last executing test programs: 6.786194592s ago: executing program 4 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0xffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x20, &(0x7f00000003c0)={&(0x7f0000000ac0)=""/4096, 0x1000, 0x0, &(0x7f0000002000)=""/4096, 0x1000}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa88a800008100000008004500001c0066000000019078ac1414bbac14140012009078000067ce"], 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022dbd7000fbdbdf45020000000d4c0b34b0dd01008bb88a73129018417731b4b1851c772c8e183edd856a97d9393a05f15fc585319e77f5d81f42f181fef2c94393c82ebaac51398778dabf9784b01fd0319c93d41f631015ba9fb21aabe76beb1339380daf5bcbfa764c69344ffe3e96c9de70fbd09a548c3ca2ead7e1655d053b096d46dc708affd0467f5a87aa5686be5b18207425fcac472f382c0e8894d8bd04bb582919c4f90c7a465972287accd7005161377025858647d7e6e5304f65aaa70a8d4285ca20100ff3ff3033af599a154bd7083d2da41b11172511c5c6695270e30d6d8e0b4017395dbded"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 6.518662257s ago: executing program 4 (id=262): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRESDEC=r0, @ANYBLOB="4f7450427fd91f1524ccc5fd5a3c10b6e451ca217667619c2cadacb616445caf96a904e7d24a8559e341376f52d2e0e756869d66eeaefd765b598b578edaf63150f3de82d98b402267e4c6bebbc0335d05f8910f1dfc21ddeccdaa0a5d0e6ba640163b964bc17c9b1177255cdeae0fb90f4ca4f6ec52bf34cc91e7a9fc467a4ed46e8a90cf1ab02c77aa99d3525504d25ad1f9a02aa2042b2113cc07043a0b78387c1a144011894944ec042d7301d4fbea64a7b4f266ddd033cfc282341589b0a07199f1c99e7cfa4369866349ed9c700df20ea37734"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0xe3b9}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000001100)=ANY=[@ANYBLOB="880000000314040026bd7000fedbdf250900020073797a300000000008004100736977001400330076657468315f766c616e0000000000000900020073797a30000000000800410072786500140033006970766c616e30000000000000c9d5f5cd8c0000000900020073797a310000000008004100727865001400330062617461647630000000000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001900)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0xd0, 0x1b0, 0xd0, 0x1b0, 0x0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0x203}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0x0, 0x0, 0xff, 0xffffff00], '\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x7}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1a, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00034000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x20048050, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) write(r9, 0x0, 0x0) 5.462550226s ago: executing program 4 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0xa7dc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r4) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) tgkill(0x0, 0x0, 0x21) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r5}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580), &(0x7f00000006c0)=0x4) bind$can_raw(r1, &(0x7f0000000800), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.940818646s ago: executing program 3 (id=275): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4c6}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0xffffffff, {{@in=@multicast2, @in6=@local, 0x4e21, 0x0, 0x3, 0x0, 0xa, 0x0, 0xa0}, {0x0, 0xe9, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x200}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x4d6, 0x3c}, 0x2, @in=@multicast1, 0x3504, 0x4, 0x3, 0x7, 0x8, 0x4, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4d3, 0x6c}, 0x2, @in=@local, 0x3501, 0x2, 0x0, 0x73, 0x7fff, 0xfff, 0x7}, {{@in6=@mcast2, 0x4d3, 0x3c}, 0x2, @in=@multicast1, 0x3506, 0x2, 0x3, 0x27, 0x5, 0x3, 0x200}, {{@in6=@loopback, 0x4d4, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x1, 0x7, 0x5, 0x3, 0x7}, {{@in6=@remote, 0x4d3, 0x3c}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x1, 0x9, 0x8, 0xe7, 0x7}]}]}, 0x1fc}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) 3.70074717s ago: executing program 2 (id=278): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700082c00fe800000000000000000000000000000ff0200000000000000000000000000018100807800000003"], 0x0) r1 = open(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0xfffffffffffffffd, 0x9}, {0xffffffff, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0xfff}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="3400000006060103000000000000000005000001050001000700ab3cddc838491c7d979e4d00000900020073797a31000000000900030073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x844}, 0x840) unshare(0x40600) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000540)={0x28000000, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0], 0x1}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x4886) r5 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x58) pwritev2(r5, 0x0, 0x0, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x4, 0xffff, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 3.197623839s ago: executing program 3 (id=279): r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x43) close(r0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x732) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073119a00000000008510000002000000b7000000000000009500c200000000009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000400)={0x1, 0x1, 0x14, 0x3}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x8) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r7, &(0x7f00000000c0)=""/4092, 0xffc) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r9, 0x5453, 0x7cb7562f2d67) 3.196115099s ago: executing program 1 (id=280): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0x71}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) r1 = epoll_create1(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2c802, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x0, 0x0, 0x160, 0x160, 0x62020048, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'geneve1\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a05050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0xed030000}}, {0x28, '\x00', 0x4}}}}, 0x3a4) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ppoll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) 3.030412262s ago: executing program 2 (id=281): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x24060400) r2 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x400002, 0x3a6}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x9381, 0x80, 0x7ffff, 0x2000088}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000280)=@IORING_OP_SHUTDOWN={0x22, 0x13, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x4d48, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="05"], 0x10) close(r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500), &(0x7f0000000540)=r7}, 0x20) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='mm_page_alloc\x00', r11, 0x0, 0x10000000006}, 0x18) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc016b3f087f03e3520000000000e2ffca1b1f000000000cc00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030004010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2.60982004s ago: executing program 4 (id=282): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000680)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname(r2, &(0x7f00000002c0)=@generic, &(0x7f0000000400)=0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x4, 0x8, 0x9238, 0x10001, 0x3]}, &(0x7f0000000580)=0x78) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r9, 0x7041, 0x0) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r10, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0xfffffffc}) 2.60798362s ago: executing program 2 (id=293): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 2.337760675s ago: executing program 0 (id=283): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 2.257149397s ago: executing program 1 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0xffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa88a800008100000008004500001c0066000000019078ac1414bbac14140012009078000067ce"], 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022dbd7000fbdbdf45020000000d4c0b34b0dd01008bb88a73129018417731b4b1851c772c8e183edd856a97d9393a05f15fc585319e77f5d81f42f181fef2c94393c82ebaac51398778dabf9784b01fd0319c93d41f631015ba9fb21aabe76beb1339380daf5bcbfa764c69344ffe3e96c9de70fbd09a548c3ca2ead7e1655d053b096d46dc708affd0467f5a87aa5686be5b18207425fcac472f382c0e8894d8bd04bb582919c4f90c7a465972287accd7005161377025858647d7e6e5304f65aaa70a8d4285ca20100ff3ff3033af599a154bd7083d2da41b11172511c5c6695270e30d6d8e0b4017395dbded"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 2.242521477s ago: executing program 3 (id=285): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xc7}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @mcast2, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c042) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$qrtr(0x2a, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a30000000002c000000030a0101000000000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20044041}, 0x8040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) geteuid() sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$qrtr(r2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.176710208s ago: executing program 1 (id=286): socket$inet_sctp(0x2, 0x1, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = fsmount(r1, 0x0, 0xce) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) sendfile(r3, r3, 0x0, 0x1000000201005) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x9, 0xf, 0x1, 0xd5, 0x9, 0x101, 0xd, 0xb05, 0x0, 0x0, 0x100, 0xebfa, 0xc3e9, 0x1, 0x98, 0x7, 0xed, 0x2, 0xffffff7f, 0x6, 0x9, 0x2}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) sendfile(r5, r4, 0x0, 0x7ffff000) creat(&(0x7f0000000000)='./bus\x00', 0x8e) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000280), 0x3, 0x44a, &(0x7f0000000600)="$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") capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x404c844, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @local}, 0x1c) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) 1.677992288s ago: executing program 2 (id=287): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x140c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shutdown(r0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x6f) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x476d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000014a, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) close(r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)={0x44, r6, 0x1, 0x70bd2a, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff1e}}]}, 0x44}}, 0x0) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r6, @ANYBLOB="10002cbd7000fddbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008c0003000000080001007063690011000200303030303a30303a31302e300000000008008c00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0001000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r7, @ANYBLOB="2408f23b691234686553dbd7fec1024a0a15c202a00a"], 0xa8}, 0x1, 0x0, 0x0, 0x20040090}, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x4821ea, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000006c0)={0x60, 0x2, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffff, &(0x7f00000003c0)=[{0x100, 0x7fffffffffffffff, 0xff}, {0x5, 0x5, 0xfffffffffffffff8}, {0x4, 0x400, 0xec}, {0x68c, 0x3, 0x4}, {0x8, 0x4, 0x9}, {0xe26, 0xd7, 0x10000}, {0xfffffffffffffff8, 0xffffffffffffffff, 0x1}], 0x7, 0x591, 0x2a, 0x40, 0x20, 0x28}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1.677563448s ago: executing program 3 (id=288): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b5c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) connect$vsock_stream(r6, &(0x7f00000001c0)={0x28, 0x0, 0x2710}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r7, &(0x7f0000000040)={0x11, 0x18, r8, 0x1, 0x3, 0x6, @broadcast}, 0x14) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r9, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r10 = syz_open_pts(r9, 0x0) r11 = dup3(r10, r9, 0x0) read$watch_queue(r11, &(0x7f0000003400)=""/4068, 0xfe4) 1.491596961s ago: executing program 1 (id=290): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000680)={[{@errors_remount}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_forget\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x200c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000010) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) shmctl$IPC_RMID(r0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x10) 1.392563663s ago: executing program 0 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@journal_dev={'journal_dev', 0x3d, 0xffff}}, {@init_itable}, {@nojournal_checksum}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {@noload}, {@inlinecrypt}]}, 0x2, 0x500, &(0x7f0000000500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) lremovexattr(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8400, &(0x7f0000001640)={[{@discard}, {@norecovery}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x7b9, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x100, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x0, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3, 0x8000}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x4000000, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x724a969d}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0xe, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x8510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0xfffffffe}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1, 0x3c}, {}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x2004}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10001, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x1f0, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r1, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000680), &(0x7f0000000a80), 0x8, 0x40fa, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESOCT=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x1, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000001240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r8, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x0, 0x2}, 0x1}}, 0x10, 0x0}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1008002, &(0x7f0000000080)=ANY=[], 0x1, 0x2ee, &(0x7f00000006c0)="$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") 1.235278266s ago: executing program 0 (id=292): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000001a240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000aedbe0ba0500000004000000000000000000000000000000000000003e578f4067038b44d885d4ac006dd008d48b98954d6e0740bb564a2109171fae9138fcb92bcac3c126f0f0fc29e007c60c91f6b3e70924bca2e5af4ba3fe1149920858207a85b35369c03a0dbd999a7bd4d632b454203a5394908ec60f2a1dee277068243edeffa847a5e081f908c0ded2edefed5217fc6ea22e3814f122538d704908cfc8f4db"], 0x50) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') ioctl$RTC_WIE_OFF(r3, 0x7010) pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x14, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000ff5f030006000000d95af0ffffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000000085000000861000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x6, 0x4, 0x3}, 0x10, 0x0, r2, 0x1, &(0x7f0000000a80)=[r4, r1, r3, r4], &(0x7f0000000140)=[{0x3, 0x5, 0x9, 0x2}], 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) io_pgetevents(0x0, 0x3, 0x0, &(0x7f00000002c0), &(0x7f00000004c0)={0x77359400}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0xaac8c000) 1.136558748s ago: executing program 4 (id=294): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x22) r1 = accept(0xffffffffffffffff, &(0x7f0000000340)=@rc={0x1f, @none}, &(0x7f00000003c0)=0x80) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/118, 0x76}, {&(0x7f0000000600)=""/154, 0x9a}, {&(0x7f00000006c0)=""/101, 0x65}, {&(0x7f0000000740)=""/187, 0xbb}], 0x4, &(0x7f0000000800)=""/154, 0x9a}, 0x2040) gettid() write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x25, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000002c0)={0x32, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e24, 0x0, 'lblcr\x00', 0x27, 0x56, 0x46}, 0x2c) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ea793dbe362460cc0bc6ee31a3a593f89ca631f30483b42f3daa260cf57b2a4928c18c70962547a873811991"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000005000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) 926.551071ms ago: executing program 4 (id=295): readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/21, 0xb}], 0x3e8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe69, 0x0, 0x1, 0x155}) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES64=r1, @ANYRES16=r2, @ANYRESDEC, @ANYRESDEC=r1, @ANYRES64=r1, @ANYRESOCT=r3], 0x48) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ptrace$pokeuser(0x6, r5, 0x358, 0x0) r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r8, r4, 0x0, 0x80000000) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) 732.152855ms ago: executing program 2 (id=296): r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) capset(&(0x7f0000000140)={0x20080522, r0}, &(0x7f00000000c0)={0x200000, 0x200000, 0x40007, 0x0, 0x0, 0x4}) r5 = syz_pidfd_open(r0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r7}, 0x20) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="ff822820", @ANYRES64=r8, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES8=r4, @ANYBLOB], 0x28}}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000480)={r11, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000040)={r11, 0x11, 0x6, @multicast}, 0x10) close(r8) setns(r5, 0x24020000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 687.479386ms ago: executing program 3 (id=297): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000040000000800", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff0000000000001000"/24, @ANYRES32=r0, @ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='thermal_power_cpu_get_power\x00', r2, 0x0, 0xfffffffffffffffa}, 0x20) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') syz_io_uring_setup(0xd2, &(0x7f0000000200)={0x0, 0x83ae, 0x800, 0x2}, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00030000000000fc0100000000000000000000ea2fa43c00000000"], 0xa0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) lsetxattr(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x1) setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)="ba5b7d73de9438a204aed62b6bf2aa656c3d964dbbec67dd76b833e44fc5a4f92c744773d0aaa6279fe1f73777f57ae5e507ae2554c4c657a5c8d68128208e41baf461630345e6b611414036ffa21559f74df363b340a11b792f5e6a58ab87b43affa230061b1b97675e5e4a830b7a9c1235833f2abe08324bbcf054d4c2427c61012dbddabd7883d6240d1d2a2bb47135521ea82f1edc89d778f42db50f59b6b46e16a40f0b134cfbdcda6cb3e5dc67241672b94f09818aa6fe9fc755b5b314a30172c4d74858a476a844d6292b9e93f2bc774618f1f45cac6f4254cf01836f6cd9e6673d8a17d6cb76990c9780d288ece071e3043144db1bc2bd18f7ca867aff32d74bf0c4769c4186427782e0028654be942eba7bcf42252bdb8dd902cce3eb2a38130611f69da2ebede168da9c2522f12e75550a53160731ee9ddd13c38400036d3537c7a21ecadef5cb796ebc214d9d00282a42f5d2517f8854e830e3d2ed111404d7fa95fbeecf192a51388a5e421d6e6d3432b83d2a7719724b0d314441cac1b6f207d594c23d01542f1be41dc3c0393ff87f2bffaa707537da2e63d3373b13130746a228be8c9f6b0df5083400547c183933910354afc7e6ad08ebef4dc31b589099332dd8054c1f757f455a22f1da630dacf10dfd69b531e51646b8ef0a422af33fd8b354653232c77804c5223d04894a8892f6bd85f23176dc91462ca13a894cf241f8c016bcdf32f02c693c2fecd1800b62cec967d6babf2bd23a9418fb581922366fdb00996b98560e3086af409546f10485d9ac692ede172dc832e729c2c6a73ade84d96ac6b17e840edd30c51560d897ebd059c4735230a604caa4301f7fa3d68dacfe3ae3d15b0f770a8f16c3da036587a5533c57c09ff376c5209326a118827de123a48db9bededcea696aa2ad297ecb0fa8230803556fa9e41a66021579a74b8deb2b69993e32a8b9ee4c55543e46443d1883ec5f70a949d61ccdac77a38b3c8b08e9c789de0e070ae42b79b7db1d3fa8741782a2b5aa0463553c97546181b44f79cab75fa3f1043072e0663811690368c69a855170a823a2ab147d7e773da247733a60481aeb9c5a789d1763b8a527d5283bd351ec4036eac7d5ea7148611882de0bd82c84031b93398ea49df04c620d6ef255e3df6e0025e25bb0d89bc10508491842154555b7df08b3a05bd23ebbb10cc54b389582b652b94c87d278cf61724b58f64a", 0x36d, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xfdffffff, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x62, 0xe12f}, 0x0, 0x0, 0xb, 0xfffffffffffffff7, 0xf3b8, 0xe640, 0x7, 0x5, 0x9, 0x6b}) r9 = syz_io_uring_setup(0x6265, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000007c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0xf, 0x0, {0x1}}) io_uring_enter(r9, 0x20004d0f, 0x2, 0x2, 0x0, 0xffffffffffffffea) 530.686319ms ago: executing program 1 (id=298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000a80)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0xffffffff) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa88a800008100000008004500001c0066000000019078ac1414bbac14140012009078000067ce"], 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="00022dbd7000fbdbdf45020000000d4c0b34b0dd01008bb88a73129018417731b4b1851c772c8e183edd856a97d9393a05f15fc585319e77f5d81f42f181fef2c94393c82ebaac51398778dabf9784b01fd0319c93d41f631015ba9fb21aabe76beb1339380daf5bcbfa764c69344ffe3e96c9de70fbd09a548c3ca2ead7e1655d053b096d46dc708affd0467f5a87aa5686be5b18207425fcac472f382c0e8894d8bd04bb582919c4f90c7a465972287accd7005161377025858647d7e6e5304f65aaa70a8d4285ca20100ff3ff3033af599a154bd7083d2da41b11172511c5c6695270e30d6d8e0b4017395dbded"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 424.047261ms ago: executing program 2 (id=299): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101041) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='module_request\x00', r2, 0x0, 0x8000000000000002}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x28001, 0x0) r3 = io_uring_setup(0x3c50, &(0x7f0000000080)={0x0, 0x1ed6, 0x1, 0x80001}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000340), 0x4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x13}}}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYRES8=r7], 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f0000000200)={0x0, 0x55, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 404.236402ms ago: executing program 1 (id=300): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 352.840973ms ago: executing program 0 (id=301): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000007fffffde", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000300000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r0, @ANYRES32=r5], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kmem_cache_free\x00', r11, 0x0, 0x4}, 0x18) r12 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r12, &(0x7f0000000040), 0x10) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ishtp_dump\x00', r2, 0x0, 0x9}, 0x18) r13 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x11, r13, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r16 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r14, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r16}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) ftruncate(r13, 0x200000) r17 = open_tree(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x0) pwrite64(r17, &(0x7f0000000740)="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", 0x1000, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 296.482773ms ago: executing program 3 (id=302): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x8000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) 128.386687ms ago: executing program 0 (id=303): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x1, 0x6, @random="0b65c01cd7d3"}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 0s ago: executing program 0 (id=304): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0xffffffffffffff21) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) name_to_handle_at(r6, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000a40)=ANY=[@ANYRESDEC=r2, @ANYBLOB="ca", @ANYRES32, @ANYRES64=r2, @ANYRES32=r0, @ANYRESDEC=r1, @ANYRESOCT=r4, @ANYRES64, @ANYRES8=r0, @ANYRESHEX=r5], &(0x7f00000047c0), 0x400) openat$cgroup_ro(r6, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r9, r11, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r11, {0x0, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r12, 0x4) r13 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r13, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r14, 0x545c, 0x0) ioctl$TIOCVHANGUP(r14, 0x5437, 0x300) kernel console output (not intermixed with test programs): is strongly recommended to keep mac addresses unique to avoid problems! [ 33.116902][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.136032][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.144975][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.154329][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.163380][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.174327][ T3315] veth1_vlan: entered promiscuous mode [ 33.184827][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.195715][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.205697][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.216244][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.226239][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.236830][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.247890][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.256443][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.265609][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.274466][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.283217][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.302148][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.312658][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.322593][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.333058][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.342920][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.353551][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.369949][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.397643][ T3315] veth0_macvtap: entered promiscuous mode [ 33.411297][ T3315] veth1_macvtap: entered promiscuous mode [ 33.426346][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.437004][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.446897][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.457409][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.467247][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.477856][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.487706][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.499284][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.511295][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.519163][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.528421][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.537418][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.546264][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.557228][ T3454] netlink: '+}[@': attribute type 4 has an invalid length. [ 33.570992][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.581770][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.592154][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.597883][ C1] hrtimer: interrupt took 45356 ns [ 33.603858][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.618534][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.629207][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.639285][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.650669][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.656717][ T3456] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 33.663120][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.698241][ T3315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.707404][ T3315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.716257][ T3315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.725554][ T3315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.813522][ T3458] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.834974][ T3467] pim6reg: entered allmulticast mode [ 33.937456][ T3473] capability: warning: `syz.2.3' uses 32-bit capabilities (legacy support in use) [ 33.946932][ T3458] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.974600][ T3472] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 33.985022][ T3467] pim6reg: left allmulticast mode [ 33.996720][ T3471] pim6reg: entered allmulticast mode [ 34.001332][ T3456] syz.1.2 (3456) used greatest stack depth: 11032 bytes left [ 34.016954][ T3468] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 34.053860][ T3480] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 34.058792][ T3471] pim6reg: left allmulticast mode [ 34.077510][ T3478] ======================================================= [ 34.077510][ T3478] WARNING: The mand mount option has been deprecated and [ 34.077510][ T3478] and is ignored by this kernel. Remove the mand [ 34.077510][ T3478] option from the mount to silence this warning. [ 34.077510][ T3478] ======================================================= [ 34.205915][ T3472] syz.3.4 (3472) used greatest stack depth: 10088 bytes left [ 34.232954][ T3478] loop1: detected capacity change from 0 to 2048 [ 34.298966][ T3499] netlink: 'syz.4.9': attribute type 3 has an invalid length. [ 34.340833][ T3502] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 34.358261][ T3499] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 34.379338][ T3458] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.427370][ T3507] loop4: detected capacity change from 0 to 512 [ 34.440307][ T3507] EXT4-fs: Invalid want_extra_isize 61 [ 34.461265][ T3502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 34.470294][ T3502] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 34.755969][ T3458] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.784129][ T3545] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.829135][ T3539] loop1: detected capacity change from 0 to 512 [ 34.850152][ T3539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.911754][ T3539] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.924827][ T3552] xt_hashlimit: max too large, truncated to 1048576 [ 34.934209][ T3539] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.952951][ T3552] Cannot find set identified by id 0 to match [ 34.965395][ T3539] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13'. [ 34.976874][ T3539] netlink: 'syz.1.13': attribute type 13 has an invalid length. [ 35.096367][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.103823][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.126459][ T3566] loop3: detected capacity change from 0 to 512 [ 35.139919][ T3566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.162616][ T3566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.177572][ T3566] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.193925][ T3566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15'. [ 35.222858][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.233661][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.252916][ T3566] netlink: 'syz.3.15': attribute type 13 has an invalid length. [ 35.277131][ T3539] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.286547][ T3539] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.295866][ T3539] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.306927][ T3539] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.392663][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.416868][ T3566] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.424259][ T3566] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.529743][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.594003][ T3592] loop1: detected capacity change from 0 to 512 [ 35.602077][ T3592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.665206][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.693743][ T3592] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.701432][ T3592] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.16: bg 0: block 248: padding at end of block bitmap is not set [ 35.718398][ T3592] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.16: Failed to acquire dquot type 1 [ 35.730538][ T3592] EXT4-fs (loop1): 1 truncate cleaned up [ 35.740821][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.819812][ T3592] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.16: deleted inode referenced: 12 [ 36.087135][ T3566] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.096221][ T3566] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.105237][ T3566] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.114203][ T3566] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.298197][ T3609] loop4: detected capacity change from 0 to 2048 [ 36.554228][ T3592] syz.1.16 (3592) used greatest stack depth: 9528 bytes left [ 36.554821][ T3609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.592004][ T3458] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.616851][ T3458] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.625839][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.638907][ T3458] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.716990][ T3458] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.891936][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.079116][ T3618] loop0: detected capacity change from 0 to 512 [ 37.097074][ T3618] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.110448][ T3618] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.158566][ T3618] EXT4-fs (loop0): 1 truncate cleaned up [ 37.166055][ T3618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.287846][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.417015][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 37.426780][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 37.475781][ T3637] loop4: detected capacity change from 0 to 164 [ 37.575140][ T3637] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 37.638525][ T3637] process 'syz.4.27' launched '/dev/fd/0' with NULL argv: empty string added [ 37.647665][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 37.647679][ T29] audit: type=1400 audit(1747172813.663:272): avc: denied { execute } for pid=3634 comm="syz.4.27" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.675306][ T3637] syz.4.27: attempt to access beyond end of device [ 37.675306][ T3637] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 37.695016][ T29] audit: type=1400 audit(1747172813.703:273): avc: denied { execute_no_trans } for pid=3634 comm="syz.4.27" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.698898][ T3637] syz.4.27: attempt to access beyond end of device [ 37.698898][ T3637] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 37.749214][ T3644] smc: net device bond0 applied user defined pnetid SYZ2 [ 37.756936][ T3644] smc: net device bond0 erased user defined pnetid SYZ2 [ 37.816986][ T3646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.30'. [ 37.830709][ T3646] loop3: detected capacity change from 0 to 128 [ 37.837725][ T3646] EXT4-fs: Ignoring removed nobh option [ 37.849569][ T29] audit: type=1400 audit(1747172813.823:274): avc: denied { write } for pid=3643 comm="syz.3.29" path="socket:[4697]" dev="sockfs" ino=4697 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.887721][ T3646] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.887810][ T29] audit: type=1400 audit(1747172813.913:275): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 37.901000][ T3646] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.958023][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.979631][ T3650] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 37.987435][ T3650] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 37.995206][ T3650] netlink: 610 bytes leftover after parsing attributes in process `syz.4.31'. [ 38.024736][ T3652] netlink: 256 bytes leftover after parsing attributes in process `syz.3.30'. [ 38.045410][ T29] audit: type=1400 audit(1747172814.073:276): avc: denied { create } for pid=3649 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.047040][ T3650] netlink: 'syz.4.31': attribute type 10 has an invalid length. [ 38.075333][ T3629] netlink: 3 bytes leftover after parsing attributes in process `syz.2.26'. [ 38.086353][ T3629] 0ªX¹¦À: renamed from caif0 [ 38.087019][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.090983][ T29] audit: type=1400 audit(1747172814.103:277): avc: denied { read write } for pid=3653 comm="syz.0.32" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.099234][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.122714][ T29] audit: type=1400 audit(1747172814.103:278): avc: denied { open } for pid=3653 comm="syz.0.32" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 38.153933][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.162002][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.170142][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.178483][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.187017][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.191397][ T29] audit: type=1400 audit(1747172814.213:279): avc: denied { write } for pid=3628 comm="syz.2.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.194925][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.194956][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.220731][ T29] audit: type=1400 audit(1747172814.243:280): avc: denied { append } for pid=3653 comm="syz.0.32" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.223450][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.241051][ T29] audit: type=1400 audit(1747172814.263:281): avc: denied { create } for pid=3653 comm="syz.0.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 38.253769][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.253846][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.297123][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.304913][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.312729][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.320492][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.328427][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.336754][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.344893][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.352793][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.360610][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.368441][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.376224][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.384023][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.391884][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.399814][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.407622][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.416136][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.424418][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.432244][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.440108][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.448149][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.456222][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.464026][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.471948][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.479774][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.487621][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.496023][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.504325][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.512246][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.516404][ T3668] usb usb1: usbfs: process 3668 (syz.0.32) did not claim interface 0 before use [ 38.520474][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.537390][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.545283][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.553260][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.561098][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.568929][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.577232][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.585689][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.593527][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.601497][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.609292][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.617152][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.624962][ T10] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 38.654405][ T10] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 38.666924][ T3629] 0ªX¹¦À: entered allmulticast mode [ 38.672332][ T3629] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 38.688706][ T3650] syz_tun: entered promiscuous mode [ 38.706718][ T3650] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 38.767186][ T3673] fido_id[3673]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.325511][ T3688] IPv6: syztnl0: Disabled Multicast RS [ 39.351766][ T3692] loop4: detected capacity change from 0 to 512 [ 39.411903][ T3691] loop2: detected capacity change from 0 to 512 [ 39.685714][ T3315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.724121][ T3692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.759683][ T3691] EXT4-fs (loop2): 1 orphan inode deleted [ 39.777129][ T3691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.794229][ T3692] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.816922][ T3691] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.955256][ T3692] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.971941][ T3714] loop1: detected capacity change from 0 to 512 [ 39.981778][ T3692] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.995990][ T3714] EXT4-fs: Ignoring removed nobh option [ 40.048889][ T3714] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.41: invalid indirect mapped block 256 (level 2) [ 40.074339][ T3714] EXT4-fs (loop1): 2 truncates cleaned up [ 40.112701][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.171926][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.191859][ T3714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.215156][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.222947][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.230406][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 40.230713][ T3717] loop3: detected capacity change from 0 to 2048 [ 40.240978][ T3719] netlink: 256 bytes leftover after parsing attributes in process `syz.2.42'. [ 40.253604][ T3719] unsupported nlmsg_type 40 [ 40.275364][ T3717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.289890][ T3714] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.41: bg 0: block 5: invalid block bitmap [ 40.304891][ T3717] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.724300][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 40.797761][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 424 with error 117 [ 40.810379][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.810379][ T37] [ 41.087076][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.095008][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.102470][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.111426][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.118901][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.126513][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.134617][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.142510][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.150286][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.157903][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.159105][ T3730] mmap: syz.4.43 (3730) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.168947][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.184969][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.192721][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.200140][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.207748][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.215263][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.222782][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.230429][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.236810][ T3730] loop4: detected capacity change from 0 to 1024 [ 41.238102][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.252005][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.259520][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.267137][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.275570][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.283078][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.285634][ T3730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.290692][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 41.333406][ T3730] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.362779][ T3730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 41.383730][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 41.403985][ T3732] ALSA: seq fatal error: cannot create timer (-19) [ 41.432499][ T3730] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.43: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.455419][ T3732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 41.473390][ T3735] fido_id[3735]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.496192][ T3730] EXT4-fs (loop4): Remounting filesystem read-only [ 41.509176][ T3737] loop2: detected capacity change from 0 to 128 [ 41.518312][ T3730] EXT4-fs (loop4): 1 orphan inode deleted [ 41.535447][ T3737] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 41.556207][ T3730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.586130][ T3737] tmpfs: Bad value for 'mpol' [ 41.591680][ T3730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.665778][ T3747] loop0: detected capacity change from 0 to 512 [ 41.681580][ T3747] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.709336][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 41.711831][ T3747] capability: warning: `syz.0.46' uses deprecated v2 capabilities in a way that may be insecure [ 41.723463][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.723463][ T37] loop2: rw=1, sector=137, nr_sectors = 8 limit=128 [ 41.763240][ T3726] syz.3.40 (3726) used greatest stack depth: 9496 bytes left [ 41.770129][ T3747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.46'. [ 41.806334][ T3730] loop4: detected capacity change from 0 to 512 [ 41.807166][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.807166][ T37] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 41.828279][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.828279][ T37] loop2: rw=1, sector=169, nr_sectors = 16 limit=128 [ 41.843997][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.843997][ T37] loop2: rw=1, sector=193, nr_sectors = 8 limit=128 [ 41.844841][ T3730] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.43: Failed to acquire dquot type 1 [ 41.857454][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.857454][ T37] loop2: rw=1, sector=209, nr_sectors = 8 limit=128 [ 41.883168][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.883168][ T37] loop2: rw=1, sector=225, nr_sectors = 8 limit=128 [ 41.896801][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.896801][ T37] loop2: rw=1, sector=241, nr_sectors = 8 limit=128 [ 41.910935][ T3730] EXT4-fs (loop4): 1 truncate cleaned up [ 41.917149][ T3730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.936144][ T3730] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.959884][ T3717] syz.3.40 (3717) used greatest stack depth: 6992 bytes left [ 41.967404][ T37] kworker/u8:2: attempt to access beyond end of device [ 41.967404][ T37] loop2: rw=1, sector=257, nr_sectors = 8 limit=128 [ 41.983468][ T3730] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.002724][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.018329][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 42.082019][ T3747] Cannot find del_set index 3 as target [ 42.329457][ T3763] loop4: detected capacity change from 0 to 512 [ 42.346851][ T3713] Set syz1 is full, maxelem 65536 reached [ 42.364621][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.379344][ T3418] FAT-fs (loop2): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 42.399141][ T3763] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.412366][ T3763] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.419485][ T3763] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.49: Failed to acquire dquot type 1 [ 42.452942][ T3763] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.49: bg 0: block 40: padding at end of block bitmap is not set [ 42.484391][ T3771] loop1: detected capacity change from 0 to 2048 [ 42.491290][ T3771] EXT4-fs: Ignoring removed bh option [ 42.497613][ T3763] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 42.510886][ T3763] EXT4-fs (loop4): 1 truncate cleaned up [ 42.511271][ T3773] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 42.527099][ T3763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.540142][ T3766] loop0: detected capacity change from 0 to 256 [ 42.560730][ T3771] EXT4-fs: Mount option(s) incompatible with ext2 [ 42.612189][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.659990][ T3774] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 42.700663][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 42.700681][ T29] audit: type=1400 audit(1747172818.723:581): avc: denied { create } for pid=3775 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.722145][ T3778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 42.728458][ T29] audit: type=1400 audit(1747172818.743:582): avc: denied { lock } for pid=3770 comm="syz.1.51" path="socket:[5432]" dev="sockfs" ino=5432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 42.734965][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 42.758550][ T29] audit: type=1400 audit(1747172818.753:583): avc: denied { write } for pid=3775 comm="syz.4.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 42.767458][ T3778] netlink: 'syz.1.51': attribute type 15 has an invalid length. [ 42.822719][ T3779] loop4: detected capacity change from 0 to 512 [ 42.829533][ T3779] ext2: Unknown parameter 'nouser_xattr' [ 42.952441][ T29] audit: type=1400 audit(1747172818.973:584): avc: denied { ioctl } for pid=3795 comm="syz.3.53" path="socket:[4787]" dev="sockfs" ino=4787 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.002647][ T3796] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 43.025394][ T3796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.043363][ T29] audit: type=1400 audit(1747172819.053:585): avc: denied { read write } for pid=3795 comm="syz.3.53" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.066707][ T29] audit: type=1400 audit(1747172819.053:586): avc: denied { open } for pid=3795 comm="syz.3.53" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.090144][ T29] audit: type=1400 audit(1747172819.053:587): avc: denied { ioctl } for pid=3795 comm="syz.3.53" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.092681][ T3796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.198021][ T3796] vlan2: entered allmulticast mode [ 43.250891][ T3816] loop0: detected capacity change from 0 to 128 [ 43.259940][ T3816] EXT4-fs: Ignoring removed nobh option [ 43.271810][ T3816] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.293897][ T3816] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.312771][ T29] audit: type=1400 audit(1747172819.343:588): avc: denied { read write } for pid=3808 comm="syz.0.54" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.337388][ T29] audit: type=1400 audit(1747172819.343:589): avc: denied { open } for pid=3808 comm="syz.0.54" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 43.394927][ T3823] loop1: detected capacity change from 0 to 8192 [ 43.407745][ T3827] siw: device registration error -23 [ 43.421647][ T29] audit: type=1400 audit(1747172819.373:590): avc: denied { append } for pid=3808 comm="syz.0.54" path="/10/mnt/memory.numa_stat" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.618104][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.695741][ T3862] syz.4.57 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.780619][ T3875] loop0: detected capacity change from 0 to 2048 [ 43.808945][ T3875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.339835][ T3891] syzkaller0: entered allmulticast mode [ 44.358770][ T3891] syzkaller0: entered promiscuous mode [ 44.395972][ T3891] syzkaller0 (unregistering): left promiscuous mode [ 44.402768][ T3891] syzkaller0 (unregistering): left allmulticast mode [ 44.406286][ T3896] xt_hashlimit: max too large, truncated to 1048576 [ 44.419602][ T3896] Cannot find set identified by id 0 to match [ 44.442346][ T3894] loop3: detected capacity change from 0 to 256 [ 44.446334][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.535422][ T3905] loop0: detected capacity change from 0 to 512 [ 44.574747][ T3905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.587619][ T3905] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.614189][ T3915] loop1: detected capacity change from 0 to 256 [ 44.655881][ T3918] loop4: detected capacity change from 0 to 2048 [ 44.669122][ T3904] loop3: detected capacity change from 0 to 164 [ 44.677607][ T3908] netlink: 'syz.2.70': attribute type 3 has an invalid length. [ 44.687101][ T3908] siw: device registration error -23 [ 44.711107][ T3904] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.728624][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.730318][ T3904] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.757124][ T3926] loop2: detected capacity change from 0 to 512 [ 44.800416][ T3926] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.824112][ T3914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.825640][ T3926] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.72: bad orphan inode 13 [ 44.843228][ T3904] Symlink component flag not implemented [ 44.848934][ T3904] Symlink component flag not implemented [ 44.862402][ T3904] Symlink component flag not implemented (7) [ 44.864513][ T3926] ext4_test_bit(bit=12, block=18) = 1 [ 44.868437][ T3904] Symlink component flag not implemented (116) [ 44.873835][ T3926] is_bad_inode(inode)=0 [ 44.873846][ T3926] NEXT_ORPHAN(inode)=2130706432 [ 44.889229][ T3926] max_ino=32 [ 44.892478][ T3926] i_nlink=1 [ 44.896165][ T3926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.990927][ T3933] loop3: detected capacity change from 0 to 1024 [ 45.000329][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.046205][ T3933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.057599][ T3933] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.069787][ T3933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 45.115478][ T3933] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.73: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.142650][ T3933] EXT4-fs (loop3): Remounting filesystem read-only [ 45.222033][ T3933] EXT4-fs (loop3): 1 orphan inode deleted [ 45.244209][ T3933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.276854][ T3933] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.321502][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.408133][ T3941] loop2: detected capacity change from 0 to 1024 [ 45.427224][ T3943] netlink: 'syz.0.76': attribute type 27 has an invalid length. [ 45.436922][ T3941] EXT4-fs: Ignoring removed orlov option [ 45.468233][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.480878][ T3948] loop3: detected capacity change from 0 to 512 [ 45.505457][ T3948] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.73: Failed to acquire dquot type 1 [ 45.517682][ T3951] netlink: 44 bytes leftover after parsing attributes in process `syz.0.76'. [ 45.578030][ T3948] EXT4-fs (loop3): 1 truncate cleaned up [ 45.600474][ T3943] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.608084][ T3943] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.624235][ T3948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.670838][ T3948] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.707457][ T3943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.717930][ T3943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.753152][ T3943] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.762426][ T3943] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.771383][ T3943] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.780616][ T3943] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.813125][ T3948] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.995422][ T3954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27920 sclass=netlink_route_socket pid=3954 comm=syz.0.78 [ 46.043059][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.088122][ T3954] Cannot find add_set index 0 as target [ 46.154477][ T3957] loop4: detected capacity change from 0 to 256 [ 46.161075][ T3955] loop0: detected capacity change from 0 to 512 [ 46.202709][ T3959] loop3: detected capacity change from 0 to 1024 [ 46.242281][ T3959] EXT4-fs: Ignoring removed orlov option [ 46.253050][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.254370][ T3955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.285796][ T3959] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.303307][ T3955] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.376735][ T3964] syzkaller0: entered allmulticast mode [ 46.384693][ T3964] syzkaller0: entered promiscuous mode [ 46.397812][ T3964] syzkaller0 (unregistering): left promiscuous mode [ 46.404792][ T3964] syzkaller0 (unregistering): left allmulticast mode [ 46.733584][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.806231][ T3976] loop0: detected capacity change from 0 to 2048 [ 46.817549][ T3969] netlink: 204 bytes leftover after parsing attributes in process `syz.2.82'. [ 46.829563][ T3976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.922134][ T3974] loop1: detected capacity change from 0 to 164 [ 46.933296][ T3974] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 46.956383][ T3974] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.001817][ T3974] Symlink component flag not implemented [ 47.007649][ T3974] Symlink component flag not implemented [ 47.017577][ T3979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 47.026562][ T3974] Symlink component flag not implemented (7) [ 47.032640][ T3974] Symlink component flag not implemented (116) [ 47.040786][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.069858][ T3987] loop4: detected capacity change from 0 to 512 [ 47.100236][ T3987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.112902][ T3987] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.140613][ T3995] random: crng reseeded on system resumption [ 47.232452][ T4000] loop2: detected capacity change from 0 to 2048 [ 47.246882][ T4000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.395947][ T4007] tipc: Started in network mode [ 47.400932][ T4007] tipc: Node identity 4, cluster identity 4711 [ 47.407291][ T4007] tipc: Node number set to 4 [ 47.644731][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.755656][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 47.755674][ T29] audit: type=1400 audit(1747172823.783:873): avc: denied { connect } for pid=4011 comm="+|[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.843233][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.939847][ T4019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27920 sclass=netlink_route_socket pid=4019 comm=syz.1.95 [ 47.970279][ T29] audit: type=1400 audit(1747172823.993:874): avc: denied { read } for pid=4018 comm="syz.0.97" path="socket:[5702]" dev="sockfs" ino=5702 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.027102][ T4022] loop1: detected capacity change from 0 to 512 [ 48.048267][ T4025] loop4: detected capacity change from 0 to 1024 [ 48.055673][ T4025] EXT4-fs: Ignoring removed orlov option [ 48.095310][ T4022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.118356][ T4022] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.131184][ T4025] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.226446][ T29] audit: type=1400 audit(1747172824.253:875): avc: denied { name_bind } for pid=4018 comm="syz.0.97" src=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 48.262949][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.550400][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.566155][ T4034] loop2: detected capacity change from 0 to 164 [ 48.587096][ T4038] netlink: 'syz.1.100': attribute type 21 has an invalid length. [ 48.599149][ T4034] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.618830][ T4034] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 48.627564][ T4038] netlink: 144 bytes leftover after parsing attributes in process `syz.1.100'. [ 48.643679][ T29] audit: type=1326 audit(1747172824.663:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72232e969 code=0x7ffc0000 [ 48.667149][ T29] audit: type=1326 audit(1747172824.673:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff72232e969 code=0x7ffc0000 [ 48.668834][ T4034] Symlink component flag not implemented [ 48.690695][ T29] audit: type=1326 audit(1747172824.673:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72232e969 code=0x7ffc0000 [ 48.690743][ T29] audit: type=1326 audit(1747172824.673:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff72232e969 code=0x7ffc0000 [ 48.696523][ T4034] Symlink component flag not implemented [ 48.719711][ T29] audit: type=1326 audit(1747172824.673:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72232e969 code=0x7ffc0000 [ 48.772113][ T29] audit: type=1326 audit(1747172824.673:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff72232e969 code=0x7ffc0000 [ 48.777435][ T4034] Symlink component flag not implemented (7) [ 48.801898][ T4034] Symlink component flag not implemented (116) [ 48.802123][ T29] audit: type=1326 audit(1747172824.673:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.1.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72232e969 code=0x7ffc0000 [ 48.837084][ T4034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.939670][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.958229][ T4049] loop0: detected capacity change from 0 to 512 [ 48.974761][ T4049] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.996767][ T4049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 49.034719][ T4050] loop3: detected capacity change from 0 to 512 [ 49.038683][ T4052] loop4: detected capacity change from 0 to 2048 [ 49.056945][ T4052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.074706][ T4050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.090425][ T4049] Cannot find del_set index 3 as target [ 49.122042][ T4050] EXT4-fs (loop3): 1 truncate cleaned up [ 49.130364][ T4050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.331670][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.359240][ T4064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.116'. [ 49.591054][ T4080] netlink: 'syz.0.108': attribute type 3 has an invalid length. [ 49.596578][ T4086] random: crng reseeded on system resumption [ 49.601517][ T4080] siw: device registration error -23 [ 49.654468][ T4091] loop1: detected capacity change from 0 to 1024 [ 49.686331][ T4091] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.119: Failed to acquire dquot type 0 [ 49.704316][ T4091] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 49.723150][ T4091] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.119: corrupted inode contents [ 49.736522][ T4091] EXT4-fs error (device loop1): ext4_dirty_inode:6103: inode #13: comm syz.1.119: mark_inode_dirty error [ 49.774014][ T4103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.782356][ T4091] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.119: corrupted inode contents [ 49.809991][ T4091] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.119: mark_inode_dirty error [ 49.839940][ T4091] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.119: corrupted inode contents [ 49.866836][ T4091] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 49.877087][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.878483][ T4091] EXT4-fs error (device loop1): ext4_do_update_inode:5211: inode #13: comm syz.1.119: corrupted inode contents [ 49.910258][ T4091] EXT4-fs error (device loop1): ext4_truncate:4255: inode #13: comm syz.1.119: mark_inode_dirty error [ 49.929214][ T4113] netlink: 'syz.4.112': attribute type 1 has an invalid length. [ 49.930850][ T4091] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 49.946980][ T4091] EXT4-fs (loop1): 1 truncate cleaned up [ 49.954812][ T4091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.968940][ T4113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 49.988169][ T4091] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 50.000435][ T4113] hub 9-0:1.0: USB hub found [ 50.005636][ T4113] hub 9-0:1.0: 8 ports detected [ 50.397186][ T4182] loop3: detected capacity change from 0 to 2048 [ 50.428935][ T4182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.445934][ T4182] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.113: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 50.464056][ T4182] EXT4-fs (loop3): Remounting filesystem read-only [ 50.566476][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.615610][ T4211] Illegal XDP return value 3343589348 on prog (id 143) dev syz_tun, expect packet loss! [ 50.678913][ T4215] loop0: detected capacity change from 0 to 128 [ 50.694050][ T4220] loop3: detected capacity change from 0 to 2048 [ 50.736834][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.755056][ T4220] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.757819][ T4215] bio_check_eod: 105 callbacks suppressed [ 50.757838][ T4215] syz.0.117: attempt to access beyond end of device [ 50.757838][ T4215] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 50.859938][ T4215] syz.0.117: attempt to access beyond end of device [ 50.859938][ T4215] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 50.891328][ T4215] syz.0.117: attempt to access beyond end of device [ 50.891328][ T4215] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.926459][ T4240] syz.0.117: attempt to access beyond end of device [ 50.926459][ T4240] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.942699][ T4232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 50.951549][ T4232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.121'. [ 50.960465][ T4240] syz.0.117: attempt to access beyond end of device [ 50.960465][ T4240] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 50.973752][ T4215] syz.0.117: attempt to access beyond end of device [ 50.973752][ T4215] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.015943][ T4215] syz.0.117: attempt to access beyond end of device [ 51.015943][ T4215] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.034407][ T4240] syz.0.117: attempt to access beyond end of device [ 51.034407][ T4240] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.035506][ T4247] loop4: detected capacity change from 0 to 128 [ 51.067874][ T4215] syz.0.117: attempt to access beyond end of device [ 51.067874][ T4215] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.091907][ T4247] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 51.119290][ T796] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 51.148508][ T796] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 453 with error 117 [ 51.154701][ T4240] syz.0.117: attempt to access beyond end of device [ 51.154701][ T4240] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 51.161248][ T796] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.161248][ T796] [ 51.223212][ T4247] tmpfs: Bad value for 'mpol' [ 51.362475][ T796] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 469 with max blocks 2 with error 117 [ 51.362667][ T3854] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 51.375199][ T796] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.375199][ T796] [ 51.484768][ T3854] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 51.503530][ T3863] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 51.654502][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.922853][ T3418] FAT-fs (loop4): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 51.971507][ T4262] loop2: detected capacity change from 0 to 512 [ 51.998796][ T4262] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.037810][ T4262] EXT4-fs (loop2): 1 truncate cleaned up [ 52.051174][ T4266] loop0: detected capacity change from 0 to 512 [ 52.082511][ T4262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.123643][ T4268] xt_hashlimit: max too large, truncated to 1048576 [ 52.141125][ T4266] EXT4-fs (loop0): orphan cleanup on readonly fs [ 52.151267][ T4266] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm +}[@: bad orphan inode 13 [ 52.201361][ T4266] ext4_test_bit(bit=12, block=18) = 1 [ 52.206927][ T4266] is_bad_inode(inode)=0 [ 52.211103][ T4266] NEXT_ORPHAN(inode)=2130706432 [ 52.216005][ T4266] max_ino=32 [ 52.219218][ T4266] i_nlink=1 [ 52.274554][ T4266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.328706][ T4266] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 52.341285][ T4268] Cannot find set identified by id 0 to match [ 52.396217][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.432258][ T4266] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 52.501472][ T4266] EXT4-fs error (device loop0): ext4_lookup:1793: inode #2: comm +}[@: deleted inode referenced: 12 [ 52.602760][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.624261][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.755357][ T4284] syzkaller0: entered allmulticast mode [ 52.765598][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 52.765613][ T29] audit: type=1326 audit(1747172828.793:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 52.795224][ T29] audit: type=1326 audit(1747172828.793:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 52.819017][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.820206][ T4284] syzkaller0: entered promiscuous mode [ 52.826554][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.833769][ T29] audit: type=1400 audit(1747172828.843:1024): avc: denied { read write } for pid=4285 comm="syz.3.131" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.839436][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.862790][ T29] audit: type=1400 audit(1747172828.843:1025): avc: denied { open } for pid=4285 comm="syz.3.131" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 52.873863][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.893758][ T29] audit: type=1326 audit(1747172828.843:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 52.901134][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.924477][ T29] audit: type=1326 audit(1747172828.843:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 52.931902][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.955209][ T29] audit: type=1326 audit(1747172828.843:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 52.962602][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 52.993595][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.001040][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.008515][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.016153][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.023631][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.031072][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.040169][ T4281] loop4: detected capacity change from 0 to 256 [ 53.047769][ T4284] syzkaller0 (unregistering): left promiscuous mode [ 53.048222][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.054498][ T4284] syzkaller0 (unregistering): left allmulticast mode [ 53.061869][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.073880][ T29] audit: type=1326 audit(1747172829.093:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 53.076169][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.099789][ T29] audit: type=1326 audit(1747172829.093:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 53.107211][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.130739][ T29] audit: type=1326 audit(1747172829.093:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.3.131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 53.138795][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.138821][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.177581][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.185293][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.192816][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.200313][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.208011][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.215475][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.222933][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.230559][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.233725][ T4286] netlink: 256 bytes leftover after parsing attributes in process `syz.3.131'. [ 53.238120][ T3391] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.372469][ T3391] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 53.416084][ T4296] fido_id[4296]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 53.446860][ T4282] infiniband syz!: set active [ 53.451611][ T4282] infiniband syz!: added team_slave_0 [ 53.472039][ T4282] RDS/IB: syz!: added [ 53.476801][ T4282] smc: adding ib device syz! with port count 1 [ 53.489204][ T4282] smc: ib device syz! port 1 has pnetid [ 53.779516][ T4323] loop3: detected capacity change from 0 to 1024 [ 53.808266][ T4323] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.134: Failed to acquire dquot type 0 [ 53.828326][ T4331] loop4: detected capacity change from 0 to 512 [ 53.848498][ T4323] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 53.863421][ T4323] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.134: corrupted inode contents [ 53.884310][ T4323] EXT4-fs error (device loop3): ext4_dirty_inode:6103: inode #13: comm syz.3.134: mark_inode_dirty error [ 53.903509][ T4323] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.134: corrupted inode contents [ 53.951268][ T4331] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.961011][ T4323] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.134: mark_inode_dirty error [ 53.983858][ T4323] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.134: corrupted inode contents [ 54.019150][ T4303] netlink: 3 bytes leftover after parsing attributes in process `syz.0.133'. [ 54.029526][ T4331] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.137: corrupted inode contents [ 54.050623][ T4303] 0ªX¹¦À: renamed from caif0 [ 54.051138][ T4323] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 54.057746][ T4331] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.137: mark_inode_dirty error [ 54.075773][ T4323] EXT4-fs error (device loop3): ext4_do_update_inode:5211: inode #13: comm syz.3.134: corrupted inode contents [ 54.088270][ T4303] 0ªX¹¦À: entered allmulticast mode [ 54.088280][ T4323] EXT4-fs error (device loop3): ext4_truncate:4255: inode #13: comm syz.3.134: mark_inode_dirty error [ 54.093692][ T4303] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 54.112657][ T4331] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.137: corrupted inode contents [ 54.142423][ T4323] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 54.156929][ T4323] EXT4-fs (loop3): 1 truncate cleaned up [ 54.167831][ T4351] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.137: corrupted inode contents [ 54.201795][ T4351] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.137: mark_inode_dirty error [ 54.216624][ T4323] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 54.230392][ T4351] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.137: corrupted inode contents [ 54.247609][ T4351] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.137: mark_inode_dirty error [ 54.259861][ T4351] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.137: corrupted inode contents [ 54.273370][ T4351] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.137: mark_inode_dirty error [ 54.289994][ T4354] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.137: corrupted inode contents [ 54.400339][ T4331] lo speed is unknown, defaulting to 1000 [ 54.418470][ T4331] lo speed is unknown, defaulting to 1000 [ 54.430193][ T4331] lo speed is unknown, defaulting to 1000 [ 54.466745][ T4331] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 54.491549][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 54.533623][ T4331] lo speed is unknown, defaulting to 1000 [ 54.540146][ T4331] lo speed is unknown, defaulting to 1000 [ 54.570398][ T4331] lo speed is unknown, defaulting to 1000 [ 54.617254][ T4331] lo speed is unknown, defaulting to 1000 [ 54.633838][ T4331] lo speed is unknown, defaulting to 1000 [ 54.647610][ T4331] lo speed is unknown, defaulting to 1000 [ 54.684851][ T4331] lo speed is unknown, defaulting to 1000 [ 54.759669][ T4397] xt_hashlimit: max too large, truncated to 1048576 [ 54.774790][ T4399] loop4: detected capacity change from 0 to 2048 [ 54.787635][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 54.796508][ T4389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.139'. [ 54.799321][ T4399] EXT4-fs: Ignoring removed bh option [ 54.866384][ T4399] EXT4-fs: Mount option(s) incompatible with ext2 [ 54.898317][ T4408] siw: device registration error -23 [ 54.987110][ T4416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 54.996015][ T4416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.140'. [ 55.005140][ T4416] netlink: 'syz.4.140': attribute type 15 has an invalid length. [ 55.011768][ T4413] loop2: detected capacity change from 0 to 2048 [ 55.079896][ T4413] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.295179][ T4436] loop1: detected capacity change from 0 to 128 [ 55.320949][ T4436] EXT4-fs: Ignoring removed nobh option [ 55.344762][ T4436] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 55.473443][ T12] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 55.549591][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 587 with error 117 [ 55.562473][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.562473][ T12] [ 55.788366][ T3863] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 603 with max blocks 1 with error 28 [ 55.800930][ T3863] EXT4-fs (loop2): This should not happen!! Data will be lost [ 55.800930][ T3863] [ 55.810661][ T3863] EXT4-fs (loop2): Total free blocks count 0 [ 55.816748][ T3863] EXT4-fs (loop2): Free/Dirty block details [ 55.822767][ T3863] EXT4-fs (loop2): free_blocks=0 [ 55.827735][ T3863] EXT4-fs (loop2): dirty_blocks=16 [ 55.832939][ T3863] EXT4-fs (loop2): Block reservation details [ 55.839026][ T3863] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 56.399492][ T4479] loop1: detected capacity change from 0 to 512 [ 56.416141][ T4479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.615752][ T4483] sd 0:0:1:0: device reset [ 56.628614][ T4479] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.642707][ T4479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 56.679078][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 56.693279][ T4487] batman_adv: batadv0: Adding interface: dummy0 [ 56.699605][ T4487] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.735070][ T4479] netlink: 'syz.1.151': attribute type 13 has an invalid length. [ 56.753592][ T4490] netlink: 148 bytes leftover after parsing attributes in process `syz.3.154'. [ 56.773101][ T4487] batman_adv: batadv0: Interface activated: dummy0 [ 56.799450][ T4487] batadv0: mtu less than device minimum [ 56.805577][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.816437][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.827440][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.838301][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.849121][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.859918][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.870673][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.881461][ T4487] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.911716][ T4497] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 56.941682][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 56.996170][ T4497] hub 9-0:1.0: USB hub found [ 57.003510][ T4497] hub 9-0:1.0: 8 ports detected [ 57.078073][ T4500] loop4: detected capacity change from 0 to 1024 [ 57.160756][ T4500] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.156: missing EA_INODE flag [ 57.190024][ T4500] EXT4-fs (loop4): Remounting filesystem read-only [ 57.196655][ T4500] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.323350][ T4503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.157'. [ 57.456493][ T4508] loop1: detected capacity change from 0 to 512 [ 57.533274][ T4509] loop2: detected capacity change from 0 to 512 [ 57.546248][ T4508] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 57.603355][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.157'. [ 57.631057][ T4509] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.672719][ T4508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 57.716619][ T4509] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm +}[@: bad orphan inode 13 [ 57.975307][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 57.975322][ T29] audit: type=1326 audit(1747172834.003:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.023041][ T4508] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.040998][ T4509] ext4_test_bit(bit=12, block=18) = 1 [ 58.046520][ T4509] is_bad_inode(inode)=0 [ 58.050725][ T4509] NEXT_ORPHAN(inode)=2130706432 [ 58.055872][ T4509] max_ino=32 [ 58.059095][ T4509] i_nlink=1 [ 58.064139][ T4508] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 361: padding at end of block bitmap is not set [ 58.118071][ T4508] EXT4-fs (loop1): Remounting filesystem read-only [ 58.126585][ T29] audit: type=1326 audit(1747172834.033:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.150070][ T29] audit: type=1326 audit(1747172834.033:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.173683][ T29] audit: type=1326 audit(1747172834.033:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.197343][ T29] audit: type=1326 audit(1747172834.033:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.220792][ T29] audit: type=1326 audit(1747172834.033:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.244193][ T29] audit: type=1326 audit(1747172834.033:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.267595][ T29] audit: type=1326 audit(1747172834.043:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.291116][ T29] audit: type=1326 audit(1747172834.043:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.314528][ T29] audit: type=1326 audit(1747172834.043:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.3.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 58.376863][ T4508] EXT4-fs (loop1): 1 truncate cleaned up [ 58.387878][ T4509] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 58.419072][ T4521] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz.2.159: deleted inode referenced: 12 [ 58.439667][ T4515] loop3: detected capacity change from 0 to 128 [ 58.483464][ T4509] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 58.532941][ T4514] bio_check_eod: 7036 callbacks suppressed [ 58.532960][ T4514] syz.3.160: attempt to access beyond end of device [ 58.532960][ T4514] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 58.563581][ T4514] syz.3.160: attempt to access beyond end of device [ 58.563581][ T4514] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 58.593496][ T4514] syz.3.160: attempt to access beyond end of device [ 58.593496][ T4514] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.622217][ T4515] syz.3.160: attempt to access beyond end of device [ 58.622217][ T4515] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.658414][ T4514] syz.3.160: attempt to access beyond end of device [ 58.658414][ T4514] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.679164][ T4515] syz.3.160: attempt to access beyond end of device [ 58.679164][ T4515] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.707574][ T4514] syz.3.160: attempt to access beyond end of device [ 58.707574][ T4514] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.738813][ T4513] syz.3.160: attempt to access beyond end of device [ 58.738813][ T4513] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.767503][ T4515] syz.3.160: attempt to access beyond end of device [ 58.767503][ T4515] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.796714][ T4514] syz.3.160: attempt to access beyond end of device [ 58.796714][ T4514] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 58.819811][ T4530] loop1: detected capacity change from 0 to 2048 [ 59.136482][ T4525] lo speed is unknown, defaulting to 1000 [ 59.179401][ T4538] loop4: detected capacity change from 0 to 128 [ 59.179736][ T4538] EXT4-fs: Ignoring removed nobh option [ 59.197149][ T4538] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.226743][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 59.290496][ T4546] netlink: 148 bytes leftover after parsing attributes in process `syz.4.167'. [ 59.316132][ T4542] loop2: detected capacity change from 0 to 512 [ 59.383690][ T4537] lo speed is unknown, defaulting to 1000 [ 59.432594][ T4541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 59.439497][ T4542] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.503290][ T4537] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.164: corrupted inode contents [ 59.522303][ T4537] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.164: mark_inode_dirty error [ 59.655931][ T4557] IPv6: syztnl0: Disabled Multicast RS [ 59.698660][ T4537] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.164: corrupted inode contents [ 59.749417][ T4542] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.164: corrupted inode contents [ 59.790852][ T4560] netlink: 180 bytes leftover after parsing attributes in process `syz.0.170'. [ 59.832640][ T4542] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.164: mark_inode_dirty error [ 59.871326][ T4542] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.164: corrupted inode contents [ 59.901462][ T4537] siw: device registration error -23 [ 59.940921][ T4542] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.164: mark_inode_dirty error [ 59.965325][ T4542] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.164: corrupted inode contents [ 60.003401][ T4542] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.164: mark_inode_dirty error [ 60.047741][ T4563] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.164: corrupted inode contents [ 60.130664][ T4564] loop4: detected capacity change from 0 to 8192 [ 60.535527][ T4566] SELinux: Context Ü is not valid (left unmapped). [ 60.779363][ T4578] loop1: detected capacity change from 0 to 2048 [ 60.860232][ T4578] Alternate GPT is invalid, using primary GPT. [ 60.866636][ T4578] loop1: p1 p2 p3 [ 61.032031][ T4586] net_ratelimit: 11 callbacks suppressed [ 61.032047][ T4586] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 61.054222][ T3389] lo speed is unknown, defaulting to 1000 [ 61.124042][ T4588] loop1: detected capacity change from 0 to 1024 [ 61.139151][ T4588] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.219781][ T4588] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 61.250367][ T4588] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 61.263183][ T4588] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.263183][ T4588] [ 61.289149][ T4599] siw: device registration error -23 [ 61.299081][ T4599] program syz.1.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.309531][ T4599] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 61.416852][ T4604] loop1: detected capacity change from 0 to 512 [ 61.438953][ T4604] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.180: corrupted in-inode xattr: invalid ea_ino [ 61.457642][ T4604] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.180: couldn't read orphan inode 15 (err -117) [ 61.492956][ T4602] loop2: detected capacity change from 0 to 2048 [ 61.564129][ T4602] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.868128][ T3418] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 61.886874][ T4625] pim6reg: entered allmulticast mode [ 61.935324][ T4626] pim6reg: left allmulticast mode [ 61.957237][ T3418] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 667 with error 117 [ 61.969884][ T3418] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.969884][ T3418] [ 62.060041][ T4640] loop1: detected capacity change from 0 to 512 [ 62.067063][ T4640] ext2: Unknown parameter 'nouser_xattr' [ 62.211803][ T3418] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 683 with max blocks 1 with error 28 [ 62.224314][ T3418] EXT4-fs (loop2): This should not happen!! Data will be lost [ 62.224314][ T3418] [ 62.234023][ T3418] EXT4-fs (loop2): Total free blocks count 0 [ 62.240415][ T3418] EXT4-fs (loop2): Free/Dirty block details [ 62.246366][ T3418] EXT4-fs (loop2): free_blocks=0 [ 62.251331][ T3418] EXT4-fs (loop2): dirty_blocks=16 [ 62.256561][ T3418] EXT4-fs (loop2): Block reservation details [ 62.262685][ T3418] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 62.338924][ T4651] __nla_validate_parse: 2 callbacks suppressed [ 62.338944][ T4651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 62.968572][ T4702] loop3: detected capacity change from 0 to 1024 [ 63.055339][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 63.055423][ T29] audit: type=1400 audit(1747172839.083:1540): avc: denied { create } for pid=4601 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.108786][ T4702] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.178531][ T4702] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 393: padding at end of block bitmap is not set [ 63.186280][ T4714] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.207937][ T4714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.216565][ T29] audit: type=1400 audit(1747172839.123:1541): avc: denied { mac_admin } for pid=4707 comm="syz.1.193" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.217547][ T4702] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 117 [ 63.237826][ T29] audit: type=1400 audit(1747172839.123:1542): avc: denied { name_bind } for pid=4707 comm="syz.1.193" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.237869][ T29] audit: type=1400 audit(1747172839.123:1543): avc: denied { node_bind } for pid=4707 comm="syz.1.193" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.237904][ T29] audit: type=1400 audit(1747172839.133:1544): avc: denied { mount } for pid=4697 comm="+}[@" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.250749][ T4702] EXT4-fs (loop3): This should not happen!! Data will be lost [ 63.250749][ T4702] [ 63.272701][ T29] audit: type=1400 audit(1747172839.153:1545): avc: denied { ioctl } for pid=4711 comm="syz.4.194" path="socket:[7656]" dev="sockfs" ino=7656 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.318039][ T4715] siw: device registration error -23 [ 63.325784][ T29] audit: type=1400 audit(1747172839.193:1546): avc: denied { write } for pid=4697 comm="+}[@" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.370932][ T4714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.377054][ T29] audit: type=1400 audit(1747172839.193:1547): avc: denied { add_name } for pid=4697 comm="+}[@" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 63.405479][ T29] audit: type=1400 audit(1747172839.193:1548): avc: denied { create } for pid=4697 comm="+}[@" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.422475][ T4714] vlan2: entered allmulticast mode [ 63.425249][ T29] audit: type=1400 audit(1747172839.193:1549): avc: denied { read write } for pid=4697 comm="+}[@" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 63.564594][ T4702] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.574907][ T4702] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 63.607507][ T4602] syz.2.181 (4602) used greatest stack depth: 6832 bytes left [ 65.423796][ T4733] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.445061][ T4736] batman_adv: batadv0: Adding interface: dummy0 [ 65.451477][ T4736] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.477511][ T4736] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 65.533917][ T4748] netlink: 148 bytes leftover after parsing attributes in process `syz.1.204'. [ 65.600167][ T4749] gretap0: entered promiscuous mode [ 65.606228][ T4749] gretap0: left promiscuous mode [ 65.701882][ T4755] loop1: detected capacity change from 0 to 128 [ 65.711262][ T4753] netlink: 148 bytes leftover after parsing attributes in process `syz.0.216'. [ 65.724404][ T4752] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 65.732776][ T4752] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 65.741300][ T4752] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 65.744195][ T4757] loop2: detected capacity change from 0 to 128 [ 65.749709][ T4752] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 65.768092][ T4758] loop3: detected capacity change from 0 to 512 [ 65.791112][ T4758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.808845][ T4758] EXT4-fs (loop3): 1 truncate cleaned up [ 65.823958][ T4755] bio_check_eod: 5230 callbacks suppressed [ 65.823977][ T4755] syz.1.205: attempt to access beyond end of device [ 65.823977][ T4755] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 65.861730][ T4755] syz.1.205: attempt to access beyond end of device [ 65.861730][ T4755] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 65.877231][ T4755] syz.1.205: attempt to access beyond end of device [ 65.877231][ T4755] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 65.891181][ T4755] syz.1.205: attempt to access beyond end of device [ 65.891181][ T4755] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 65.921677][ T4755] syz.1.205: attempt to access beyond end of device [ 65.921677][ T4755] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 65.937963][ T4755] syz.1.205: attempt to access beyond end of device [ 65.937963][ T4755] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 65.971707][ T4755] syz.1.205: attempt to access beyond end of device [ 65.971707][ T4755] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 65.985280][ T4765] syz.1.205: attempt to access beyond end of device [ 65.985280][ T4765] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 65.999702][ T4755] syz.1.205: attempt to access beyond end of device [ 65.999702][ T4755] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 66.013763][ T4755] syz.1.205: attempt to access beyond end of device [ 66.013763][ T4755] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 66.452522][ T4779] syzkaller0: entered allmulticast mode [ 66.468659][ T4779] syzkaller0: entered promiscuous mode [ 66.483160][ T4779] syzkaller0 (unregistering): left promiscuous mode [ 66.489931][ T4779] syzkaller0 (unregistering): left allmulticast mode [ 66.585983][ T4782] 9pnet_fd: Insufficient options for proto=fd [ 66.673147][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.684043][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.810963][ T4790] loop2: detected capacity change from 0 to 1024 [ 66.826987][ T4790] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.215: Failed to acquire dquot type 0 [ 66.867661][ T4790] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.995599][ T4790] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.215: corrupted inode contents [ 67.042083][ T4790] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.215: mark_inode_dirty error [ 67.202354][ T4803] lo speed is unknown, defaulting to 1000 [ 67.288761][ T4790] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.215: corrupted inode contents [ 67.346692][ T4790] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.215: mark_inode_dirty error [ 67.467528][ T4790] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.215: corrupted inode contents [ 67.596779][ T4790] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 67.616465][ T4790] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.215: corrupted inode contents [ 67.668666][ T4790] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.215: mark_inode_dirty error [ 67.853423][ T4790] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 67.884484][ T4790] EXT4-fs (loop2): 1 truncate cleaned up [ 67.891768][ T4790] EXT4-fs mount: 32 callbacks suppressed [ 67.891784][ T4790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.952646][ T4815] xt_hashlimit: max too large, truncated to 1048576 [ 67.986904][ T4790] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 68.345523][ T4835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 69.078913][ T4815] Cannot find set identified by id 0 to match [ 69.153318][ T4762] syz.0.208 (4762) used greatest stack depth: 6208 bytes left [ 69.161930][ T4878] loop3: detected capacity change from 0 to 1024 [ 69.169496][ T4878] EXT4-fs: test_dummy_encryption option not supported [ 69.173399][ T4881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 69.185456][ T4881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 69.194549][ T4881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 69.203505][ T4881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 69.220045][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 69.220064][ T29] audit: type=1400 audit(1747172845.243:1780): avc: denied { write } for pid=4877 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 69.260207][ T4881] loop1: detected capacity change from 0 to 512 [ 69.305152][ T4881] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 69.334746][ T4881] EXT4-fs (loop1): 1 truncate cleaned up [ 69.341063][ T4881] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.353413][ T29] audit: type=1400 audit(1747172845.363:1781): avc: denied { create } for pid=4877 comm="syz.3.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 69.404364][ T4899] siw: device registration error -23 [ 69.463976][ T4899] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 69.473097][ T4899] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 69.491785][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.566232][ T4916] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 69.589150][ T4916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.601127][ T4918] loop3: detected capacity change from 0 to 1024 [ 69.607886][ T4916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.622986][ T4918] EXT4-fs: Ignoring removed orlov option [ 69.629916][ T4916] vlan2: entered allmulticast mode [ 69.649715][ T4918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.676887][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.697414][ T29] audit: type=1400 audit(1747172845.723:1782): avc: denied { read open } for pid=4917 comm="syz.3.225" path="/50/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.720367][ T29] audit: type=1400 audit(1747172845.723:1783): avc: denied { write } for pid=4917 comm="syz.3.225" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.195619][ T29] audit: type=1400 audit(1747172846.223:1784): avc: denied { listen } for pid=4946 comm="syz.4.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 70.332363][ T4949] lo speed is unknown, defaulting to 1000 [ 70.640315][ T29] audit: type=1326 audit(1747172846.273:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b31dde969 code=0x7ffc0000 [ 70.663848][ T29] audit: type=1326 audit(1747172846.273:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b31dde969 code=0x7ffc0000 [ 70.687952][ T29] audit: type=1326 audit(1747172846.273:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b31dde969 code=0x7ffc0000 [ 70.711897][ T29] audit: type=1326 audit(1747172846.273:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b31dde969 code=0x7ffc0000 [ 70.735862][ T29] audit: type=1326 audit(1747172846.273:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4943 comm="syz.2.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b31dde969 code=0x7ffc0000 [ 70.791490][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.897604][ T4957] IPVS: Error connecting to the multicast addr [ 70.926066][ T4958] batman_adv: batadv0: Adding interface: dummy0 [ 70.932858][ T4958] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.958436][ T4958] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 71.040839][ T4957] loop3: detected capacity change from 0 to 2048 [ 71.048274][ T4961] netlink: 180 bytes leftover after parsing attributes in process `syz.2.233'. [ 71.070107][ T4961] loop2: detected capacity change from 0 to 512 [ 71.152412][ T4968] netlink: 24 bytes leftover after parsing attributes in process `syz.4.235'. [ 71.169779][ T4961] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.170055][ T4961] EXT4-fs (loop2): mount failed [ 71.260758][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 71.405929][ T4990] xt_connbytes: Forcing CT accounting to be enabled [ 71.412733][ T4990] Cannot find set identified by id 0 to match [ 71.422313][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 71.530517][ T4990] hsr_slave_1 (unregistering): left promiscuous mode [ 71.680956][ T4994] lo speed is unknown, defaulting to 1000 [ 71.874993][ T5001] pim6reg: entered allmulticast mode [ 71.951920][ T4996] loop1: detected capacity change from 0 to 128 [ 71.979835][ T4996] EXT4-fs: Ignoring removed nobh option [ 71.996799][ T4996] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.036369][ T4996] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.049383][ T5006] syzkaller0: entered allmulticast mode [ 72.055639][ T5006] syzkaller0: entered promiscuous mode [ 72.075262][ T5006] syzkaller0 (unregistering): left promiscuous mode [ 72.082054][ T5006] syzkaller0 (unregistering): left allmulticast mode [ 72.133261][ T4979] pim6reg: left allmulticast mode [ 72.302716][ T5012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 72.322989][ T5012] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 72.379496][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 72.388595][ T5011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 72.468400][ T5012] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 72.513395][ T5012] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 72.583076][ T5012] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 72.606062][ T3313] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.639846][ T5021] loop4: detected capacity change from 0 to 2048 [ 72.654680][ T5021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.672927][ T5021] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.685804][ T5012] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 72.708178][ T5012] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 72.751624][ T5012] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 72.769585][ T5034] loop2: detected capacity change from 0 to 1024 [ 72.800134][ T5034] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.247: Failed to acquire dquot type 0 [ 72.812441][ T5012] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 72.823841][ T5034] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 72.839562][ T5034] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.247: corrupted inode contents [ 72.865066][ T5034] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.247: mark_inode_dirty error [ 72.893887][ T5034] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.247: corrupted inode contents [ 72.919774][ T5034] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.247: mark_inode_dirty error [ 72.943768][ T5034] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.247: corrupted inode contents [ 72.989948][ T5034] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 73.025497][ T5034] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.247: corrupted inode contents [ 73.050561][ T5048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 73.071538][ T5034] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.247: mark_inode_dirty error [ 73.092962][ T5034] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 73.122754][ T5034] EXT4-fs (loop2): 1 truncate cleaned up [ 73.153130][ T5034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.206371][ T5034] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 73.326586][ T58] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 345: padding at end of block bitmap is not set [ 73.373234][ T58] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 519 with error 117 [ 73.385869][ T58] EXT4-fs (loop4): This should not happen!! Data will be lost [ 73.385869][ T58] [ 73.575899][ T5069] loop1: detected capacity change from 0 to 128 [ 73.672684][ T5069] bio_check_eod: 18138 callbacks suppressed [ 73.672702][ T5069] syz.1.250: attempt to access beyond end of device [ 73.672702][ T5069] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 73.757430][ T5069] syz.1.250: attempt to access beyond end of device [ 73.757430][ T5069] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 73.792726][ T5069] syz.1.250: attempt to access beyond end of device [ 73.792726][ T5069] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.819664][ T5085] syz.1.250: attempt to access beyond end of device [ 73.819664][ T5085] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.833983][ T5069] syz.1.250: attempt to access beyond end of device [ 73.833983][ T5069] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.863060][ T5085] syz.1.250: attempt to access beyond end of device [ 73.863060][ T5085] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.878699][ T5068] syz.1.250: attempt to access beyond end of device [ 73.878699][ T5068] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.893272][ T5069] syz.1.250: attempt to access beyond end of device [ 73.893272][ T5069] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.914856][ T5087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.252'. [ 73.928376][ T5085] syz.1.250: attempt to access beyond end of device [ 73.928376][ T5085] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.952922][ T5068] syz.1.250: attempt to access beyond end of device [ 73.952922][ T5068] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 73.996812][ T5087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 74.077785][ T5099] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 74.196604][ T5112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 74.228715][ T5112] team0 (unregistering): Port device team_slave_0 removed [ 74.240512][ T5112] team0 (unregistering): Port device team_slave_1 removed [ 74.394617][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.668695][ T5130] loop4: detected capacity change from 0 to 128 [ 74.699298][ T5130] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 74.706953][ T5130] FAT-fs (loop4): Filesystem has been set read-only [ 74.747706][ T5130] pim6reg: entered allmulticast mode [ 74.764792][ T5130] pim6reg: left allmulticast mode [ 74.795128][ T5150] loop1: detected capacity change from 0 to 512 [ 74.821822][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 74.821840][ T29] audit: type=1326 audit(1747172850.843:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 74.853423][ T5130] Zero length message leads to an empty skb [ 74.854962][ T29] audit: type=1326 audit(1747172850.843:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 74.892974][ T5150] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.903944][ T29] audit: type=1326 audit(1747172850.883:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 74.927490][ T29] audit: type=1326 audit(1747172850.883:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 74.951025][ T29] audit: type=1326 audit(1747172850.883:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 74.974577][ T29] audit: type=1326 audit(1747172850.913:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 74.998031][ T29] audit: type=1326 audit(1747172850.913:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 75.021621][ T29] audit: type=1326 audit(1747172850.913:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 75.053123][ T5150] EXT4-fs (loop1): 1 truncate cleaned up [ 75.053885][ T29] audit: type=1326 audit(1747172850.933:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 75.076641][ T5150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.082526][ T29] audit: type=1326 audit(1747172851.003:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5152 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcce9fe969 code=0x7ffc0000 [ 75.202286][ T5169] loop3: detected capacity change from 0 to 512 [ 75.244899][ T5169] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.296841][ T5169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.316009][ T5169] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.341861][ T5169] netlink: 'syz.3.261': attribute type 13 has an invalid length. [ 75.361337][ T5169] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 75.369968][ T5169] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 75.378626][ T5169] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 75.387127][ T5169] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 75.435647][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.524249][ T5193] loop3: detected capacity change from 0 to 1024 [ 75.551571][ T5193] EXT4-fs: Ignoring removed orlov option [ 75.561883][ T5191] lo speed is unknown, defaulting to 1000 [ 75.579278][ T5193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.629185][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.960400][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.087600][ T5210] xt_hashlimit: max too large, truncated to 1048576 [ 76.131170][ T5210] Cannot find set identified by id 0 to match [ 76.347167][ T5219] gretap0: entered promiscuous mode [ 76.360674][ T5219] gretap0: left promiscuous mode [ 76.396443][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.450831][ T5233] loop4: detected capacity change from 0 to 1024 [ 76.468285][ T5231] loop1: detected capacity change from 0 to 256 [ 76.489206][ T5231] vfat: Unknown parameter ' [ 76.489206][ T5231] ÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿ' [ 76.502032][ T5233] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.270: Failed to acquire dquot type 0 [ 76.535135][ T5233] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 76.552619][ T5233] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.270: corrupted inode contents [ 76.579194][ T5241] loop3: detected capacity change from 0 to 512 [ 76.585074][ T5233] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.270: mark_inode_dirty error [ 76.601227][ T5241] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.622644][ T5233] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.270: corrupted inode contents [ 76.643601][ T5241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.657800][ T5233] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.270: mark_inode_dirty error [ 76.665315][ T5241] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.681761][ T5233] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.270: corrupted inode contents [ 76.694850][ T5241] __nla_validate_parse: 2 callbacks suppressed [ 76.694867][ T5241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.274'. [ 76.722521][ T5233] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 76.732370][ T5241] netlink: 'syz.3.274': attribute type 13 has an invalid length. [ 76.736243][ T5233] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.270: corrupted inode contents [ 76.753320][ T5233] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.270: mark_inode_dirty error [ 76.777492][ T5233] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 76.797336][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.806919][ T5233] EXT4-fs (loop4): 1 truncate cleaned up [ 76.820089][ T5233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.870944][ T5233] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 76.891075][ T5271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.905418][ T5271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.085428][ T5295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 77.936775][ T5309] loop1: detected capacity change from 0 to 512 [ 77.952484][ T5309] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 77.984781][ T5309] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 78.003792][ T5309] EXT4-fs (loop1): 1 truncate cleaned up [ 78.010519][ T5309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.050682][ T5316] netlink: 'syz.2.278': attribute type 4 has an invalid length. [ 78.058460][ T5316] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.278'. [ 78.075208][ T5316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.278'. [ 78.130222][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.796066][ T5376] xt_CT: You must specify a L4 protocol and not use inversions on it [ 78.865246][ T5376] hub 8-0:1.0: USB hub found [ 78.870259][ T5376] hub 8-0:1.0: 8 ports detected [ 79.147734][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.218141][ T5378] loop2: detected capacity change from 0 to 1024 [ 79.228931][ T5378] EXT4-fs: Ignoring removed orlov option [ 79.304103][ T5378] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.534540][ T5380] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.606847][ T5391] pim6reg: entered allmulticast mode [ 79.612715][ T5399] pim6reg: left allmulticast mode [ 79.632025][ T5389] loop3: detected capacity change from 0 to 512 [ 79.668953][ T5389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.746008][ T5389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.766115][ T5389] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.782470][ T5389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.285'. [ 79.792441][ T5389] netlink: 'syz.3.285': attribute type 13 has an invalid length. [ 79.807298][ T5380] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.843345][ T29] kauditd_printk_skb: 688 callbacks suppressed [ 79.843363][ T29] audit: type=1400 audit(1747172855.873:2920): avc: denied { connect } for pid=5388 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 79.893609][ T5401] loop1: detected capacity change from 0 to 512 [ 79.914469][ T5401] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.927446][ T29] audit: type=1400 audit(1747172855.953:2921): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 79.948629][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.981066][ T5401] EXT4-fs (loop1): 1 truncate cleaned up [ 79.988477][ T5401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.060427][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.075829][ T29] audit: type=1400 audit(1747172856.093:2922): avc: denied { write } for pid=5394 comm="syz.1.286" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.097754][ T29] audit: type=1400 audit(1747172856.093:2923): avc: denied { remove_name } for pid=5394 comm="syz.1.286" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.120806][ T29] audit: type=1400 audit(1747172856.103:2924): avc: denied { rename } for pid=5394 comm="syz.1.286" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.143195][ T29] audit: type=1400 audit(1747172856.103:2925): avc: denied { add_name } for pid=5394 comm="syz.1.286" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 80.166022][ T29] audit: type=1400 audit(1747172856.103:2926): avc: denied { unlink } for pid=5394 comm="syz.1.286" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.220336][ T5380] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.266703][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.280503][ T5410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 80.323654][ T5380] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.355060][ T29] audit: type=1400 audit(1747172856.303:2927): avc: denied { read } for pid=5408 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.375753][ T29] audit: type=1400 audit(1747172856.303:2928): avc: denied { create } for pid=5406 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.395620][ T29] audit: type=1400 audit(1747172856.303:2929): avc: denied { connect } for pid=5406 comm="syz.3.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.424851][ T5413] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.450224][ T5417] loop1: detected capacity change from 0 to 512 [ 80.450707][ T5416] x_tables: duplicate entry at hook 1 [ 80.453658][ T5417] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.453691][ T5417] EXT4-fs: Invalid want_extra_isize 2 [ 80.470616][ T5380] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.475867][ T5380] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.484787][ T5380] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.541481][ T5413] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.554982][ T5412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 80.570225][ T5380] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.603691][ T5413] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.636183][ T5423] loop4: detected capacity change from 0 to 512 [ 80.647019][ T5423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.654365][ T5412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 80.659935][ T5424] xt_hashlimit: max too large, truncated to 1048576 [ 80.666494][ T5423] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.294: bad orphan inode 13 [ 80.689573][ T5423] ext4_test_bit(bit=12, block=18) = 1 [ 80.691015][ T5424] Cannot find set identified by id 0 to match [ 80.695021][ T5423] is_bad_inode(inode)=0 [ 80.695032][ T5423] NEXT_ORPHAN(inode)=2130706432 [ 80.710212][ T5423] max_ino=32 [ 80.713484][ T5423] i_nlink=1 [ 80.719766][ T5413] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.731386][ T5423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.763588][ T5412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 80.810728][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.824694][ T5413] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.844263][ T5413] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.858162][ T5412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 80.876126][ T5413] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.888691][ T5413] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.923214][ T5412] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.937920][ T5412] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.950792][ T5412] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.964521][ T5412] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 80.985734][ T5427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.295'. [ 81.098141][ T5432] loop3: detected capacity change from 0 to 1024 [ 81.135187][ T5432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.178180][ T5432] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm gtp: inode #665234128: comm gtp: iget: illegal inode # [ 81.220426][ T5432] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm gtp: error while reading EA inode 665234128 err=-117 [ 81.245096][ T5432] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 81.257171][ T5433] gretap0: entered promiscuous mode [ 81.262833][ T5436] gretap0: left promiscuous mode [ 81.280079][ T5432] team0 (unregistering): Port device team_slave_0 removed [ 81.296152][ T5432] team0 (unregistering): Port device team_slave_1 removed [ 81.365144][ T5444] loop1: detected capacity change from 0 to 1024 [ 81.382646][ T5444] EXT4-fs: Ignoring removed orlov option [ 81.409350][ T5444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.431766][ T5442] hsr0: entered promiscuous mode [ 81.437904][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 81.448197][ T5442] hsr_slave_0: left promiscuous mode [ 81.453214][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.465044][ T5442] hsr0 (unregistering): left promiscuous mode [ 81.472999][ T5446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.301'. [ 81.502756][ T5451] loop3: detected capacity change from 0 to 1024 [ 81.509577][ T5451] EXT4-fs: Ignoring removed orlov option [ 81.519969][ T5451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.620213][ T5456] syzkaller0: entered allmulticast mode [ 81.626189][ T5456] syzkaller0: entered promiscuous mode [ 81.633824][ T5456] syzkaller0 (unregistering): left promiscuous mode [ 81.640851][ T5456] syzkaller0 (unregistering): left allmulticast mode [ 81.752613][ T5458] xt_connbytes: Forcing CT accounting to be enabled [ 81.759551][ T5458] Cannot find set identified by id 0 to match [ 81.773116][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 81.785488][ T5458] hsr_slave_1 (unregistering): left promiscuous mode [ 82.023906][ T5454] ================================================================== [ 82.032136][ T5454] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 82.041812][ T5454] [ 82.044160][ T5454] read-write to 0xffff888106e9e0c8 of 4 bytes by task 5451 on cpu 1: [ 82.052268][ T5454] __writeback_single_inode+0x1e3/0x7c0 [ 82.058037][ T5454] writeback_single_inode+0x167/0x3e0 [ 82.063451][ T5454] sync_inode_metadata+0x5b/0x90 [ 82.068432][ T5454] generic_buffers_fsync_noflush+0xd9/0x120 [ 82.074393][ T5454] ext4_sync_file+0x1ab/0x690 [ 82.079122][ T5454] vfs_fsync_range+0x10d/0x130 [ 82.084016][ T5454] ext4_buffered_write_iter+0x34f/0x3c0 [ 82.089611][ T5454] ext4_file_write_iter+0xdbf/0xf00 [ 82.094861][ T5454] iter_file_splice_write+0x5ef/0x970 [ 82.100277][ T5454] direct_splice_actor+0x156/0x2a0 [ 82.105435][ T5454] splice_direct_to_actor+0x312/0x680 [ 82.110845][ T5454] do_splice_direct+0xda/0x150 [ 82.115731][ T5454] do_sendfile+0x380/0x640 [ 82.120184][ T5454] __x64_sys_sendfile64+0x105/0x150 [ 82.125700][ T5454] x64_sys_call+0xb39/0x2fb0 [ 82.130438][ T5454] do_syscall_64+0xd0/0x1a0 [ 82.135013][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.141023][ T5454] [ 82.143398][ T5454] read to 0xffff888106e9e0c8 of 4 bytes by task 5454 on cpu 0: [ 82.151248][ T5454] generic_buffers_fsync_noflush+0x80/0x120 [ 82.157363][ T5454] ext4_sync_file+0x1ab/0x690 [ 82.162087][ T5454] vfs_fsync_range+0x10d/0x130 [ 82.166922][ T5454] ext4_buffered_write_iter+0x34f/0x3c0 [ 82.172503][ T5454] ext4_file_write_iter+0xdbf/0xf00 [ 82.177861][ T5454] iter_file_splice_write+0x5ef/0x970 [ 82.183285][ T5454] direct_splice_actor+0x156/0x2a0 [ 82.188700][ T5454] splice_direct_to_actor+0x312/0x680 [ 82.194201][ T5454] do_splice_direct+0xda/0x150 [ 82.199012][ T5454] do_sendfile+0x380/0x640 [ 82.203456][ T5454] __x64_sys_sendfile64+0x105/0x150 [ 82.208712][ T5454] x64_sys_call+0xb39/0x2fb0 [ 82.213360][ T5454] do_syscall_64+0xd0/0x1a0 [ 82.217906][ T5454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.224021][ T5454] [ 82.226359][ T5454] value changed: 0x00000022 -> 0x00000000 [ 82.232182][ T5454] [ 82.234529][ T5454] Reported by Kernel Concurrency Sanitizer on: [ 82.241248][ T5454] CPU: 0 UID: 0 PID: 5454 Comm: syz.3.302 Not tainted 6.15.0-rc6-syzkaller-00051-g405e6c37c89e #0 PREEMPT(voluntary) [ 82.253815][ T5454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 82.264617][ T5454] ================================================================== [ 82.287572][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.354409][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.