last executing test programs: 2m2.44183143s ago: executing program 32 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1m55.926148497s ago: executing program 33 (id=1310): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000060000001000000000000007000000000500000000000008040000000c00000000000007000000000f0000000000000c030000000600000003000093080000000500000002000000040000000d00000000010000070000000400000003000000ff0000000f00000000000001000000001900270502000000000000100c000000080000000000001105000000040000000b00000005000193020000001000000006000000010000800d0000000900000009000000030000000d"], 0x0, 0xf2, 0x0, 0x0, 0x7fffffff}, 0x28) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x80000) splice(r2, 0x0, r0, 0x0, 0x3, 0xb) 1m18.524211883s ago: executing program 34 (id=2709): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 1m11.154658997s ago: executing program 35 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1m9.391897671s ago: executing program 36 (id=2929): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m2.689433672s ago: executing program 8 (id=3106): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m2.531802054s ago: executing program 8 (id=3108): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @random="b524732b4e4a"}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="89e7ee2c78dad9b4b473fec988ca58e8", 0x10}, {&(0x7f0000000540)="4acfb717f0892cf8a4940106b4aa39a71dc5a7541f61", 0x16}], 0x2) 1m1.861460337s ago: executing program 8 (id=3121): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="02070005090000002dbd7000fedbdf25070019000000000002004e21ffffffff05000000000000000a"], 0x48}}, 0x4040014) 1m0.845098278s ago: executing program 9 (id=3148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=@newtfilter={0x208, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xf, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1d8, 0x2, [@TCA_CGROUP_EMATCHES={0x1d4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c8, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c4, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xed, 0x5, "084f3edb1c063f40be7ce07316d0d0e4ae13b31270b8c88df7f5783271c0e1555b2ab3acd0780c705dac2502504e6c45ad77b5df769373ab7e8ac4456bb973b0fda0559df5084b4db04a1d603d0ff31a8ee2863017c5c02472e4ee86e01af84e166f64c87f4223c400d475044b87f8543f61d03e0130719ff4640f87412f3ebaa5d102bb516d296f5fa63f55fe0245de10192410ddd0eda53656af94687e0d78d098e51cffe7601cc45186287971043597fc9501e79c87f5d75ca77a510c55f3243b32298f69bec660e739789526272c6a7b0ca715b6201b8894408aee11fa21d9ce1a05c118e50e28"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xb2, 0x5, "0da3d55f3baab236c2c9c76ea19e54759b590601ac4d3d33f63cb7811e8f4bbc6088ed51a1f1d64a1cde0a44652587f647dcd1e84ec2eac5576720579941b709a2619d8f7eedbe90e609a3dfeceacf143bb53e3bbb1fe5e98fa8fe03fd3c7c1916b708f1c23d5316aa670e4c9b6d2e1ba342c2972c2ac0b42b32833855d4b7a9293aa596b5cb02a62dc6142639b5d752b6558e5a44cfbe8da680db6a86a53efee6206db56248c6f2705cdfdd9f12"}]}}]}]}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 1m0.804847308s ago: executing program 9 (id=3149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, &(0x7f0000000140)=0x1) read(r2, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 1m0.664371611s ago: executing program 9 (id=3152): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) umount2(0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 1m0.598083202s ago: executing program 9 (id=3163): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 1m0.555230003s ago: executing program 9 (id=3155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5aa}], 0x1) 1m0.310338408s ago: executing program 9 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000800000000000006000046000088a8000081"], 0x3e) 1m0.310108198s ago: executing program 37 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000800000000000006000046000088a8000081"], 0x3e) 59.998368554s ago: executing program 8 (id=3167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 59.963672844s ago: executing program 8 (id=3168): syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) 59.800458308s ago: executing program 8 (id=3172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 59.781705018s ago: executing program 38 (id=3172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 51.819768153s ago: executing program 7 (id=3316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r4}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=r3, @ANYRES64=r4, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) 51.642582947s ago: executing program 7 (id=3319): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r2], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.592273537s ago: executing program 7 (id=3323): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 51.553468668s ago: executing program 7 (id=3325): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xe823, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000280)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 51.182518645s ago: executing program 7 (id=3329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000880)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b4876ce425106cecf403fbc9c91ff3f1394ac4ba3d024e34de099eedf5ca5b19e5e6f1b25", 0x3b}], 0x1) 50.875527341s ago: executing program 7 (id=3334): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x488, &(0x7f0000001f80)="$eJzs3M1vFOUfAPDvbHdLgR+/VsQXEKSKRuJLS8uLHLxoNOGgiYkeMJ5qW0ilUENrIoRo9YBHQ+LdGP8J40kvRr1o4hXvhoQYLqBe1szODCztbl/odrdlP59kdp9nZnaf5zszz+4z8+xOAF1rMH1IIv4XEVcjoj/L3r3CYPZ068al8b9vXBpPolp966+ktt7NG5fGi1WL123PMtVqnt/SoNzL70aMTU9Pns/zw3NnPxievXDxhamzY6cnT0+eGz1+/Mjhfb3HRo+2JM40rpt7Pp7Zu/vEO1feGD955b2fk1JkcceCOFplMNu6DT3d6sI6bEddOimnj315bv+vd5Y0OhLopJ6ISHdXpdb++6Mntt5e1h+vfdbRygHrqlqtVpf4VJ6vAvexJDpdA6Azii/69Py3mNrU9dgQrr+cnQClcd/Kp2xJOUpZYn9lwfltKw1GxMn5f75Kp1in6xAAAPW+T/s/zzfq/5Xi4SzRmz78Px9DGYiIByJiZ0Q8GBG7IuKhiNq6j0TEo6ssf+EIyeL+T+naPQe3Amn/76V8bOvu/l+pWGWgJ8/tqMVfSU5NTU8eyrfJwahsOTWVTI4sUcYPr/7+RbNl9f2/dErLL/qCeT2ulRdcoJsYmxtbS8z1rn8asafcKP6kNi4Q+bje7ojYc49lTD1bbrps+fiX0PxtV6z6dcQz2f6fjwXxF5Km45MjLx4bPTrcF9OTh4aLo2KxX367/Gaz8tcUfwuk+39bw+P/dvwDSV/E7IWLZ2rjtbOrL+PyH583PadZ5fF/Ykd+/Pcmb9dm9OYLPhqbmzs/EtGbvL54/uiddyvyxfpp/AcPNG7/O+POlngsIvZGxL6IeDw9Kczr/kREPBkRB5aI/6dXnnp/9fG3Z6w0jX9iuf0f9ft/9YmeMz9+t3z8fRHRbP8fqaUO5nNW8vm30gquZdsBAADAZpH9Bj4pDd1ORzI0lP2Gf1dsK03PzM49d2rmw3MT2W/lB6JSKq509dddDx3Jrw0X+dEF+cP5deMve7bW8kPjM9MTnQ4eutz2Re2/VErbf+rPnk7XDlh3LRhHAzYp7R+6l/YP3SlZtv1X2lYXoP18/0P3atT+P2m69tC361oZoK3KdbdrA7rLCvr/89lT814BsDk5/4fupf1DV2r03/jiDuBr+Mt/2xP/5vcz3Cj1uf8TUdoQ1dhIiW+ursc7l1d8M4tmicriZl7tz9p4OmdLw1d18lMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdf4LAAD//x4h4ws=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r1, 0x0, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @mcast1, 0x4}, 0x20) 50.868676852s ago: executing program 39 (id=3334): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x488, &(0x7f0000001f80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) getdents(r1, 0x0, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x5, @mcast1, 0x4}, 0x20) 48.824120321s ago: executing program 5 (id=3373): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1ad451, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 48.507303267s ago: executing program 5 (id=3387): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000140)=0x7) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000680)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="814b0000000000000000000000000000210001"], 0x70}}, 0x0) 48.490571958s ago: executing program 5 (id=3379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 48.441419259s ago: executing program 5 (id=3380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0xd04f, 0x0, 0x0, {[@fastopen={0x22, 0x2}]}}}}}}}, 0x0) 48.322432151s ago: executing program 5 (id=3381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket(0x2c, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 47.83458819s ago: executing program 5 (id=3397): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) socket(0x10, 0x3, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) 47.790068221s ago: executing program 40 (id=3397): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) socket(0x10, 0x3, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) 44.968875406s ago: executing program 4 (id=3451): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c3"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 44.837111799s ago: executing program 4 (id=3456): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 44.26142487s ago: executing program 4 (id=3480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r2, &(0x7f0000002600)="b56511e72c6cba780ce701", 0xb) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 44.22502053s ago: executing program 4 (id=3483): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x4, 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) creat(&(0x7f0000000140)='./bus\x00', 0xa6) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0xc, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000300)={0x0, r1, 0x0, 0x2, 0x0, 0x9}) 43.471949385s ago: executing program 4 (id=3503): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 42.618386252s ago: executing program 4 (id=3516): r0 = socket(0x2, 0x80805, 0x0) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_pidfd_open(r1, 0x0) close_range(r4, r4, 0x0) syz_usb_connect(0x4, 0xb, &(0x7f0000000000)=ANY=[], 0x0) dup3(r0, r4, 0x0) 42.618191072s ago: executing program 41 (id=3516): r0 = socket(0x2, 0x80805, 0x0) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_pidfd_open(r1, 0x0) close_range(r4, r4, 0x0) syz_usb_connect(0x4, 0xb, &(0x7f0000000000)=ANY=[], 0x0) dup3(r0, r4, 0x0) 2.07744718s ago: executing program 0 (id=4387): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x100800, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="136eff29bc63efcfe4b764eb4052123478c77436a9f8da59a855c5748afcc9d3ba6bd1b3ba554350d2cc69ebc8ba99954e4646609454c3fa02cad8e4b22b84f4c4d88e5f784fe332afa2327d2d9b08743484b35d14ac38bcc2fb6e49c434b3c9a7fd4e587074cb38cb8ec73c552c19dc225be750d9cf51918579dcd9213661d9911d0f75927a8a0cc757ec", @ANYRES8], 0x1, 0x376, &(0x7f0000000f80)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.07682458s ago: executing program 1 (id=4388): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 1.961060412s ago: executing program 0 (id=4390): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.874320804s ago: executing program 0 (id=4391): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000000)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x45c8e000) 1.863994004s ago: executing program 0 (id=4393): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0xb, 0x5, 0x5, 0x74, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x786f, 0x80, 0x80000001, 0x2}}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 1.848645765s ago: executing program 3 (id=4394): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x723, 0x10000, 0x0, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "0000000000000010", "5ed8002558e2bb7174371336dad9ecbd", "868e5b1b", "29a3e879c474adf1"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) 1.670048548s ago: executing program 6 (id=4396): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x5243b0f8ab89b819, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) preadv2(r3, &(0x7f0000000000)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x80, 0x8000, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) close_range(r3, r4, 0x0) 1.669217008s ago: executing program 0 (id=4397): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.632874858s ago: executing program 0 (id=4398): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 1.631851429s ago: executing program 2 (id=4399): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d9, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) socket(0x28, 0x801, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) close(r2) 1.593997099s ago: executing program 6 (id=4400): mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x100080c) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0), 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000100)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x3) 1.56055837s ago: executing program 2 (id=4401): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xe0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r2) add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000280)="d3f75a090e1ed49c1167a889b33431cba888b0577f07ff8cd0a2b78283e4a0ad8a865bb93cc90790df313a49d8d91f95c73fd4878ab83507bdfccfcccfe6d77996c54ad4e8cc7a75ebb91158f2e5a9b3267e3b39d8db6d1c3772ab3eb7d636d926cbea23c62ec7e6d0abb6aa1a096990b420d5c4c32560b48fe14f660d5d5899022b35e1ecc9ba3ac421d41a5e460034c3655a9c393b1fec945bcc633d4339caac90e9df768429677abfc50388cc927ac55049df50ba2b163ac87f6ab6b8692b954b28d83f494514c430934d78f786c851", 0xd1, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 1.55987389s ago: executing program 6 (id=4402): r0 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fspick(r0, &(0x7f0000000200)='.\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0xf) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) 1.527832841s ago: executing program 2 (id=4403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) recvmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.449136462s ago: executing program 6 (id=4404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.315290015s ago: executing program 3 (id=4405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000324, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r4, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) 1.166993078s ago: executing program 1 (id=4406): syz_pidfd_open(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 535.36393ms ago: executing program 2 (id=4407): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x2, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0xf, 0x10}, {0x9, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x4004004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$qrtrtun(r3, &(0x7f0000000580)="83", 0x20000) 534.77958ms ago: executing program 2 (id=4408): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd644bab6b001800fffc000000000000000000040000000000000000000000f108020000000000000001000502"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@func={0xc, 0x0, 0x0, 0xc, 0x3}, @struct={0xf, 0x1, 0x0, 0x4, 0x1, 0xb, [{0x9, 0x1, 0x3}]}]}, {0x0, [0x30]}}, &(0x7f00000001c0)=""/250, 0x3f, 0xfa, 0x0, 0x3ff}, 0x28) 524.15214ms ago: executing program 1 (id=4409): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0xb, 0x5, 0x5, 0x74, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, 0x786f, 0x80, 0x80000001, 0x2}}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x603, &(0x7f0000000700)="$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") getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) 435.905192ms ago: executing program 2 (id=4410): getpgrp(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000170c0)) r4 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 391.196413ms ago: executing program 3 (id=4411): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r0, r1, 0x0) 326.690644ms ago: executing program 1 (id=4412): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioprio_set$pid(0x3, 0x0, 0x2007) creat(0x0, 0xc2) 230.597246ms ago: executing program 6 (id=4413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v2={0x2000000, [{0x8771, 0x6}, {0xa07, 0x401}]}, 0x14, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000740)=[{0x0}], 0x1) 229.883526ms ago: executing program 3 (id=4414): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 189.480877ms ago: executing program 1 (id=4415): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x28002, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x8, 0x6}, 0x1000, 0x0, 0x800000, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) vmsplice(r4, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x0) write(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 188.707686ms ago: executing program 3 (id=4416): r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route_sched_retired(r1, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000bc0)=@newtfilter={0x44, 0x2c, 0x800, 0x70bd25, 0x9, {0x0, 0x0, 0x0, r5, {0xd, 0xfff1}, {0xf, 0xa}, {0x10}}, [@f_tcindex={{0xc}, {0x4}}, @f_tcindex={{0xc}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000020f00000005002f000000000008000300", @ANYRES32=r5, @ANYBLOB="e3bda63b7df9db3e580157a634a31809bbbecaed5b0f98e6951597acd9a7999b6c00dae7c757f6d941daacdce92baf87108efc55f8999f01df841b1ed4c703565cd8ba6f99d745d5fd6177ee59c081864c0626ebecd1f30dffa6876a86931a56eb431394405c74ebd1e313fd9844748deff02f5a53883efc90a138eed61dc517015c4d2d2b0059984652845bde9e550062d40dd362ee607f407b42dd821d396f868912aeff301f00000000000000000000245b3284ca376cc9a82c05351925"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 102.390708ms ago: executing program 6 (id=4417): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x1e, 0x37, 0x2, {0x0, 0x4, 0x8}}, 0x1e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 77.501369ms ago: executing program 3 (id=4418): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x257, &(0x7f0000000500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8441, 0x141) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 0s ago: executing program 1 (id=4419): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) kernel console output (not intermixed with test programs): -fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.188214][T11266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.320686][ T9790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.346549][T11587] loop7: detected capacity change from 0 to 512 [ 122.362352][T11587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.380742][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3271'. [ 122.415111][ T9790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.436950][T11593] loop7: detected capacity change from 0 to 1024 [ 122.444124][T11593] EXT4-fs: Ignoring removed orlov option [ 122.455777][T11593] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.487194][T11596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3276'. [ 122.611008][T11600] loop4: detected capacity change from 0 to 1024 [ 122.632280][T11600] EXT4-fs: Ignoring removed orlov option [ 122.638023][T11600] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.688096][T11600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.711172][ T9790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.744076][T11605] loop7: detected capacity change from 0 to 512 [ 122.768281][T11266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.781720][T11607] loop5: detected capacity change from 0 to 256 [ 122.790177][T11605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.802986][T11607] vfat: Unknown parameter '18446744073709551615' [ 122.827620][T11607] loop5: detected capacity change from 0 to 1024 [ 122.845280][T11612] loop1: detected capacity change from 0 to 512 [ 122.863604][T11612] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.882665][T11617] loop4: detected capacity change from 0 to 512 [ 122.891424][T11607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.911217][T11607] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 122.926204][T11607] EXT4-fs (loop5): Remounting filesystem read-only [ 122.939619][T11612] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 122.956130][T11612] EXT4-fs (loop1): 1 truncate cleaned up [ 122.962475][T11612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.059594][ T9711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.070313][T11617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.107482][T11266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.119776][ T9790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.160871][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810e0cd200: rx timeout, send abort [ 123.246008][T11635] loop7: detected capacity change from 0 to 1024 [ 123.309081][T11635] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.351939][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.382633][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 123.382647][ T29] audit: type=1400 audit(123.353:3478): avc: denied { bind } for pid=11640 comm="syz.4.3293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 123.419857][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3290'. [ 123.600974][ T9790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.613386][ T29] audit: type=1400 audit(123.583:3479): avc: denied { mount } for pid=11651 comm="syz.1.3296" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.667788][ T29] audit: type=1400 audit(123.613:3480): avc: denied { read write } for pid=11651 comm="syz.1.3296" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.688812][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810e0cd200: abort rx timeout. Force session deactivation [ 123.698926][ T29] audit: type=1400 audit(123.613:3481): avc: denied { open } for pid=11651 comm="syz.1.3296" path="/15/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 123.720604][ T29] audit: type=1400 audit(123.623:3482): avc: denied { unmount } for pid=11238 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 123.938267][T11659] loop1: detected capacity change from 0 to 512 [ 123.969952][T11637] Set syz1 is full, maxelem 65536 reached [ 123.992193][T11659] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3298: casefold flag without casefold feature [ 124.024941][T11659] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3298: couldn't read orphan inode 15 (err -117) [ 124.087145][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3300'. [ 124.198932][T11659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.230059][ T29] audit: type=1326 audit(124.183:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.5.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5064eba9 code=0x7ffc0000 [ 124.252984][ T29] audit: type=1326 audit(124.183:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.5.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5064eba9 code=0x7ffc0000 [ 124.276004][ T29] audit: type=1326 audit(124.183:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.5.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2f5064eba9 code=0x7ffc0000 [ 124.299003][ T29] audit: type=1326 audit(124.183:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.5.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5064eba9 code=0x7ffc0000 [ 124.322052][ T29] audit: type=1326 audit(124.183:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11667 comm="syz.5.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f5064eba9 code=0x7ffc0000 [ 124.421770][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.432157][T11670] : renamed from vlan0 (while UP) [ 124.696777][T11692] loop5: detected capacity change from 0 to 1024 [ 124.741458][T11692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.884917][ T9596] hid_parser_main: 20 callbacks suppressed [ 124.885005][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x4 [ 124.898625][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x2 [ 124.938565][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 124.946287][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 124.953986][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 124.961744][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 124.969429][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 124.977164][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 124.984910][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 124.992574][ T9596] hid-generic 0000:3000000:0000.000A: unknown main item tag 0x0 [ 125.006666][ T9596] hid-generic 0000:3000000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 125.022628][ T3391] IPVS: starting estimator thread 0... [ 125.028881][T11705] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 125.046120][ T9711] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.071329][T11710] loop1: detected capacity change from 0 to 512 [ 125.108849][T11706] IPVS: using max 2880 ests per chain, 144000 per kthread [ 125.128080][T11710] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 125.138023][T11722] loop7: detected capacity change from 0 to 2048 [ 125.160900][T11710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.175644][T11722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.194361][T11710] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3320: corrupted xattr block 19: overlapping e_value [ 125.244513][T11734] loop5: detected capacity change from 0 to 1764 [ 125.252552][T11734] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 125.286983][ C0] vcan0: j1939_tp_rxtimer: 0xffff888117fa1200: rx timeout, send abort [ 125.295479][T11710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 125.295544][T11710] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3320: corrupted xattr block 19: overlapping e_value [ 125.303900][T11710] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 125.414533][T11710] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.3320: corrupted xattr block 19: overlapping e_value [ 125.434077][ T9790] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /99/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 125.483984][ T9790] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: iget: bogus i_mode (0) [ 125.502011][ T9790] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: iget: bogus i_mode (0) [ 125.565880][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.601448][T11737] pim6reg1: entered promiscuous mode [ 125.606835][T11737] pim6reg1: entered allmulticast mode [ 125.657846][T11739] loop4: detected capacity change from 0 to 512 [ 125.664617][T11739] EXT4-fs: Ignoring removed i_version option [ 125.672137][T11739] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 125.680819][T11739] EXT4-fs (loop4): 1 truncate cleaned up [ 125.686854][T11739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.701767][T11739] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 125.713019][ T9790] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.733186][ T9860] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.763472][T11266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.795395][ C0] vcan0: j1939_tp_rxtimer: 0xffff888117fa1200: abort rx timeout. Force session deactivation [ 125.954485][ T9860] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.979191][T11760] loop4: detected capacity change from 0 to 512 [ 126.002144][T11760] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.013439][ T9860] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.039292][T11758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3337'. [ 126.059999][T11760] EXT4-fs (loop4): 1 truncate cleaned up [ 126.066038][T11760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.101130][ T9860] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.159492][T11266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.226342][ T9860] bridge_slave_1: left allmulticast mode [ 126.232172][ T9860] bridge_slave_1: left promiscuous mode [ 126.237806][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.245163][T11779] loop4: detected capacity change from 0 to 512 [ 126.251756][T11777] loop1: detected capacity change from 0 to 1024 [ 126.258296][T11779] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.260838][T11777] EXT4-fs: Ignoring removed nobh option [ 126.274871][ T9860] bridge_slave_0: left allmulticast mode [ 126.279832][T11777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.280737][ T9860] bridge_slave_0: left promiscuous mode [ 126.298801][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.300334][T11779] EXT4-fs error (device loop4): ext4_init_orphan_info:611: comm syz.4.3341: orphan file block 0: bad magic [ 126.317912][T11779] EXT4-fs (loop4): Remounting filesystem read-only [ 126.325225][T11779] EXT4-fs (loop4): mount failed [ 126.340247][T11777] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 126.368249][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.391863][T11792] loop1: detected capacity change from 0 to 1024 [ 126.398629][T11792] EXT4-fs: Ignoring removed orlov option [ 126.406014][T11792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.431851][ T9860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.442938][ T9860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.452807][ T9860] bond0 (unregistering): Released all slaves [ 126.463574][T11745] chnl_net:caif_netlink_parms(): no params data found [ 126.474636][T11790] : renamed from vlan1 (while UP) [ 126.491529][ T9860] tipc: Left network mode [ 126.522951][T11798] loop4: detected capacity change from 0 to 2048 [ 126.556037][T11798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.585605][ T9860] hsr_slave_0: left promiscuous mode [ 126.586008][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3351'. [ 126.600422][ T9860] hsr_slave_1: left promiscuous mode [ 126.607918][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.615454][ T9860] batadv0: mtu less than device minimum [ 126.621451][ T9860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.632268][ T9860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.642980][ T9860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.653712][ T9860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.664557][ T9860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.675342][ T9860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.686157][ T9860] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.700894][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.718948][ T9860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.733617][ T9860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.741342][ T9860] batman_adv: batadv0: Interface deactivated: dummy0 [ 126.748029][ T9860] batman_adv: batadv0: Removing interface: dummy0 [ 126.755753][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.765084][ T9860] veth1_macvtap: left promiscuous mode [ 126.770641][ T9860] veth0_macvtap: left promiscuous mode [ 126.776365][ T9860] veth1_vlan: left promiscuous mode [ 126.781808][ T9860] veth0_vlan: left promiscuous mode [ 126.870334][T11266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.882523][T11745] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.889702][T11745] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.896964][T11745] bridge_slave_0: entered allmulticast mode [ 126.903696][T11745] bridge_slave_0: entered promiscuous mode [ 126.921242][T11745] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.928339][T11745] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.938520][T11745] bridge_slave_1: entered allmulticast mode [ 126.945580][T11745] bridge_slave_1: entered promiscuous mode [ 126.971307][T11745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.981263][T11816] veth1_macvtap: left promiscuous mode [ 126.986756][T11816] macsec0: entered allmulticast mode [ 127.006167][T11745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.037000][T11745] team0: Port device team_slave_0 added [ 127.053411][T11745] team0: Port device team_slave_1 added [ 127.069770][T11825] loop1: detected capacity change from 0 to 512 [ 127.084025][T11825] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 127.093734][T11825] EXT4-fs (loop1): orphan cleanup on readonly fs [ 127.094481][T11745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.107115][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.110282][T11825] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3360: bg 0: block 16: invalid block bitmap [ 127.133236][T11745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.149188][T11825] EXT4-fs (loop1): Remounting filesystem read-only [ 127.163811][T11825] EXT4-fs (loop1): 1 truncate cleaned up [ 127.170328][T11825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 127.189465][T11745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.196454][T11745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.222472][T11745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.263138][T11745] hsr_slave_0: entered promiscuous mode [ 127.278859][T11745] hsr_slave_1: entered promiscuous mode [ 127.284872][T11745] debugfs: 'hsr0' already exists in 'hsr' [ 127.290667][T11745] Cannot create hsr debugfs directory [ 127.296612][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.370381][T11833] loop4: detected capacity change from 0 to 1024 [ 127.380279][T11833] EXT4-fs: Ignoring removed orlov option [ 127.388338][T11833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.414749][T11836] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3370'. [ 127.425755][T11836] xt_socket: unknown flags 0xd0 [ 127.665899][T11266] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.736178][T11848] loop4: detected capacity change from 0 to 2048 [ 127.750133][T11848] EXT4-fs: Ignoring removed bh option [ 127.773886][T11848] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 127.790506][T11848] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 127.803032][T11848] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.803032][T11848] [ 127.812724][T11848] EXT4-fs (loop4): Total free blocks count 0 [ 127.818820][T11848] EXT4-fs (loop4): Free/Dirty block details [ 127.824800][T11848] EXT4-fs (loop4): free_blocks=2415919104 [ 127.830658][T11848] EXT4-fs (loop4): dirty_blocks=64 [ 127.835878][T11848] EXT4-fs (loop4): Block reservation details [ 127.841917][T11848] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 127.884794][T11745] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.892421][ T9857] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 127.904711][ T9857] EXT4-fs (loop4): This should not happen!! Data will be lost [ 127.904711][ T9857] [ 127.916865][T11745] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.931869][T11745] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.943737][T11745] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.985511][T11745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.000282][T11745] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.011318][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.018486][ T9860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.032668][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.040039][ T9860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.060158][T11745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 128.070684][T11745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.133177][T11745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.208826][T11745] veth0_vlan: entered promiscuous mode [ 128.216914][T11745] veth1_vlan: entered promiscuous mode [ 128.241789][T11745] veth0_macvtap: entered promiscuous mode [ 128.251219][T11890] loop5: detected capacity change from 0 to 128 [ 128.253228][T11745] veth1_macvtap: entered promiscuous mode [ 128.270804][T11745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.285181][T11745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.296138][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.305140][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.324331][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.336149][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.456842][T11906] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 128.471961][T11906] bond0: (slave dummy0): Releasing backup interface [ 128.481354][T11906] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.490810][T11906] team0: Failed to send options change via netlink (err -105) [ 128.498379][T11906] team0: Port device dummy0 added [ 128.506101][T11906] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 128.514727][T11906] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.540292][T11906] team0: Failed to send options change via netlink (err -105) [ 128.547928][T11906] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 128.557049][T11906] team0: Port device dummy0 removed [ 128.565385][T11906] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.647049][T11910] tipc: Started in network mode [ 128.652069][T11910] tipc: Node identity 4a61fe5cf5d, cluster identity 4711 [ 128.659186][T11910] tipc: Enabled bearer , priority 0 [ 128.667802][T11909] tipc: Resetting bearer [ 128.684954][T11909] tipc: Disabling bearer [ 128.741080][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 128.741096][ T29] audit: type=1400 audit(128.713:3548): avc: denied { listen } for pid=11918 comm="syz.0.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.766697][ T29] audit: type=1400 audit(128.713:3549): avc: denied { accept } for pid=11918 comm="syz.0.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 128.868734][ T29] audit: type=1400 audit(128.833:3550): avc: denied { read } for pid=11921 comm="syz.1.3395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 128.906611][T11931] loop0: detected capacity change from 0 to 512 [ 128.928092][T11931] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 128.931215][T11936] vhci_hcd: invalid port number 96 [ 128.941589][T11936] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 128.948895][ T29] audit: type=1400 audit(128.903:3551): avc: denied { map } for pid=11935 comm="syz.3.3401" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 128.982823][T11931] EXT4-fs (loop0): orphan cleanup on readonly fs [ 129.001844][T11931] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3399: bg 0: block 16: invalid block bitmap [ 129.020027][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'. [ 129.045917][T11950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3405'. [ 129.066055][T11931] EXT4-fs (loop0): Remounting filesystem read-only [ 129.074322][T11931] EXT4-fs (loop0): 1 truncate cleaned up [ 129.164452][T11963] loop1: detected capacity change from 0 to 128 [ 129.194744][ T29] audit: type=1400 audit(129.163:3552): avc: denied { setattr } for pid=11961 comm="syz.1.3407" path="/42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 129.238837][ T29] audit: type=1400 audit(129.163:3553): avc: denied { create } for pid=11961 comm="syz.1.3407" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 129.283653][T11970] loop4: detected capacity change from 0 to 512 [ 129.300467][T11970] EXT4-fs: Ignoring removed oldalloc option [ 129.313445][T11970] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.3409: Parent and EA inode have the same ino 15 [ 129.331984][T11970] EXT4-fs (loop4): Remounting filesystem read-only [ 129.340124][T11970] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 129.358540][T11970] EXT4-fs (loop4): 1 orphan inode deleted [ 129.366045][T11978] loop0: detected capacity change from 0 to 512 [ 129.379341][T11978] ------------[ cut here ]------------ [ 129.384970][T11978] EA inode 11 i_nlink=2 [ 129.385218][T11978] WARNING: CPU: 0 PID: 11978 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 129.390080][T11980] tipc: Enabled bearer , priority 0 [ 129.399908][T11978] Modules linked in: [ 129.410435][T11978] CPU: 0 UID: 0 PID: 11978 Comm: syz.0.3413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 129.420276][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 129.430448][T11978] RIP: 0010:ext4_xattr_inode_update_ref+0x3d4/0x3f0 [ 129.437108][T11978] Code: 90 49 8d 7e 40 e8 0c 00 b8 ff 4d 8b 6e 40 4c 89 e7 e8 20 fb b7 ff 41 8b 56 48 48 c7 c7 1b a2 54 86 4c 89 ee e8 ed e4 66 ff 90 <0f> 0b 90 90 e9 58 fe ff ff e8 fe a2 ad 03 66 66 66 66 66 2e 0f 1f [ 129.456932][T11978] RSP: 0018:ffffc900018d75f0 EFLAGS: 00010246 [ 129.463785][T11978] RAX: 9f957656a6d2aa00 RBX: ffff88811aa0c600 RCX: 0000000000080000 [ 129.471858][T11978] RDX: ffffc900029d6000 RSI: 0000000000004377 RDI: 0000000000004378 [ 129.480055][T11978] RBP: 0000000000000002 R08: 0001c900018d746f R09: 0000000000000000 [ 129.488285][T11978] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811aa0c5b0 [ 129.496407][T11978] R13: 000000000000000b R14: ffff88811aa0c568 R15: 0000000000000001 [ 129.504403][T11978] FS: 00007f0fba6ef6c0(0000) GS:ffff8882aee40000(0000) knlGS:0000000000000000 [ 129.513353][T11978] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.519936][T11978] CR2: ffffffffffffffe8 CR3: 00000001256e8000 CR4: 00000000003506f0 [ 129.527967][T11978] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.535985][T11978] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 129.543963][T11978] Call Trace: [ 129.547227][T11978] [ 129.550172][T11978] ext4_xattr_set_entry+0x77f/0x1020 [ 129.555449][T11978] ext4_xattr_ibody_set+0x184/0x3c0 [ 129.560839][T11978] ext4_expand_extra_isize_ea+0xcb6/0x11f0 [ 129.566656][T11978] __ext4_expand_extra_isize+0x246/0x280 [ 129.572419][T11978] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 129.577967][T11978] ext4_evict_inode+0x80e/0xd90 [ 129.582874][T11978] ? __pfx_ext4_evict_inode+0x10/0x10 [ 129.588236][T11978] evict+0x2e3/0x550 [ 129.592205][T11978] ? __dquot_initialize+0x146/0x7c0 [ 129.597430][T11978] iput+0x447/0x5b0 [ 129.601243][T11978] ext4_process_orphan+0x1a9/0x1c0 [ 129.606342][T11978] ext4_orphan_cleanup+0x6a8/0xa00 [ 129.611544][T11978] ext4_fill_super+0x3260/0x35d0 [ 129.616513][T11978] ? set_blocksize+0x1a8/0x310 [ 129.621339][T11978] ? sb_set_blocksize+0xe3/0x100 [ 129.626339][T11978] ? setup_bdev_super+0x30e/0x370 [ 129.631487][T11978] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.636767][T11978] get_tree_bdev_flags+0x291/0x300 [ 129.642139][T11978] ? __pfx_ext4_fill_super+0x10/0x10 [ 129.647496][T11978] get_tree_bdev+0x1f/0x30 [ 129.652009][T11978] ext4_get_tree+0x1c/0x30 [ 129.656417][T11978] vfs_get_tree+0x54/0x1d0 [ 129.660837][T11978] do_new_mount+0x207/0x5e0 [ 129.665428][T11978] ? security_capable+0x83/0x90 [ 129.670349][T11978] path_mount+0x4a4/0xb20 [ 129.674697][T11978] ? user_path_at+0x109/0x130 [ 129.679397][T11978] __se_sys_mount+0x28f/0x2e0 [ 129.684135][T11978] __x64_sys_mount+0x67/0x80 [ 129.688767][T11978] x64_sys_call+0x2b4d/0x2ff0 [ 129.693545][T11978] do_syscall_64+0xd2/0x200 [ 129.698228][T11978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 129.704342][T11978] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 129.710129][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.716029][T11978] RIP: 0033:0x7f0fbbc9034a [ 129.720551][T11978] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.740266][T11978] RSP: 002b:00007f0fba6eee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 129.748725][T11978] RAX: ffffffffffffffda RBX: 00007f0fba6eeef0 RCX: 00007f0fbbc9034a [ 129.756804][T11978] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f0fba6eeeb0 [ 129.764776][T11978] RBP: 0000200000000180 R08: 00007f0fba6eeef0 R09: 0000000000800700 [ 129.772858][T11978] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 129.780854][T11978] R13: 00007f0fba6eeeb0 R14: 0000000000000473 R15: 0000200000000680 [ 129.788921][T11978] [ 129.791980][T11978] ---[ end trace 0000000000000000 ]--- [ 129.797854][T11979] tipc: Resetting bearer [ 129.798104][T11978] EXT4-fs (loop0): 1 orphan inode deleted [ 129.821775][T11979] tipc: Disabling bearer [ 129.832365][T11939] chnl_net:caif_netlink_parms(): no params data found [ 129.860024][ T29] audit: type=1400 audit(129.823:3554): avc: denied { create } for pid=11983 comm="syz.4.3414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.932694][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.939834][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.949664][T11939] bridge_slave_0: entered allmulticast mode [ 129.956723][T11939] bridge_slave_0: entered promiscuous mode [ 129.974480][T11998] loop1: detected capacity change from 0 to 2048 [ 129.987096][T11939] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.994252][T11939] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.004618][T11939] bridge_slave_1: entered allmulticast mode [ 130.024690][T11939] bridge_slave_1: entered promiscuous mode [ 130.046712][T11939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.057585][T11939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.078263][ T29] audit: type=1400 audit(130.043:3555): avc: denied { read } for pid=12002 comm="syz.3.3421" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.102545][ T29] audit: type=1400 audit(130.043:3556): avc: denied { open } for pid=12002 comm="syz.3.3421" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 130.125855][ T29] audit: type=1400 audit(130.043:3557): avc: denied { create } for pid=12003 comm="syz.1.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.176189][T11939] team0: Port device team_slave_0 added [ 130.182916][T11939] team0: Port device team_slave_1 added [ 130.226282][T11939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.233418][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.259359][T11939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.281609][T11939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.288707][T11939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.314751][T11939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.368532][T11939] hsr_slave_0: entered promiscuous mode [ 130.375032][T11939] hsr_slave_1: entered promiscuous mode [ 130.381722][T11939] debugfs: 'hsr0' already exists in 'hsr' [ 130.387467][T11939] Cannot create hsr debugfs directory [ 130.653517][T11939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.670131][T11939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 130.680186][T11939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 130.690846][T11939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 130.729718][T11939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.746806][T11939] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.780642][ T9857] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.787744][ T9857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.803632][ T9857] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.810779][ T9857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.831335][T12038] team_slave_0: entered promiscuous mode [ 130.837585][T12038] team_slave_0: left promiscuous mode [ 130.847859][T11939] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 130.858346][T11939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.923548][T11939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.026846][T11939] veth0_vlan: entered promiscuous mode [ 131.041790][T11939] veth1_vlan: entered promiscuous mode [ 131.060806][T11939] veth0_macvtap: entered promiscuous mode [ 131.068316][T11939] veth1_macvtap: entered promiscuous mode [ 131.084208][T11939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.095510][T11939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.104706][T12055] loop0: detected capacity change from 0 to 128 [ 131.106637][ T9857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.125359][ T9857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.138409][ T9857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.162240][ T9857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.303783][T12076] loop1: detected capacity change from 0 to 512 [ 131.311425][T12076] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.331827][T12076] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 131.340193][T12076] System zones: 0-2, 18-18, 34-34 [ 131.461881][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.469068][T12090] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.513432][T12090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.523192][T12090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.555927][ T9860] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.565438][ T9860] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.576566][ T9860] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.612922][ T9860] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.647833][T12105] loop0: detected capacity change from 0 to 2048 [ 131.682076][T12105] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3446: bg 0: block 345: padding at end of block bitmap is not set [ 131.719300][T12109] vhci_hcd: invalid port number 96 [ 131.724480][T12109] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 131.731896][ T9860] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 131.744299][ T9860] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.744299][ T9860] [ 131.753949][ T9860] EXT4-fs (loop0): Total free blocks count 0 [ 131.759979][ T9860] EXT4-fs (loop0): Free/Dirty block details [ 131.766043][ T9860] EXT4-fs (loop0): free_blocks=0 [ 131.771061][ T9860] EXT4-fs (loop0): dirty_blocks=16 [ 131.776177][ T9860] EXT4-fs (loop0): Block reservation details [ 131.782257][ T9860] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 131.855837][T12127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.870323][T12127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.895363][T12139] netlink: 'syz.1.3460': attribute type 13 has an invalid length. [ 131.903295][T12139] netlink: 'syz.1.3460': attribute type 17 has an invalid length. [ 131.913164][T12139] gretap0: refused to change device tx_queue_len [ 131.919734][T12139] net_ratelimit: 33 callbacks suppressed [ 131.919749][T12139] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 131.990660][T12143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.110012][T12153] loop1: detected capacity change from 0 to 512 [ 132.126860][T12153] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.144101][T12153] EXT4-fs (loop1): mount failed [ 132.195565][T12163] loop1: detected capacity change from 0 to 512 [ 132.282475][T12143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.332156][T12143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.401529][T12181] smc: net device bond0 erased user defined pnetid SYZ0 [ 132.432878][T12143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.463009][T12189] loop4: detected capacity change from 0 to 512 [ 132.506303][ T9819] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.517200][T12193] loop1: detected capacity change from 0 to 1024 [ 132.534233][ T9819] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.548064][ T9819] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.562972][T12193] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm +}[@: lblock 0 mapped to illegal pblock 0 (length 1) [ 132.566592][ T9819] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.590976][T12193] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 132.603606][T12193] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.603606][T12193] [ 132.628607][T12202] loop4: detected capacity change from 512 to 0 [ 132.635630][ C1] I/O error, dev loop4, sector 84 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.645226][ C1] Buffer I/O error on dev loop4, logical block 21, lost sync page write [ 132.653730][T12189] EXT4-fs error (device loop4): ext4_ext_insert_extent:2192: inode #19: block 21: comm syz.4.3483: IO error syncing itable block [ 132.669917][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.679461][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.688959][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 132.698245][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 132.707428][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 132.729177][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.738721][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.748189][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 132.756512][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 132.765136][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 132.777894][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.787417][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.796968][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 132.806664][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 132.813954][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 132.836642][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.846175][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.855653][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 132.863965][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 132.875721][T12214] netlink: 'syz.1.3492': attribute type 83 has an invalid length. [ 132.895746][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 132.934963][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 132.944512][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 132.953002][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 132.962127][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 132.974938][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 132.985130][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 132.992259][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 133.024553][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 133.032918][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 133.039845][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 133.053468][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 133.061894][T12222] tipc: Enabled bearer , priority 0 [ 133.069216][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 133.076054][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 133.088896][T12221] tipc: Resetting bearer [ 133.089438][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 133.118232][T12221] tipc: Disabling bearer [ 133.124148][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 133.131249][T12189] EXT4-fs error (device loop4): ext4_check_bdev_write_error:228: comm syz.4.3483: Error while async write back metadata [ 133.150073][T12189] EXT4-fs (loop4): I/O error while writing superblock [ 133.193884][T12233] netlink: 'syz.3.3500': attribute type 12 has an invalid length. [ 133.198346][T12235] loop1: detected capacity change from 0 to 512 [ 133.209457][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.230688][T12237] loop0: detected capacity change from 0 to 512 [ 133.237784][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.259668][T12241] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3504'. [ 133.260916][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.271501][T12241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3504'. [ 133.282688][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.293105][T12235] vhci_hcd: invalid port number 96 [ 133.305177][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.309439][T12235] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 133.330671][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.344528][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.385425][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.426150][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.438899][T12251] loop1: detected capacity change from 0 to 128 [ 133.458740][T11266] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 133.753759][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 133.753770][ T29] audit: type=1400 audit(133.723:3686): avc: denied { read write } for pid=11238 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.783843][ T29] audit: type=1400 audit(133.723:3687): avc: denied { open } for pid=11238 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.808236][ T29] audit: type=1400 audit(133.733:3688): avc: denied { ioctl } for pid=11238 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 133.833309][ T29] audit: type=1400 audit(133.763:3689): avc: denied { map_create } for pid=12282 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.852067][ T29] audit: type=1400 audit(133.763:3690): avc: denied { perfmon } for pid=12282 comm="syz.1.3514" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.872500][ T29] audit: type=1400 audit(133.763:3691): avc: denied { map_read map_write } for pid=12282 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.891973][ T29] audit: type=1400 audit(133.763:3692): avc: denied { prog_load } for pid=12282 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.910606][ T29] audit: type=1400 audit(133.763:3693): avc: denied { bpf } for pid=12282 comm="syz.1.3514" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.930776][ T29] audit: type=1400 audit(133.763:3694): avc: denied { prog_run } for pid=12282 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.950007][ T29] audit: type=1400 audit(133.883:3695): avc: denied { create } for pid=12282 comm="syz.1.3514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.036213][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3525'. [ 134.046662][T12288] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 134.208081][T12290] chnl_net:caif_netlink_parms(): no params data found [ 134.252785][T12290] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.259996][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.267177][T12290] bridge_slave_0: entered allmulticast mode [ 134.275346][T12290] bridge_slave_0: entered promiscuous mode [ 134.283057][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.290179][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.298802][T12290] bridge_slave_1: entered allmulticast mode [ 134.305378][T12290] bridge_slave_1: entered promiscuous mode [ 134.322441][T12290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.333323][T12290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.354775][T12290] team0: Port device team_slave_0 added [ 134.361762][T12290] team0: Port device team_slave_1 added [ 134.380568][T12290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.387551][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.413726][T12290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.425091][T12290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.432072][T12290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.458182][T12290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.538127][T12290] hsr_slave_0: entered promiscuous mode [ 134.547656][T12290] hsr_slave_1: entered promiscuous mode [ 134.560353][T12290] debugfs: 'hsr0' already exists in 'hsr' [ 134.566125][T12290] Cannot create hsr debugfs directory [ 134.571666][T12314] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3521'. [ 134.892922][T12290] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 134.903519][T12290] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 134.912439][T12290] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 134.921627][T12290] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 134.930980][T12333] wg2: entered promiscuous mode [ 134.935877][T12333] wg2: entered allmulticast mode [ 134.956125][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.957872][T12341] loop1: detected capacity change from 0 to 1024 [ 134.963324][T12290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.976966][T12290] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.984026][T12290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.001422][T12341] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.3531: Allocating blocks 385-513 which overlap fs metadata [ 135.013573][T12290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.032454][ T9860] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.033111][T12341] EXT4-fs (loop1): pa ffff8881072377e0: logic 16, phys. 129, len 24 [ 135.047847][T12341] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 135.058167][ T9860] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.072661][T12290] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.085397][ T9860] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.092512][ T9860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.103146][ T9860] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.110266][ T9860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.267587][T12290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.316863][T12375] loop0: detected capacity change from 0 to 512 [ 135.326811][T12375] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.364674][T12375] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.3541: corrupted xattr block 19: overlapping e_value [ 135.401497][T12375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 135.412781][T12381] syzkaller0: entered promiscuous mode [ 135.418335][T12381] syzkaller0: entered allmulticast mode [ 135.433848][T12375] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.3541: corrupted xattr block 19: overlapping e_value [ 135.448328][T12385] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.3541: corrupted xattr block 19: overlapping e_value [ 135.480528][T12385] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 135.493151][T12375] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 135.502958][T12375] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.3541: corrupted xattr block 19: overlapping e_value [ 135.523071][T12389] loop2: detected capacity change from 0 to 128 [ 135.564234][T12290] veth0_vlan: entered promiscuous mode [ 135.581965][T12290] veth1_vlan: entered promiscuous mode [ 135.606631][T12290] veth0_macvtap: entered promiscuous mode [ 135.614085][T12398] netlink: 'syz.1.3547': attribute type 10 has an invalid length. [ 135.614625][T12290] veth1_macvtap: entered promiscuous mode [ 135.637619][T12400] loop2: detected capacity change from 0 to 1024 [ 135.643927][T12398] team0: Port device dummy0 added [ 135.657760][T12398] netlink: 'syz.1.3547': attribute type 10 has an invalid length. [ 135.671881][T12398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 135.698924][T12403] hub 9-0:1.0: USB hub found [ 135.704034][T12403] hub 9-0:1.0: 8 ports detected [ 135.705006][T12398] team0: Failed to send options change via netlink (err -105) [ 135.723179][T12398] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 135.735130][T12398] team0: Port device dummy0 removed [ 135.753129][T12398] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 135.764015][T12290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.775493][T12405] smc: net device bond0 applied user defined pnetid SYZ0 [ 135.779848][T12290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.796423][ T9860] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.811507][T12411] smc: net device bond0 erased user defined pnetid SYZ0 [ 135.823533][ T9860] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.842742][ T9860] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.854108][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.927700][T12428] netlink: 'syz.2.3558': attribute type 10 has an invalid length. [ 135.950748][T12428] batman_adv: batadv0: Adding interface: netdevsim1 [ 135.957419][T12428] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.983242][T12428] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 136.043816][T12430] syzkaller0: entered promiscuous mode [ 136.049504][T12430] syzkaller0: entered allmulticast mode [ 136.068859][T12439] netlink: 'syz.3.3562': attribute type 4 has an invalid length. [ 136.091086][T12439] netlink: 'syz.3.3562': attribute type 4 has an invalid length. [ 136.204103][T12447] loop2: detected capacity change from 0 to 128 [ 136.214818][T12447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3567'. [ 136.224242][T12447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3567'. [ 136.286034][T12455] loop1: detected capacity change from 0 to 512 [ 136.293278][T12455] journal_path: Non-blockdev passed as './bus' [ 136.299593][T12455] EXT4-fs: error: could not find journal device path [ 136.327242][T12461] loop2: detected capacity change from 0 to 1024 [ 136.337633][T12463] loop1: detected capacity change from 0 to 512 [ 136.344771][T12463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 136.357994][T12463] EXT4-fs (loop1): 1 truncate cleaned up [ 136.368078][T12466] loop2: detected capacity change from 0 to 164 [ 136.377043][T12466] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 136.388150][T12466] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 136.400074][T12466] Symlink component flag not implemented [ 136.405738][T12466] Symlink component flag not implemented [ 136.478591][T12466] Symlink component flag not implemented (7) [ 136.484618][T12466] Symlink component flag not implemented (116) [ 136.556177][T12474] loop2: detected capacity change from 0 to 512 [ 136.700627][T12480] bridge_slave_0: left allmulticast mode [ 136.706339][T12480] bridge_slave_0: left promiscuous mode [ 136.712039][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.729937][T12480] bridge_slave_1: left allmulticast mode [ 136.735714][T12480] bridge_slave_1: left promiscuous mode [ 136.741543][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.758782][T12483] netlink: 'syz.6.3582': attribute type 10 has an invalid length. [ 136.766969][T12483] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3582'. [ 136.782396][T12480] bond0: (slave bond_slave_0): Releasing backup interface [ 136.803933][T12480] bond0: (slave bond_slave_1): Releasing backup interface [ 136.816288][T12480] team0: Port device team_slave_0 removed [ 136.829646][T12480] team0: Port device team_slave_1 removed [ 136.847873][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.855369][T12480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.882585][T12480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.890237][T12480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.921370][T12483] batman_adv: batadv0: Adding interface: veth1_vlan [ 136.928026][T12483] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.956644][T12483] batman_adv: batadv0: Interface activated: veth1_vlan [ 137.266044][T12493] loop0: detected capacity change from 0 to 1024 [ 137.383804][T12499] loop2: detected capacity change from 0 to 2048 [ 137.404057][ T9860] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:55: bg 0: block 393: padding at end of block bitmap is not set [ 137.425032][ T9860] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 137.437777][ T9860] EXT4-fs (loop0): This should not happen!! Data will be lost [ 137.437777][ T9860] [ 137.681046][T12516] loop0: detected capacity change from 0 to 512 [ 137.699910][T12516] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3597: Failed to acquire dquot type 1 [ 137.713247][T12516] EXT4-fs (loop0): 1 truncate cleaned up [ 137.866803][T12531] veth1_to_bond: entered allmulticast mode [ 137.873341][T12531] bond_slave_1: entered promiscuous mode [ 137.879617][T12531] bond_slave_1: left promiscuous mode [ 137.885038][T12531] veth1_to_bond: left allmulticast mode [ 138.117829][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 138.134579][T12540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.150592][T12540] vlan3: entered allmulticast mode [ 138.155818][T12540] bond2: entered allmulticast mode [ 138.346718][T12553] loop2: detected capacity change from 0 to 128 [ 138.581259][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3621'. [ 138.611188][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3622'. [ 138.641969][T12573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12573 comm=syz.3.3621 [ 138.690348][T12588] bridge: RTM_NEWNEIGH with invalid ether address [ 138.775592][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 138.775608][ T29] audit: type=1400 audit(138.743:3820): avc: denied { read } for pid=12594 comm="syz.2.3631" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.804794][ T29] audit: type=1400 audit(138.743:3821): avc: denied { open } for pid=12594 comm="syz.2.3631" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 138.804982][ T29] audit: type=1400 audit(138.743:3822): avc: denied { ioctl } for pid=12594 comm="syz.2.3631" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 139.003866][ T29] audit: type=1400 audit(138.973:3823): avc: denied { name_bind } for pid=12609 comm="syz.0.3638" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 139.024749][ T29] audit: type=1400 audit(138.973:3824): avc: denied { node_bind } for pid=12609 comm="syz.0.3638" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 139.084552][ T29] audit: type=1400 audit(139.043:3825): avc: denied { write } for pid=12611 comm="syz.3.3636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 139.105659][ T29] audit: type=1400 audit(139.083:3826): avc: denied { name_bind } for pid=12615 comm="syz.0.3639" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 139.126994][ T29] audit: type=1400 audit(139.083:3827): avc: denied { create } for pid=12615 comm="syz.0.3639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.146023][ T29] audit: type=1400 audit(139.083:3828): avc: denied { ioctl } for pid=12615 comm="syz.0.3639" path="socket:[39159]" dev="sockfs" ino=39159 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 139.170183][ T29] audit: type=1400 audit(139.083:3829): avc: denied { write } for pid=12615 comm="syz.0.3639" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 139.202144][T12608] loop2: detected capacity change from 0 to 512 [ 139.227564][T12624] loop1: detected capacity change from 0 to 512 [ 139.288170][T12633] loop1: detected capacity change from 0 to 128 [ 139.448012][T12644] loop1: detected capacity change from 0 to 512 [ 139.461758][T12644] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3650: corrupted inode contents [ 139.474594][T12644] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3650: mark_inode_dirty error [ 139.486408][T12644] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3650: corrupted inode contents [ 139.499044][T12644] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.3650: mark_inode_dirty error [ 139.527155][T12648] syz_tun: entered allmulticast mode [ 139.540809][T12647] syz_tun: left allmulticast mode [ 139.567860][T12652] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.3653'. [ 139.801501][T12666] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3658'. [ 139.910931][T12677] netlink: 'syz.6.3662': attribute type 10 has an invalid length. [ 139.923574][T12677] team0: Port device dummy0 added [ 139.930801][T12677] netlink: 'syz.6.3662': attribute type 10 has an invalid length. [ 139.939888][T12677] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 139.951691][T12677] team0: Failed to send options change via netlink (err -105) [ 139.960172][T12677] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 139.969366][T12677] team0: Port device dummy0 removed [ 139.978229][T12677] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.033875][T12681] loop1: detected capacity change from 0 to 1024 [ 140.050309][T12681] EXT4-fs: inline encryption not supported [ 140.056652][T12681] EXT4-fs: Ignoring removed bh option [ 140.132338][T12689] pim6reg1: entered promiscuous mode [ 140.137651][T12689] pim6reg1: entered allmulticast mode [ 140.155063][T12688] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 140.198142][T12688] team0: Port device dummy0 added [ 140.203203][T12696] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 140.253602][T12696] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 140.276879][T12703] loop2: detected capacity change from 0 to 8192 [ 140.284380][T12696] team0: Failed to send options change via netlink (err -105) [ 140.293707][T12696] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 140.303258][T12696] team0: Port device dummy0 removed [ 140.312958][T12696] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.324953][T12697] tipc: Enabled bearer , priority 0 [ 140.332099][T12703] loop2: p1[EZD] p2 p4 [ 140.336415][T12692] tipc: Resetting bearer [ 140.338631][T12703] loop2: p1 start 150996992 is beyond EOD, truncated [ 140.354451][T12703] loop2: p4 size 281856 extends beyond EOD, truncated [ 140.355322][T12692] tipc: Disabling bearer [ 141.139638][T12734] netlink: 'syz.3.3685': attribute type 10 has an invalid length. [ 141.164622][T12734] bond0: (slave dummy0): Releasing backup interface [ 141.190114][T12734] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.192197][T12735] netlink: 'syz.3.3685': attribute type 10 has an invalid length. [ 141.199710][T12734] team0: Failed to send options change via netlink (err -105) [ 141.214939][T12734] team0: Port device dummy0 added [ 141.225848][T12735] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.236182][T12735] team0: Failed to send options change via netlink (err -105) [ 141.245925][T12735] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.255288][T12735] team0: Port device dummy0 removed [ 141.263057][T12735] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 141.304072][T12739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3687'. [ 141.317493][T12741] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 141.327053][T12741] bond0: (slave dummy0): Releasing backup interface [ 141.335911][T12741] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.346666][T12741] team0: Failed to send options change via netlink (err -105) [ 141.354308][T12741] team0: Port device dummy0 added [ 141.362994][T12741] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 141.389027][T12741] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.401618][T12741] team0: Failed to send options change via netlink (err -105) [ 141.409335][T12741] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.418731][T12741] team0: Port device dummy0 removed [ 141.427610][T12741] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 141.487037][T12758] loop1: detected capacity change from 0 to 1024 [ 141.498219][T12758] EXT4-fs: Ignoring removed bh option [ 141.503875][T12758] EXT4-fs: inline encryption not supported [ 141.513734][T12758] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.548969][T12758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 141.569339][T12758] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3694: lblock 2 mapped to illegal pblock 2 (length 1) [ 141.616240][T12758] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3694: lblock 0 mapped to illegal pblock 48 (length 1) [ 141.680842][T12758] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.3694: Failed to acquire dquot type 0 [ 141.708858][T12768] netlink: 'syz.6.3698': attribute type 10 has an invalid length. [ 141.731025][T12758] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 141.745056][T12768] bond0: (slave dummy0): Releasing backup interface [ 141.745108][T12758] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3694: mark_inode_dirty error [ 141.745229][T12758] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 141.773251][T12758] EXT4-fs (loop1): 1 orphan inode deleted [ 141.779537][T12770] netlink: 'syz.6.3698': attribute type 10 has an invalid length. [ 141.794826][T12772] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3699'. [ 141.804199][ T9813] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.843150][ T9813] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:10: Failed to release dquot type 0 [ 141.844330][T12768] team0: Failed to send options change via netlink (err -105) [ 141.864808][T12768] team0: Port device dummy0 added [ 141.896760][T12770] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.930238][T12770] team0: Failed to send options change via netlink (err -105) [ 141.930576][T12758] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 141.937754][T12770] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 141.985413][T12770] team0: Port device dummy0 removed [ 142.000673][T12770] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 142.159735][T12787] syz_tun: entered allmulticast mode [ 142.187395][T12787] dvmrp6: entered allmulticast mode [ 142.209646][T12791] bond0: entered promiscuous mode [ 142.214720][T12791] bond_slave_0: entered promiscuous mode [ 142.220617][T12791] bond_slave_1: entered promiscuous mode [ 142.230039][T12785] syz_tun: left allmulticast mode [ 142.244838][T12785] dvmrp6: left allmulticast mode [ 142.300917][T12798] syz_tun: entered allmulticast mode [ 142.313615][T12795] syz_tun: left allmulticast mode [ 142.414286][T12815] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 142.422570][T12815] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 142.663237][T12843] SELinux: failed to load policy [ 142.778128][T12855] netlink: 4452 bytes leftover after parsing attributes in process `syz.1.3733'. [ 142.805421][T12855] syz_tun: entered allmulticast mode [ 142.825563][T12854] syz_tun: left allmulticast mode [ 142.880984][T12865] loop1: detected capacity change from 0 to 512 [ 142.916667][T12865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.3737: corrupted inode contents [ 142.918253][T12874] loop0: detected capacity change from 0 to 128 [ 142.936546][T12865] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #18: comm syz.1.3737: mark_inode_dirty error [ 142.948290][T12865] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #18: comm syz.1.3737: corrupted inode contents [ 142.959187][T12874] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 142.961002][T12865] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.3737: mark_inode_dirty error [ 142.980246][T12874] System zones: 1-3, 19-19, 35-36 [ 142.981680][T12865] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.3737: mark inode dirty (error -117) [ 143.000900][T12865] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 143.209918][T12888] loop0: detected capacity change from 0 to 128 [ 143.225289][T12888] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 143.238561][T12888] System zones: 1-3, 19-19, 35-36 [ 143.386002][T12898] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3748'. [ 143.614198][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 143.673691][T12931] loop2: detected capacity change from 0 to 1024 [ 143.834180][T12950] loop2: detected capacity change from 0 to 1024 [ 143.849131][T12950] EXT4-fs: inline encryption not supported [ 143.862652][T12950] EXT4-fs: Ignoring removed bh option [ 144.376224][T13006] tipc: Started in network mode [ 144.381179][T13006] tipc: Node identity 3e32b3303dd1, cluster identity 4711 [ 144.388438][T13006] tipc: Enabled bearer , priority 0 [ 144.398639][T12994] tipc: Resetting bearer [ 144.469239][T12994] tipc: Disabling bearer [ 144.481272][T13028] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3765'. [ 144.552970][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 144.552985][ T29] audit: type=1400 audit(144.523:3993): avc: denied { ioctl } for pid=13038 comm="syz.3.3767" path="socket:[40302]" dev="sockfs" ino=40302 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.623585][ T10] hid_parser_main: 6 callbacks suppressed [ 144.623601][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x4 [ 144.627538][ T29] audit: type=1400 audit(144.593:3994): avc: denied { read write } for pid=13043 comm="syz.1.3768" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.629410][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x2 [ 144.637004][ T29] audit: type=1400 audit(144.593:3995): avc: denied { open } for pid=13043 comm="syz.1.3768" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.719161][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.726929][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.734738][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.742493][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.750327][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.757968][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.765687][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.773394][ T10] hid-generic 0000:3000000:0000.000B: unknown main item tag 0x0 [ 144.795799][ T10] hid-generic 0000:3000000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 144.888546][ T29] audit: type=1400 audit(144.853:3996): avc: denied { map } for pid=13067 comm="syz.0.3778" path="socket:[40345]" dev="sockfs" ino=40345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.911430][ T29] audit: type=1400 audit(144.853:3997): avc: denied { read } for pid=13067 comm="syz.0.3778" path="socket:[40345]" dev="sockfs" ino=40345 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 144.934381][ T29] audit: type=1326 audit(144.853:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.0.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbbc8eba9 code=0x7ffc0000 [ 144.957433][ T29] audit: type=1326 audit(144.853:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.0.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbbc8eba9 code=0x7ffc0000 [ 144.980584][ T29] audit: type=1326 audit(144.853:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.0.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f0fbbc8eba9 code=0x7ffc0000 [ 145.003826][ T29] audit: type=1326 audit(144.853:4001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.0.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbbc8eba9 code=0x7ffc0000 [ 145.027019][ T29] audit: type=1326 audit(144.853:4002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13067 comm="syz.0.3778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0fbbc8eba9 code=0x7ffc0000 [ 145.099069][T13076] tipc: Enabled bearer , priority 0 [ 145.106330][T13075] tipc: Resetting bearer [ 145.119607][T13075] tipc: Disabling bearer [ 145.631168][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.640653][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.643549][T13081] loop9: detected capacity change from 0 to 7 [ 145.658232][T13081] buffer_io_error: 19 callbacks suppressed [ 145.658247][T13081] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.673915][T13081] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.676111][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.681870][T13081] loop9: unable to read partition table [ 145.696681][T13081] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 145.696681][T13081] ) failed (rc=-5) [ 145.720210][T13086] tipc: Enabled bearer , priority 0 [ 145.731254][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.740275][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.749389][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.758760][T13080] tipc: Resetting bearer [ 145.766611][T13080] tipc: Disabling bearer [ 145.794337][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.803391][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 145.855157][T13102] syz_tun: entered allmulticast mode [ 145.932572][T13102] dvmrp8: entered allmulticast mode [ 145.953747][T13101] syz_tun: left allmulticast mode [ 146.217516][T13141] veth0_vlan: entered allmulticast mode [ 146.233315][T13141] veth0_vlan: left promiscuous mode [ 146.240980][T13141] veth0_vlan: entered promiscuous mode [ 146.337401][T13151] serio: Serial port ptm1 [ 146.416694][T13162] pim6reg1: entered promiscuous mode [ 146.422053][T13162] pim6reg1: entered allmulticast mode [ 146.867555][T13189] loop1: detected capacity change from 0 to 164 [ 146.898022][T13189] Unable to read rock-ridge attributes [ 146.905606][T13189] Unable to read rock-ridge attributes [ 146.990534][T13189] veth0_to_team: entered promiscuous mode [ 147.043958][T13172] loop2: detected capacity change from 0 to 1024 [ 147.050952][T13172] EXT4-fs: Ignoring removed orlov option [ 147.170254][T13201] loop2: detected capacity change from 0 to 512 [ 147.177457][T13201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.188671][T13201] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 147.197378][T13201] EXT4-fs mount: 54 callbacks suppressed [ 147.197396][T13201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.230824][T11939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.393100][T13209] loop2: detected capacity change from 0 to 1764 [ 147.401791][T13209] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 147.543729][T13229] loop1: detected capacity change from 0 to 512 [ 147.556581][T13229] EXT4-fs: Ignoring removed orlov option [ 147.574374][T13229] ext4: Unknown parameter 'fsname' [ 147.650569][T13233] netlink: 'syz.3.3847': attribute type 4 has an invalid length. [ 147.706457][T13244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.725870][T13244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.911176][T13265] netlink: 'syz.0.3859': attribute type 10 has an invalid length. [ 147.920031][T13265] dummy0: entered promiscuous mode [ 147.931595][T13265] bond0: (slave dummy0): Releasing backup interface [ 147.953191][T13265] bridge0: port 3(dummy0) entered blocking state [ 147.960373][T13265] bridge0: port 3(dummy0) entered disabled state [ 147.969577][T13265] dummy0: entered allmulticast mode [ 148.251125][T13287] pim6reg1: entered promiscuous mode [ 148.256523][T13287] pim6reg1: entered allmulticast mode [ 148.347694][ T10] IPVS: starting estimator thread 0... [ 148.423476][T13308] netlink: 'syz.3.3875': attribute type 10 has an invalid length. [ 148.438657][T13301] IPVS: using max 4416 ests per chain, 220800 per kthread [ 148.450431][ T10] hid-generic 0000:0000:0000.000C: reserved main item tag 0xd [ 148.459255][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 148.627586][T13329] __nla_validate_parse: 5 callbacks suppressed [ 148.627603][T13329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 148.642974][T13329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.650377][T13329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.658838][T13329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.666349][T13329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.676600][T13329] batman_adv: batadv0: Removing interface: netdevsim1 [ 148.813714][T13344] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3891'. [ 148.822869][T13344] netem: unknown loss type 0 [ 148.827485][T13344] netem: change failed [ 148.883174][T13352] syz_tun: entered allmulticast mode [ 148.894078][T13352] syz_tun: left allmulticast mode [ 148.943061][T13363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3900'. [ 149.095156][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3908'. [ 149.137846][T13391] loop2: detected capacity change from 0 to 128 [ 149.166140][T13389] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 149.173740][T13389] vhci_hcd: invalid port number 96 [ 149.179085][T13389] vhci_hcd: default hub control req: 0000 vfffa i0060 l0 [ 149.623223][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 149.623254][ T29] audit: type=1400 audit(149.593:4424): avc: denied { write } for pid=13408 comm="syz.3.3920" path="socket:[40881]" dev="sockfs" ino=40881 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 149.762508][T13411] syzkaller0: entered promiscuous mode [ 149.768073][T13411] syzkaller0: entered allmulticast mode [ 149.892940][T13413] netlink: 'syz.3.3922': attribute type 13 has an invalid length. [ 149.920105][T13413] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.927301][T13413] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.961555][T13413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.971597][T13413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.996208][T13415] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 150.040603][ T3377] syz2: Port: 1 Link DOWN [ 150.042268][ T9813] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.053933][ T9813] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.068560][ T9813] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.077455][ T9813] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.100134][ T9813] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.109155][ T9813] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.146710][ T29] audit: type=1326 audit(150.113:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 150.169907][ T29] audit: type=1326 audit(150.113:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 150.173784][ T9813] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.201944][ T9813] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.215575][ T29] audit: type=1326 audit(150.183:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 150.238640][ T29] audit: type=1326 audit(150.183:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f644263ebe3 code=0x7ffc0000 [ 150.248869][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'. [ 150.295514][T13426] syzkaller0: entered promiscuous mode [ 150.301221][T13426] syzkaller0: entered allmulticast mode [ 150.307144][ T29] audit: type=1326 audit(150.263:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f644263d65f code=0x7ffc0000 [ 150.334434][T13427] hsr_slave_0: left promiscuous mode [ 150.344790][ T29] audit: type=1326 audit(150.313:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f644263ec37 code=0x7ffc0000 [ 150.368497][ T29] audit: type=1326 audit(150.333:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f644263d510 code=0x7ffc0000 [ 150.368936][T13427] hsr_slave_1: left promiscuous mode [ 150.391429][ T29] audit: type=1326 audit(150.333:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f644263e7ab code=0x7ffc0000 [ 150.391521][T13423] loop1: detected capacity change from 0 to 8192 [ 150.392580][ T29] audit: type=1326 audit(150.363:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13422 comm="syz.1.3927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f644263d80a code=0x7ffc0000 [ 150.527671][T13441] ref_ctr increment failed for inode: 0x160 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811b1585c0 [ 150.539921][T13441] ref_ctr increment failed for inode: 0x160 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811b1585c0 [ 150.552062][T13440] uprobe: syz.6.3935:13440 failed to unregister, leaking uprobe [ 150.625038][T13452] futex_wake_op: syz.1.3938 tries to shift op by -1; fix this program [ 150.638835][T13440] uprobe: syz.6.3935:13440 failed to unregister, leaking uprobe [ 150.881329][T13477] loop1: detected capacity change from 0 to 512 [ 150.900587][T13477] EXT4-fs (loop1): too many log groups per flexible block group [ 150.908353][T13477] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 150.915608][T13477] EXT4-fs (loop1): mount failed [ 150.956045][T13485] loop1: detected capacity change from 0 to 256 [ 150.966825][T13485] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 150.975655][T13485] FAT-fs (loop1): Filesystem has been set read-only [ 151.043353][T13493] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3949'. [ 151.055563][T13493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.065370][T13493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.076416][T13493] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 151.090944][T13493] bond0 (unregistering): Released all slaves [ 151.255778][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3952'. [ 151.274962][T13500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.450483][T13507] SELinux: failed to load policy [ 152.611236][T13556] tipc: New replicast peer: 255.255.255.255 [ 152.617357][T13556] tipc: Enabled bearer , priority 10 [ 152.767735][T13562] loop2: detected capacity change from 0 to 1024 [ 152.800447][T13562] EXT4-fs: Invalid want_extra_isize 127 [ 152.952872][T13574] vhci_hcd: default hub control req: 4009 v0f00 i0001 l0 [ 153.102313][T13582] batadv1: entered promiscuous mode [ 153.186146][T13585] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 153.196711][ T36] IPVS: starting estimator thread 0... [ 153.278942][T13592] SELinux: failed to load policy [ 153.288590][T13588] IPVS: using max 2832 ests per chain, 141600 per kthread [ 153.319998][T13584] team0: Failed to send options change via netlink (err -105) [ 153.327593][T13584] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 153.337193][T13584] team0: Port device netdevsim1 removed [ 153.447467][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3995'. [ 153.542642][T13611] vlan2: entered allmulticast mode [ 153.728819][ T3411] tipc: Node number set to 3216113244 [ 153.828747][T13632] tipc: Cannot configure node identity twice [ 153.842676][T13634] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 153.851076][T13634] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 153.941807][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4007'. [ 154.798092][T13659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4016'. [ 155.565169][T13681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4023'. [ 155.603098][T13683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4024'. [ 155.613128][T13681] vlan2: entered promiscuous mode [ 155.618202][T13681] syz_tun: entered promiscuous mode [ 155.632378][T13683] team0 (unregistering): Port device team_slave_0 removed [ 155.646293][T13683] team0 (unregistering): Port device team_slave_1 removed [ 156.041463][ T29] kauditd_printk_skb: 1016 callbacks suppressed [ 156.041479][ T29] audit: type=1400 audit(156.013:5450): avc: denied { ioctl } for pid=13699 comm="syz.1.4032" path="socket:[42572]" dev="sockfs" ino=42572 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.075761][T13702] loop2: detected capacity change from 0 to 512 [ 156.342510][T13717] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 156.358539][ T29] audit: type=1326 audit(412.298:5451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.381540][ T29] audit: type=1326 audit(412.298:5452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.404531][ T29] audit: type=1326 audit(412.298:5453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.427377][ T29] audit: type=1326 audit(412.298:5454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.450266][ T29] audit: type=1326 audit(412.308:5455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.473224][ T29] audit: type=1326 audit(412.308:5456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.496173][ T29] audit: type=1326 audit(412.308:5457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.519559][ T29] audit: type=1326 audit(412.308:5458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.542498][ T29] audit: type=1326 audit(412.308:5459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13715 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f31ffc0eba9 code=0x7ffc0000 [ 156.791901][T13722] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.128767][T13709] Set syz1 is full, maxelem 65536 reached [ 157.185400][T13734] loop1: detected capacity change from 0 to 512 [ 157.223597][T13734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.294353][T13734] EXT4-fs (loop1): 1 truncate cleaned up [ 157.324881][T13734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.404726][T13751] loop2: detected capacity change from 0 to 128 [ 157.432370][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4048'. [ 157.521722][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.730586][T13780] loop2: detected capacity change from 0 to 512 [ 157.752694][T13782] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 157.759817][T13780] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 157.767721][T13780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 157.786620][T13780] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 157.807042][T13780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 157.844118][T13780] ip6gre1: entered allmulticast mode [ 157.884674][T11939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.967813][T13791] loop2: detected capacity change from 0 to 512 [ 158.585789][T13828] netlink: 'syz.6.4080': attribute type 16 has an invalid length. [ 158.593780][T13828] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4080'. [ 159.411857][T13870] random: crng reseeded on system resumption [ 159.579076][T13883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4100'. [ 159.638005][T13888] tipc: Failed to remove unknown binding: 66,1,1/0:3161644878/3161644880 [ 160.002141][T13907] serio: Serial port ptm1 [ 160.357503][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 160.366871][T13923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4115'. [ 160.449495][T13924] syzkaller1: entered promiscuous mode [ 160.454990][T13924] syzkaller1: entered allmulticast mode [ 160.785274][T13913] Set syz1 is full, maxelem 65536 reached [ 160.839068][T13934] uprobe: syz.0.4121:13934 failed to unregister, leaking uprobe [ 160.846769][T13934] uprobe: syz.0.4121:13934 failed to unregister, leaking uprobe [ 160.972915][T13945] loop9: detected capacity change from 0 to 7 [ 160.979579][T13945] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.987580][T13945] Buffer I/O error on dev loop9, logical block 0, async page read [ 160.995482][T13945] loop9: unable to read partition table [ 161.004448][T13945] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.004448][T13945] ) failed (rc=-5) [ 161.149959][T13953] vhci_hcd: default hub control req: 8001 v0000 i0003 l14 [ 161.470670][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 161.470684][ T29] audit: type=1326 audit(417.448:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.509757][ T29] audit: type=1326 audit(417.448:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.532671][ T29] audit: type=1326 audit(417.448:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.555522][ T29] audit: type=1326 audit(417.448:5895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.578480][ T29] audit: type=1326 audit(417.448:5896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.601468][ T29] audit: type=1326 audit(417.448:5897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.624416][ T29] audit: type=1326 audit(417.448:5898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.648085][ T29] audit: type=1326 audit(417.448:5899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.671146][ T29] audit: type=1326 audit(417.448:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.694194][ T29] audit: type=1326 audit(417.448:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13966 comm="syz.1.4135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f644263eba9 code=0x7ffc0000 [ 161.805199][T13964] syzkaller1: entered promiscuous mode [ 161.810796][T13964] syzkaller1: entered allmulticast mode [ 162.056023][T13989] netlink: 'syz.3.4145': attribute type 4 has an invalid length. [ 162.088970][T13989] netlink: 'syz.3.4145': attribute type 4 has an invalid length. [ 162.373790][T14006] loop2: detected capacity change from 0 to 512 [ 162.430954][T14006] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 162.477584][T14006] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 162.572844][T14006] IPv6: Can't replace route, no match found [ 162.675198][T11939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.914517][T14029] loop2: detected capacity change from 0 to 512 [ 163.046776][T14033] loop1: detected capacity change from 0 to 512 [ 163.129752][T14033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.211676][ T36] hid_parser_main: 26 callbacks suppressed [ 163.211706][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.225031][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.232523][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.239952][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.247336][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.254744][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.262154][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.269569][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.276952][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.284398][ T36] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.297744][ T36] hid-generic 0000:0000:0000.000D: reserved main item tag 0xd [ 163.306242][ T36] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 163.424309][T14020] Set syz1 is full, maxelem 65536 reached [ 163.431889][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.602378][T14064] loop2: detected capacity change from 0 to 1024 [ 163.616167][T14064] loop2: detected capacity change from 0 to 512 [ 163.624138][T14064] EXT4-fs: Ignoring removed orlov option [ 163.633793][T14064] EXT4-fs: Mount option(s) incompatible with ext2 [ 163.804655][T14079] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.851236][T14079] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.912325][T14079] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.917282][T14088] loop1: detected capacity change from 0 to 1024 [ 163.971793][T14079] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.986016][T14088] EXT4-fs: Ignoring removed bh option [ 164.024271][T14088] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 164.055039][ T9819] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.081893][T14088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.085658][ T9819] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.145073][T14088] loop9: detected capacity change from 0 to 7 [ 164.151255][ T9819] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.151300][ T9819] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.168651][T14088] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.176629][T14088] Buffer I/O error on dev loop9, logical block 0, async page read [ 164.184558][T14088] loop9: unable to read partition table [ 164.198015][T14088] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 164.198015][T14088] ) failed (rc=-5) [ 164.265340][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.761852][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4196'. [ 165.048835][T14195] SELinux: failed to load policy [ 165.108251][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4205'. [ 165.117416][T14207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.124868][T14207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.134188][T14207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.141623][T14207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.183895][T14211] syzkaller0: entered promiscuous mode [ 165.189528][T14211] syzkaller0: entered allmulticast mode [ 165.199007][T14215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4225'. [ 165.796698][T14239] tipc: Started in network mode [ 165.801765][T14239] tipc: Node identity ac141413, cluster identity 4711 [ 165.809180][T14239] tipc: New replicast peer: 10.1.1.2 [ 165.814511][T14239] tipc: Enabled bearer , priority 10 [ 166.289085][T14256] random: crng reseeded on system resumption [ 166.344383][T14260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4236'. [ 166.353489][T14260] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4236'. [ 166.362525][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4236'. [ 166.366263][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4231'. [ 166.393747][T14264] loop1: detected capacity change from 0 to 1024 [ 166.422172][T14264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.471781][T14264] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.4237: Allocating blocks 449-513 which overlap fs metadata [ 166.494327][T14264] EXT4-fs (loop1): pa ffff8881072377e0: logic 48, phys. 177, len 21 [ 166.496989][T14271] SELinux: failed to load policy [ 166.502479][T14264] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 166.543062][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.546774][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4241'. [ 166.562839][T14274] ref_ctr increment failed for inode: 0x1257 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811b158b80 [ 166.575517][T14274] ref_ctr increment failed for inode: 0x1257 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811b158b80 [ 166.590192][T14272] uprobe: syz.3.4240:14272 failed to unregister, leaking uprobe [ 166.602274][T14275] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 166.602274][T14275] program syz.6.4241 not setting count and/or reply_len properly [ 166.638521][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 166.638536][ T29] audit: type=1400 audit(422.608:6372): avc: denied { watch } for pid=14278 comm="syz.6.4244" path="/109/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.652420][T14283] loop1: detected capacity change from 0 to 1024 [ 166.677661][T14283] EXT4-fs: Ignoring removed bh option [ 166.684147][ T29] audit: type=1400 audit(422.648:6373): avc: denied { mac_admin } for pid=14278 comm="syz.6.4244" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 166.684226][T14283] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 166.704808][ T29] audit: type=1400 audit(422.648:6374): avc: denied { relabelto } for pid=14278 comm="syz.6.4244" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.740007][ T29] audit: type=1400 audit(422.648:6375): avc: denied { associate } for pid=14278 comm="syz.6.4244" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 166.751550][T14283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.799283][T14272] uprobe: syz.3.4240:14272 failed to unregister, leaking uprobe [ 166.808496][ T9586] tipc: Node number set to 2886997011 [ 166.808579][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.848363][T14294] loop1: detected capacity change from 0 to 1024 [ 166.855860][T14294] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 166.894358][ T29] audit: type=1400 audit(422.868:6376): avc: denied { read } for pid=14295 comm="syz.1.4249" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 166.917247][ T29] audit: type=1400 audit(422.868:6377): avc: denied { open } for pid=14295 comm="syz.1.4249" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 166.940452][ T29] audit: type=1400 audit(422.868:6378): avc: denied { ioctl } for pid=14295 comm="syz.1.4249" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 166.981231][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4250'. [ 167.086916][T14302] pim6reg1: entered promiscuous mode [ 167.092432][T14302] pim6reg1: entered allmulticast mode [ 167.168320][T14307] loop2: detected capacity change from 0 to 1024 [ 167.210561][T14313] loop2: detected capacity change from 0 to 1024 [ 167.217644][T14313] EXT4-fs: Ignoring removed nobh option [ 167.223479][T14313] EXT4-fs: inline encryption not supported [ 167.234146][T14313] loop2: detected capacity change from 0 to 512 [ 167.241279][T14313] EXT4-fs: Ignoring removed orlov option [ 167.247512][T14313] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.256779][T14313] EXT4-fs (loop2): write access unavailable, skipping orphan cleanup [ 167.266753][T14313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.280734][T14313] EXT4-fs: Ignoring removed orlov option [ 167.296464][T11939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.313492][T14321] netlink: 'syz.6.4259': attribute type 10 has an invalid length. [ 167.315835][T14323] netlink: 'syz.2.4260': attribute type 4 has an invalid length. [ 167.321525][T14321] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4259'. [ 167.342060][T14321] dummy0: entered promiscuous mode [ 167.350904][T14323] netlink: 'syz.2.4260': attribute type 4 has an invalid length. [ 167.360980][T14321] bond0: (slave dummy0): Releasing backup interface [ 167.388222][T14321] bridge0: port 1(dummy0) entered blocking state [ 167.395161][T14321] bridge0: port 1(dummy0) entered disabled state [ 167.406528][T14321] dummy0: entered allmulticast mode [ 167.471956][T14330] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 167.480245][T14330] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 168.107752][T14346] loop2: detected capacity change from 0 to 2048 [ 168.370681][ T29] audit: type=1400 audit(424.348:6379): avc: denied { create } for pid=14360 comm="syz.6.4277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 168.534233][ T29] audit: type=1326 audit(424.498:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14360 comm="syz.6.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 168.557237][ T29] audit: type=1326 audit(424.498:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14360 comm="syz.6.4277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 168.972293][T14376] block device autoloading is deprecated and will be removed. [ 168.998968][T14381] futex_wake_op: syz.6.4285 tries to shift op by -1; fix this program [ 169.318139][T14393] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 169.318139][T14393] program syz.1.4288 not setting count and/or reply_len properly [ 169.792624][T14404] __nla_validate_parse: 4 callbacks suppressed [ 169.792689][T14404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 169.976125][T14406] loop2: detected capacity change from 0 to 128 [ 170.428307][T14433] loop2: detected capacity change from 0 to 512 [ 170.457610][T14433] EXT4-fs: Ignoring removed oldalloc option [ 171.202040][T14469] netlink: 'syz.1.4317': attribute type 10 has an invalid length. [ 171.213658][T14469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4317'. [ 171.236888][T14469] dummy0: entered promiscuous mode [ 171.286678][T14469] bridge0: port 3(dummy0) entered blocking state [ 171.294397][T14469] bridge0: port 3(dummy0) entered disabled state [ 171.311277][T14469] dummy0: entered allmulticast mode [ 171.317628][T14476] IPv6: Can't replace route, no match found [ 171.350976][T14475] loop2: detected capacity change from 0 to 128 [ 171.460197][T14483] loop2: detected capacity change from 0 to 512 [ 171.516850][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4326'. [ 171.542144][T14484] syzkaller0: entered promiscuous mode [ 171.547644][T14484] syzkaller0: entered allmulticast mode [ 171.598215][T14507] loop1: detected capacity change from 0 to 1024 [ 171.624860][T14507] EXT4-fs: Ignoring removed oldalloc option [ 171.630982][T14507] EXT4-fs: Ignoring removed bh option [ 171.641579][T14507] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.692340][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.739885][T14514] : renamed from bond0 (while UP) [ 171.760850][ T29] kauditd_printk_skb: 6191 callbacks suppressed [ 171.760864][ T29] audit: type=1326 audit(427.738:12573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.812052][T14526] loop6: detected capacity change from 0 to 128 [ 171.819837][ T29] audit: type=1326 audit(427.768:12574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.842938][ T29] audit: type=1326 audit(427.768:12575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.866227][ T29] audit: type=1326 audit(427.768:12576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.889388][ T29] audit: type=1326 audit(427.778:12577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.912384][ T29] audit: type=1326 audit(427.778:12578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.935521][ T29] audit: type=1326 audit(427.778:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.958564][ T29] audit: type=1326 audit(427.778:12580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 171.981584][ T29] audit: type=1326 audit(427.778:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 172.004549][ T29] audit: type=1326 audit(427.778:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.6.4335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa945aeeba9 code=0x7ffc0000 [ 172.057493][T14521] netlink: 'syz.3.4333': attribute type 10 has an invalid length. [ 172.066082][T14521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4333'. [ 172.077072][T14521] dummy0: entered promiscuous mode [ 172.107159][T14521] bond0: (slave dummy0): Releasing backup interface [ 172.147009][T14521] bridge0: port 3(dummy0) entered blocking state [ 172.154093][T14521] bridge0: port 3(dummy0) entered disabled state [ 172.163579][T14521] dummy0: entered allmulticast mode [ 172.285911][T14553] serio: Serial port ptm0 [ 172.359815][T14559] loop1: detected capacity change from 0 to 128 [ 172.378777][T14559] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 172.387228][T14559] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 172.395147][T14559] FAT-fs (loop1): Filesystem has been set read-only [ 172.402641][T14559] syz.1.4347: attempt to access beyond end of device [ 172.402641][T14559] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 172.416537][T14559] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 172.424395][T14559] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 172.432475][T14559] syz.1.4347: attempt to access beyond end of device [ 172.432475][T14559] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.446659][T14559] syz.1.4347: attempt to access beyond end of device [ 172.446659][T14559] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.460522][T14559] syz.1.4347: attempt to access beyond end of device [ 172.460522][T14559] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.474780][T14559] syz.1.4347: attempt to access beyond end of device [ 172.474780][T14559] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.488410][T14559] syz.1.4347: attempt to access beyond end of device [ 172.488410][T14559] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.503157][T14559] syz.1.4347: attempt to access beyond end of device [ 172.503157][T14559] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 172.566521][T14569] loop1: detected capacity change from 0 to 512 [ 172.573740][T14569] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 172.584272][T14569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 172.592903][T14569] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.4350: corrupted in-inode xattr: e_value size too large [ 172.608134][T14569] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4350: couldn't read orphan inode 15 (err -117) [ 172.620906][T14569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.892349][T14580] loop2: detected capacity change from 0 to 512 [ 172.945878][T14583] syz_tun: entered allmulticast mode [ 172.952798][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4354'. [ 172.981421][T14583] syz_tun (unregistering): left allmulticast mode [ 173.168668][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4357'. [ 173.423328][T14598] IPv6: Can't replace route, no match found [ 173.480978][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.496535][T14600] loop6: detected capacity change from 0 to 512 [ 173.509531][T14600] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 173.532834][T14600] EXT4-fs (loop6): invalid journal inode [ 173.538677][T14600] EXT4-fs (loop6): can't get journal size [ 173.545002][T14603] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.559371][T14600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 173.573517][T14603] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 173.590436][T14600] System zones: 1-12, 13-13 [ 173.596386][T14600] EXT4-fs (loop6): 1 truncate cleaned up [ 173.610269][T14600] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.831496][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.899211][T14620] loop6: detected capacity change from 0 to 2048 [ 173.927197][T14620] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.982868][T12290] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 173.999987][T14630] loop9: detected capacity change from 0 to 7 [ 174.006223][T14630] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.035591][T14630] Buffer I/O error on dev loop9, logical block 0, async page read [ 174.043620][T14630] loop9: unable to read partition table [ 174.068723][T12290] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 174.084912][T14630] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 174.084912][T14630] ) failed (rc=-5) [ 174.115069][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.156945][T14644] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4376'. [ 174.185727][T14641] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4372'. [ 174.201293][T14641] loop6: detected capacity change from 0 to 1024 [ 174.208109][T14641] EXT4-fs: Ignoring removed bh option [ 174.215102][T14641] EXT4-fs: inline encryption not supported [ 174.222485][T14641] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.283987][T14641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 174.293692][T14641] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.4372: lblock 2 mapped to illegal pblock 2 (length 1) [ 174.309848][T14641] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.4372: lblock 0 mapped to illegal pblock 48 (length 1) [ 174.325246][T14641] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.4372: Failed to acquire dquot type 0 [ 174.338409][T14641] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 174.348232][T14641] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.4372: mark_inode_dirty error [ 174.379629][T14641] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 174.391206][T14641] EXT4-fs (loop6): 1 orphan inode deleted [ 174.397269][T14641] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.467263][ T58] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 174.482744][ T58] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 174.495183][T14641] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 174.516515][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.780317][T14689] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 174.851713][T14688] loop2: detected capacity change from 0 to 2048 [ 174.927945][T14700] syzkaller0: entered promiscuous mode [ 174.933573][T14700] syzkaller0: entered allmulticast mode [ 175.090170][T14719] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 175.108980][T14721] siw: device registration error -23 [ 176.294120][T14743] loop1: detected capacity change from 0 to 1024 [ 176.312902][T14743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.350336][T11238] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.535209][T14766] loop6: detected capacity change from 0 to 1024 [ 176.541899][T14766] EXT4-fs: Ignoring removed bh option [ 176.547260][T14766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.555758][T14766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.742904][T14774] ================================================================== [ 176.751100][T14774] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 176.759176][T14774] [ 176.761491][T14774] write to 0xffff88815e72c228 of 8 bytes by task 14766 on cpu 0: [ 176.769197][T14774] filemap_splice_read+0x4f4/0x740 [ 176.774316][T14774] ext4_file_splice_read+0x8f/0xb0 [ 176.779440][T14774] splice_direct_to_actor+0x26f/0x680 [ 176.784831][T14774] do_splice_direct+0xda/0x150 [ 176.789588][T14774] do_sendfile+0x380/0x650 [ 176.794000][T14774] __x64_sys_sendfile64+0x105/0x150 [ 176.799212][T14774] x64_sys_call+0x2bb0/0x2ff0 [ 176.803889][T14774] do_syscall_64+0xd2/0x200 [ 176.808401][T14774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.814282][T14774] [ 176.816611][T14774] write to 0xffff88815e72c228 of 8 bytes by task 14774 on cpu 1: [ 176.824331][T14774] filemap_splice_read+0x4f4/0x740 [ 176.829442][T14774] ext4_file_splice_read+0x8f/0xb0 [ 176.834554][T14774] splice_direct_to_actor+0x26f/0x680 [ 176.839918][T14774] do_splice_direct+0xda/0x150 [ 176.844670][T14774] do_sendfile+0x380/0x650 [ 176.849077][T14774] __x64_sys_sendfile64+0x105/0x150 [ 176.854268][T14774] x64_sys_call+0x2bb0/0x2ff0 [ 176.858932][T14774] do_syscall_64+0xd2/0x200 [ 176.863435][T14774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.869319][T14774] [ 176.871711][T14774] value changed: 0x0000000000004b00 -> 0x0000000000004b1e [ 176.878797][T14774] [ 176.881102][T14774] Reported by Kernel Concurrency Sanitizer on: [ 176.887238][T14774] CPU: 1 UID: 0 PID: 14774 Comm: syz.6.4417 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 176.898596][T14774] Tainted: [W]=WARN [ 176.902380][T14774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.912479][T14774] ================================================================== [ 177.440484][T12290] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.