 429.747173][T26354] bridge0: entered allmulticast mode [ 429.756168][T26356] vhci_hcd: invalid port number 253 [ 429.765363][T26324] EXT4-fs (loop0): 1 truncate cleaned up [ 429.766626][T26356] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 429.779906][T26354] macsec1: left allmulticast mode [ 429.780191][ T3724] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 429.784953][T26354] bridge0: left allmulticast mode [ 429.802348][T26354] bridge0: left promiscuous mode [ 429.808087][T26324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 429.896400][T24921] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.980018][T26360] lo speed is unknown, defaulting to 1000 [ 429.986205][T26360] lo speed is unknown, defaulting to 1000 [ 430.066214][T26379] netlink: 'syz.0.8488': attribute type 21 has an invalid length. [ 430.074476][T26379] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.083752][T26377] lo speed is unknown, defaulting to 1000 [ 430.102844][T26383] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 430.110426][ T3721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 430.118092][T26383] vhci_hcd: invalid port number 253 [ 430.126141][T26383] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 430.134979][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.144076][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.153277][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.171386][T26389] loop1: detected capacity change from 0 to 512 [ 430.189251][T26389] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 430.198644][T26389] EXT4-fs (loop1): orphan cleanup on readonly fs [ 430.206475][T26389] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8491: corrupted inode contents [ 430.213763][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.219639][T26389] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8491: mark_inode_dirty error [ 430.227571][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.240246][T26389] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8491: corrupted inode contents [ 430.247948][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.261278][T26389] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8491: mark_inode_dirty error [ 430.280010][T26377] lo speed is unknown, defaulting to 1000 [ 430.287428][T26389] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8491: corrupted inode contents [ 430.327960][T26397] loop6: detected capacity change from 0 to 512 [ 430.334242][T26389] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 430.344681][T26389] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8491: corrupted inode contents [ 430.359530][T26389] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8491: mark_inode_dirty error [ 430.377802][T26389] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 430.389780][T26397] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 430.397825][T26397] EXT4-fs (loop6): orphan cleanup on readonly fs [ 430.404554][T26389] EXT4-fs (loop1): 1 truncate cleaned up [ 430.407135][T26397] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8493: corrupted inode contents [ 430.422373][ T3725] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 430.441160][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.450361][T26379] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8488'. [ 430.466916][T26397] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.8493: mark_inode_dirty error [ 430.467400][T26389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.486428][T26397] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8493: corrupted inode contents [ 430.514939][T26397] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.8493: mark_inode_dirty error [ 430.529648][T26397] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8493: corrupted inode contents [ 430.552223][T26397] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 430.562164][T26397] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.8493: corrupted inode contents [ 430.584252][T26397] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.8493: mark_inode_dirty error [ 430.597289][T26397] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 430.618955][T26397] EXT4-fs (loop6): 1 truncate cleaned up [ 430.624857][ T3724] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 430.636828][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.656370][T26397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.806057][T21788] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.859134][T26426] lo speed is unknown, defaulting to 1000 [ 430.865489][T26426] lo speed is unknown, defaulting to 1000 [ 431.038384][T26446] netlink: 'syz.0.8511': attribute type 21 has an invalid length. [ 431.115679][T26453] loop1: detected capacity change from 0 to 512 [ 431.146654][T26453] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 431.183726][T26453] EXT4-fs (loop1): orphan cleanup on readonly fs [ 431.221073][T26465] tipc: Started in network mode [ 431.225588][T26453] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8514: corrupted inode contents [ 431.226092][T26465] tipc: Node identity 7a089575e1c9, cluster identity 4711 [ 431.245012][T26465] tipc: Enabled bearer , priority 0 [ 431.253868][T26453] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8514: mark_inode_dirty error [ 431.265592][T26453] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8514: corrupted inode contents [ 431.279203][T26453] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8514: mark_inode_dirty error [ 431.279809][T26465] tipc: Disabling bearer [ 431.297880][T26453] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8514: corrupted inode contents [ 431.310032][T26453] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 431.319697][T26453] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8514: corrupted inode contents [ 431.332160][T26453] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8514: mark_inode_dirty error [ 431.344467][T26453] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 431.354136][T26453] EXT4-fs (loop1): 1 truncate cleaned up [ 431.360987][ T3724] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 1 [ 431.373751][T26453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.425678][T19309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.451095][T26477] lo speed is unknown, defaulting to 1000 [ 431.458980][T26477] lo speed is unknown, defaulting to 1000 [ 431.566630][T26489] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 431.574313][T26489] vhci_hcd: invalid port number 253 [ 431.579594][T26489] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 431.624622][T26491] netlink: 'syz.0.8527': attribute type 21 has an invalid length. [ 431.674823][T26492] sz1: rxe_newlink: already configured on lo [ 431.739283][T26492] loop1: detected capacity change from 0 to 128 [ 431.746750][T26492] msdos: Bad value for 'fmask' [ 431.889390][T26512] loop1: detected capacity change from 0 to 4096 [ 431.898347][T26512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.912410][T26512] EXT4-fs (loop1): Online defrag not supported with bigalloc [ 432.173279][T26527] 9pnet_fd: Insufficient options for proto=fd [ 432.220082][T26528] rdma_rxe: rxe_newlink: failed to add lo [ 432.294395][T26542] tipc: Enabling of bearer rejected, already enabled [ 432.303509][T26528] loop0: detected capacity change from 0 to 128 [ 432.320543][T26528] msdos: Bad value for 'fmask' [ 432.340530][T26546] bridge0: entered promiscuous mode [ 432.346930][T26546] bridge0: port 1(macsec1) entered blocking state [ 432.353377][T26546] bridge0: port 1(macsec1) entered disabled state [ 432.359976][T26546] macsec1: entered allmulticast mode [ 432.365274][T26546] bridge0: entered allmulticast mode [ 432.371027][T26546] macsec1: left allmulticast mode [ 432.376116][T26546] bridge0: left allmulticast mode [ 432.381962][T26546] bridge0: left promiscuous mode [ 432.454006][T26552] netlink: 'syz.0.8551': attribute type 21 has an invalid length. [ 432.646695][T26574] tipc: Enabling of bearer rejected, already enabled [ 432.672381][T26577] loop3: detected capacity change from 0 to 2048 [ 432.717297][T26577] Alternate GPT is invalid, using primary GPT. [ 432.723765][T26577] loop3: p2 p3 p7 [ 432.731671][T26577] SELinux: policydb magic number 0xd0328c does not match expected magic number 0xf97cff8c [ 432.741960][T26577] SELinux: failed to load policy [ 432.774238][T26577] ================================================================== [ 432.782339][T26577] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 432.791288][T26577] [ 432.793599][T26577] write to 0xffff88811919aca0 of 4 bytes by task 26580 on cpu 0: [ 432.801299][T26577] selinux_inode_permission+0x3ac/0x740 [ 432.806847][T26577] security_inode_permission+0x6d/0xb0 [ 432.812303][T26577] inode_permission+0x106/0x310 [ 432.817149][T26577] link_path_walk+0x162/0x900 [ 432.821825][T26577] path_openat+0x1de/0x2170 [ 432.826315][T26577] do_filp_open+0x109/0x230 [ 432.830803][T26577] io_openat2+0x272/0x390 [ 432.835123][T26577] io_openat+0x1b/0x30 [ 432.839188][T26577] __io_issue_sqe+0xfb/0x2e0 [ 432.843780][T26577] io_issue_sqe+0x53/0x970 [ 432.848281][T26577] io_wq_submit_work+0x3f7/0x5f0 [ 432.853216][T26577] io_worker_handle_work+0x44e/0x9b0 [ 432.858503][T26577] io_wq_worker+0x22e/0x870 [ 432.863006][T26577] ret_from_fork+0xda/0x150 [ 432.867499][T26577] ret_from_fork_asm+0x1a/0x30 [ 432.871253][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888116c19e00: rx timeout, send abort [ 432.872252][T26577] [ 432.872260][T26577] read to 0xffff88811919aca0 of 4 bytes by task 26577 on cpu 1: [ 432.890388][T26577] selinux_inode_permission+0x334/0x740 [ 432.895945][T26577] security_inode_permission+0x6d/0xb0 [ 432.901401][T26577] inode_permission+0x106/0x310 [ 432.906249][T26577] link_path_walk+0x162/0x900 [ 432.910917][T26577] path_openat+0x1de/0x2170 [ 432.915407][T26577] do_filp_open+0x109/0x230 [ 432.919896][T26577] io_openat2+0x272/0x390 [ 432.924213][T26577] io_openat+0x1b/0x30 [ 432.928274][T26577] __io_issue_sqe+0xfb/0x2e0 [ 432.932859][T26577] io_issue_sqe+0x53/0x970 [ 432.937276][T26577] io_submit_sqes+0x664/0x1050 [ 432.942038][T26577] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 432.947585][T26577] __x64_sys_io_uring_enter+0x78/0x90 [ 432.952959][T26577] x64_sys_call+0x2de1/0x2ff0 [ 432.957626][T26577] do_syscall_64+0xd2/0x200 [ 432.962121][T26577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.968004][T26577] [ 432.970313][T26577] value changed: 0x00000000 -> 0x00000001 [ 432.976011][T26577] [ 432.978317][T26577] Reported by Kernel Concurrency Sanitizer on: [ 432.984451][T26577] CPU: 1 UID: 0 PID: 26577 Comm: syz.3.8560 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 432.996591][T26577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.006629][T26577] ================================================================== [ 433.093703][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 433.093721][ T29] audit: type=1326 audit(1754682206.190:53619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.123472][ T29] audit: type=1326 audit(1754682206.210:53620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.147074][ T29] audit: type=1326 audit(1754682206.210:53621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.171601][ T29] audit: type=1326 audit(1754682206.230:53622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.195286][ T29] audit: type=1326 audit(1754682206.230:53623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.218898][ T29] audit: type=1326 audit(1754682206.250:53624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.242444][ T29] audit: type=1326 audit(1754682206.280:53625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.265979][ T29] audit: type=1326 audit(1754682206.301:53626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.289557][ T29] audit: type=1326 audit(1754682206.301:53627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.313148][ T29] audit: type=1326 audit(1754682206.301:53628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26562 comm="syz.0.8555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f02e59febe9 code=0x7ffc0000 [ 433.317098][ T3725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.380296][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888116c19e00: abort rx timeout. Force session deactivation [ 435.224256][ T146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.423015][ T146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.991998][ T3725] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration