last executing test programs: 6m17.926406665s ago: executing program 4 (id=600): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r1, 0x0, 0x2, 0x0) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="a3", 0x1}], 0x1, 0x8) write$binfmt_elf64(r3, &(0x7f0000001480)=ANY=[@ANYBLOB, @ANYRES64=r0, @ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="9479fb955b704002d88feaffd5e2ab5cc7e739cffafae0cb76aeacf663f536c3a8508e24c6b772fe240d0a06ee240f452a9aa6c0b80da63d09bb553541d6c59e4bac24fc1bfb334d4f682d9856ecb83fb5e62d31a9f1bea429565399f275ed49104318333bd2d3a912b9a918f5357f892a9f3314bf0fab37c3ad76f3e2fb928990ade54ff3a7f66cca77356f123e9b4b6cf0cfc8b066fcd4eb383a387694e27f1740b586797e16e21ab0ded1e5bf30e017cb5bb846a6902be619b000e7364fbcf5b128fc1ec6157fbd883a", @ANYRES8=r4, @ANYRESOCT=r0, @ANYBLOB], 0x18c6) 6m17.3445961s ago: executing program 4 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[], 0x0) 6m17.311502041s ago: executing program 4 (id=611): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x700000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc"], 0x8c}}, 0x0) 6m17.144972859s ago: executing program 4 (id=614): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 6m16.138299242s ago: executing program 4 (id=628): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000980)='kfree_skb\x00', r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 6m15.473516611s ago: executing program 4 (id=641): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 6m15.461920191s ago: executing program 32 (id=641): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 5m51.799998173s ago: executing program 1 (id=1041): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r3, &(0x7f0000000240)='./file0\x00', 0x4000cdd) connect(r2, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x4, @empty, 'vlan0\x00'}}, 0x80) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x9, 0x180) 5m51.602390252s ago: executing program 1 (id=1043): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x11) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0x0, 0x3, 0x3ff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 5m51.525674055s ago: executing program 1 (id=1045): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ_FIXED={0x4, 0x11, 0x4000, @fd_index=0x8, 0x10001, 0x0, 0x9, 0x8, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x13f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5m49.831187928s ago: executing program 1 (id=1057): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x1, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 5m49.830985609s ago: executing program 5 (id=1058): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 5m49.516759482s ago: executing program 5 (id=1060): r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100)={[{@errors_remount}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@dioread_nolock}]}, 0x1, 0x573, &(0x7f0000000ec0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 5m48.943812477s ago: executing program 1 (id=1061): prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) poll(0x0, 0x0, 0x7f) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 5m48.490055597s ago: executing program 5 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x14, 0x15, 0x301, 0x0, 0x25dfdbff, {0x1}}, 0x14}}, 0x4000000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2000}, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c817}, 0x0) 5m48.339403513s ago: executing program 1 (id=1066): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 5m48.276787886s ago: executing program 33 (id=1066): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc30003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 5m48.155324741s ago: executing program 5 (id=1071): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x1, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfea7) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 5m47.388762964s ago: executing program 5 (id=1073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40600, 0x0) read$ptp(r1, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xffffffffffffffff, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@empty, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 5m45.973449035s ago: executing program 5 (id=1081): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m45.973237485s ago: executing program 34 (id=1081): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xfffffffe, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m30.716992264s ago: executing program 2 (id=1291): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) r3 = epoll_create(0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000}) 5m30.675851046s ago: executing program 2 (id=1292): open_by_handle_at(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB='\b\x00'], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x3d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x2}) 5m30.646166737s ago: executing program 2 (id=1293): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{}, &(0x7f0000000400), 0x0}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xffff}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 5m30.607841079s ago: executing program 2 (id=1294): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x800000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 5m30.541529642s ago: executing program 2 (id=1295): unshare(0x2a020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5m26.475993447s ago: executing program 2 (id=1340): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}], 0x2, 0x24004c41) 5m26.475785417s ago: executing program 35 (id=1340): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000640)=ANY=[], 0xf0}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="1d", 0x1}], 0x1}}], 0x2, 0x24004c41) 1m33.540306199s ago: executing program 3 (id=4710): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x8, &(0x7f0000000340)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000100)) 1m32.265424724s ago: executing program 3 (id=4723): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1200410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000a40)="$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") clock_getres(0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) pidfd_send_signal(r0, 0x3, &(0x7f0000000180)={0x21, 0x8cd, 0x1000}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000007c0)="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", 0x206}, {0x0}, {&(0x7f0000000640)="ae4b936337cc671f6ac7bd2d2638ddb978899f7393a8dc64e9a2b2e3bd46961e08af3fe9e1a70c58251a1a2c975e3da77137cd04256666d350b67a5eb67d2eb77bad26b0fe1ccb88a90d79b71a9d8f53ad1c18582eed7f9c7ec513e107ae278a2cb40605f1b6dd37413943956d128a1d13cce03f1a4bbc061f42bfd41f0323d8d9d9f305ebba2cdbbfad6d5361f8eefffad5a0e2625fe015a823208948ea405006626a7fac1a8ee204573b2eb5", 0xad}, {&(0x7f0000000700)="cc5067d4a563082abaa503c4c989c65538b918ea30fdc1774869833118237e11ebe27431adedb94bf90e6583a1c7802b90873e45e243c6ace79f96132cc9c324f5284cb7857fc5a058c992bcd0939389f65d4343c41567d6843eea23227a662523b5d7c4323e780e8d6c118ebe4fefea5570d2f6190470b113c50a53d374aed1bbc5", 0x82}], 0x4) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0x0, 0x1000) 1m32.185552248s ago: executing program 3 (id=4724): writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m30.656672074s ago: executing program 3 (id=4742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085000000330000008500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r2, 0x10000}, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) 1m30.622747155s ago: executing program 3 (id=4744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9664e3e8e0235d3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x14, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1m29.509568123s ago: executing program 3 (id=4750): bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) 1m29.425536057s ago: executing program 36 (id=4750): bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_clone3(0x0, 0x0) 1.983727894s ago: executing program 0 (id=5647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) 1.714532635s ago: executing program 0 (id=5654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) close_range(r0, r2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x66, 0x0, 0x0, 0x132, 0x3}) 1.60985965s ago: executing program 6 (id=5655): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f00000003c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 1.557005032s ago: executing program 0 (id=5658): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) pipe2(0x0, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 1.505534824s ago: executing program 6 (id=5661): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="09030000000000fdff072000adce04000280"], 0x18}, 0x1, 0xf000000}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) sendfile(r4, r2, 0x0, 0x10000a007) 1.421485508s ago: executing program 8 (id=5663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 1.400755379s ago: executing program 8 (id=5664): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4821}, 0x20040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64], 0x18}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b8050"], 0x174}}, 0x0) 1.269561655s ago: executing program 6 (id=5665): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.14134011s ago: executing program 6 (id=5666): r0 = epoll_create1(0x80000) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = timerfd_create(0x0, 0x0) readv(r2, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') acct(&(0x7f0000000080)='./file0\x00') getdents64(r3, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) 882.067171ms ago: executing program 8 (id=5668): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 760.062147ms ago: executing program 8 (id=5669): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000000000000100000094"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 719.518968ms ago: executing program 9 (id=5671): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) pidfd_getfd(r1, r2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket(0x2, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 700.428659ms ago: executing program 0 (id=5672): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1000, 0x5c8, 0x80000003, 0x8aa3}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 693.642479ms ago: executing program 9 (id=5673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r2 = dup(r1) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x40081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x10400, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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") open(0x0, 0x800, 0x50) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0200000001000001000000000400000000000000000020000000000000"], 0x4, 0x0) getrlimit(0x5, 0x0) clock_settime(0x4, 0x0) socket$packet(0x11, 0x2, 0x300) io_setup(0x1, &(0x7f0000000b80)) 566.284425ms ago: executing program 0 (id=5675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80)) r1 = socket(0x400000000010, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 487.007429ms ago: executing program 0 (id=5676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="08007715e050e9ce", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c00000000"], 0x40}, 0x20000000) 485.730428ms ago: executing program 8 (id=5677): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) get_robust_list(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000721000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="7400000009060102000000000000ffff030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 443.572391ms ago: executing program 9 (id=5678): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000840) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\x83\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x124, &(0x7f0000000300)={0x0, 0x3, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) mq_timedreceive(r2, &(0x7f0000000540)=""/207, 0xcf, 0xffefffffffffffff, 0x0) 425.328341ms ago: executing program 9 (id=5679): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private0, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x4e22, 0x0, @mcast1}}, 0x5c) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000000c0)=0x7, 0x4) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4821}, 0x20040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64], 0x18}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e20000010000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r3}, 0x38) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r0, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b8050"], 0x174}}, 0x0) 325.606126ms ago: executing program 7 (id=5680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x20000, 0x61, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 322.038366ms ago: executing program 6 (id=5681): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000846, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001600)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mkdir(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, 0x0, 0x0) migrate_pages(0x0, 0xfc, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7c, 0x0, 0x0) 321.595386ms ago: executing program 8 (id=5682): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) pipe2(0x0, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 278.963337ms ago: executing program 6 (id=5683): pipe2$9p(0x0, 0x800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa00000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "ae30"}]}], {0x14}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 272.476868ms ago: executing program 9 (id=5684): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) pipe2$9p(&(0x7f00000000c0), 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x4, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x401, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x0, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0xa, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x20000006, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x8}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x3, 0x2c3}, {0x0, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x8, 0x9, 0x39, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0xe57, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x50, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x6, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffdf8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xde}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x7f, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 267.340268ms ago: executing program 7 (id=5685): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x14, r3, 0x607}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") 215.989411ms ago: executing program 7 (id=5686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd21f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x9, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x30000}], 0x1}}], 0x51, 0x0) r5 = accept4$unix(r4, 0x0, 0x0, 0x80000) recvfrom$unix(r5, &(0x7f0000000140)=""/248, 0x40000, 0x0, 0x0, 0x0) 161.813232ms ago: executing program 7 (id=5687): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, 0x0, &(0x7f0000000880)=r1}, 0x20) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r2) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000007c0)=0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_gettime(r3, &(0x7f0000000040)) 160.349612ms ago: executing program 9 (id=5688): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x81, 0x4) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1, 0x16b, &(0x7f0000000600)="$eJzs20GrElEUB/Azab73avPW0WKgTSupVi2LeEE0UBQualVgbTSE3Eyt/BSt+4JBuGrVDZ3QEkWknJHn77fxwB+958rMXO7AfXPzw6A/Gr8fPZ/GaZZF+0Hk8TOL87gSrahMAgC4TH6kFN9TSulkEmdfI6XUdEcAwL5Z/wHg+Gxd/+831BgAsDf2/wBwfF6+ev30YVFcvMjz04hvk7JX9qrPKn/8pLi4k8+dL781Lctea5HfrfL87/xqXPud31ubd+L2rSqfZY+eFSv59ejvf/oAAABwFLr5wtr9fbe7Ka+qP94PrOzf23GjXds0AIAdjD99HrwdDt99rKE4m4+Y1TvobsWXBv6Wgy1acRBtKLYWs0v2f/9yk08loA7Lm77pTgAAAAAAAAAAAAAAgE3+8ahQJyLWRBGdbScLTmqfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8CgAA//9vQEW+") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x4a, &(0x7f00000000c0), 0x1, &(0x7f00000003c0)=""/21, 0x21}, 0x1ff}], 0x73d, 0x40000040, 0x0) 73.278976ms ago: executing program 7 (id=5689): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 7 (id=5690): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000001000/0x4000)=nil) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) kernel console output (not intermixed with test programs): 86 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 336.949941][ T29] audit: type=1326 audit(1763664564.026:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 336.973651][ T29] audit: type=1326 audit(1763664564.036:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18886 comm="syz.0.4632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 337.026450][T18909] netlink: 172 bytes leftover after parsing attributes in process `syz.8.4640'. [ 337.399914][T18923] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4646'. [ 337.606272][T18925] veth18: entered promiscuous mode [ 337.611477][T18925] veth18: entered allmulticast mode [ 337.688116][T18928] loop7: detected capacity change from 0 to 512 [ 337.732420][T18928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.747269][T18928] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.710945][T18949] veth28: entered promiscuous mode [ 338.716176][T18949] veth28: entered allmulticast mode [ 338.754442][T18951] 9pnet_fd: Insufficient options for proto=fd [ 338.819562][T18952] lo speed is unknown, defaulting to 1000 [ 339.238466][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.807138][T18963] veth20: entered promiscuous mode [ 339.812327][T18963] veth20: entered allmulticast mode [ 339.863858][T18959] loop7: detected capacity change from 0 to 8192 [ 339.923803][T18959] vfat: Unknown parameter './file0' [ 340.613547][T18974] lo speed is unknown, defaulting to 1000 [ 341.416746][T18985] netlink: 131740 bytes leftover after parsing attributes in process `syz.8.4668'. [ 341.492517][T18985] netlink: zone id is out of range [ 341.497794][T18985] netlink: zone id is out of range [ 341.580737][T18985] netlink: zone id is out of range [ 341.625360][T18985] netlink: zone id is out of range [ 341.670938][T18985] netlink: del zone limit has 8 unknown bytes [ 342.062351][T19002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4674'. [ 342.078620][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4676'. [ 342.251912][T19017] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4680'. [ 342.423779][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 342.423797][ T29] audit: type=1400 audit(1763664569.526:15943): avc: denied { mount } for pid=19025 comm="syz.0.4683" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 342.458374][ T29] audit: type=1326 audit(1763664569.566:15944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.482288][ T29] audit: type=1326 audit(1763664569.566:15945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.526977][T19032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'. [ 342.536364][T19032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4686'. [ 342.555157][ T29] audit: type=1326 audit(1763664569.616:15946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.579042][ T29] audit: type=1326 audit(1763664569.616:15947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.602966][ T29] audit: type=1326 audit(1763664569.616:15948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.626639][ T29] audit: type=1326 audit(1763664569.616:15949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.650326][ T29] audit: type=1326 audit(1763664569.616:15950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.673988][ T29] audit: type=1326 audit(1763664569.616:15951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.697827][ T29] audit: type=1326 audit(1763664569.616:15952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19027 comm="syz.3.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f598464f749 code=0x7ffc0000 [ 342.775856][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4689'. [ 343.416407][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 344.033389][T19086] netlink: 'syz.0.4705': attribute type 1 has an invalid length. [ 344.087279][T19086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.095590][T19086] bond6: (slave bond7): making interface the new active one [ 344.103496][T19086] bond6: (slave bond7): Enslaving as an active interface with an up link [ 344.148258][T19086] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 344.161490][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4705'. [ 344.171977][T19086] 8021q: adding VLAN 0 to HW filter on device bond6 [ 344.344875][T19105] loop7: detected capacity change from 0 to 512 [ 344.372392][T19105] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.4712: dx entry: limit 0 != root limit 125 [ 344.384363][T19105] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4712: Corrupt directory, running e2fsck is recommended [ 344.397632][T19105] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 344.406073][T19105] EXT4-fs error (device loop7): ext4_iget_extra_inode:5075: inode #15: comm syz.7.4712: corrupted in-inode xattr: invalid ea_ino [ 344.419633][T19105] EXT4-fs (loop7): Remounting filesystem read-only [ 344.426978][T19105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.479325][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.530120][T19118] loop7: detected capacity change from 0 to 512 [ 344.543932][T19121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4718'. [ 344.577807][T19121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4718'. [ 344.577881][T19118] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.676996][T19118] ext4 filesystem being mounted at /287/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.745371][T19118] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #4: comm syz.7.4717: corrupted inode contents [ 344.757638][T19118] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #4: comm syz.7.4717: mark_inode_dirty error [ 344.769556][T19118] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #4: comm syz.7.4717: corrupted inode contents [ 344.781884][T19118] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #4: comm syz.7.4717: mark_inode_dirty error [ 344.793604][T19118] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4717: Failed to acquire dquot type 1 [ 344.820298][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.014216][T19151] futex_wake_op: syz.6.4727 tries to shift op by -1; fix this program [ 346.370741][T19175] loop7: detected capacity change from 0 to 128 [ 346.395572][T19175] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.415148][T19175] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.463850][T14273] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.474753][T19179] veth22: entered promiscuous mode [ 346.479975][T19179] veth22: entered allmulticast mode [ 346.488197][T19171] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.803791][T19195] loop7: detected capacity change from 0 to 1024 [ 346.810765][T19195] EXT4-fs: Ignoring removed bh option [ 346.816817][T19195] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 346.889411][T19195] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.244406][T19201] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 347.268922][T19201] __nla_validate_parse: 2 callbacks suppressed [ 347.268940][T19201] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4746'. [ 347.284575][T19201] 0X: renamed from caif0 [ 347.292416][T19201] 0X: entered allmulticast mode [ 347.297769][T19201] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 347.690970][ T3588] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.728121][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 347.728166][ T29] audit: type=1400 audit(1763664574.836:16077): avc: denied { create } for pid=19207 comm="syz.8.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 347.816645][ T3588] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 347.855769][ T29] audit: type=1400 audit(1763664574.866:16078): avc: denied { bind } for pid=19207 comm="syz.8.4749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 347.876583][ T29] audit: type=1400 audit(1763664574.886:16079): avc: denied { execute } for pid=19205 comm="syz.0.4748" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=76678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 347.903106][ T29] audit: type=1326 audit(1763664574.956:16080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.8.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 347.926944][ T29] audit: type=1326 audit(1763664574.956:16081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.8.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 347.950670][ T29] audit: type=1326 audit(1763664574.956:16082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.8.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 347.974392][ T29] audit: type=1326 audit(1763664574.956:16083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.8.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 347.998422][ T29] audit: type=1326 audit(1763664574.956:16084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.8.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 348.022081][ T29] audit: type=1326 audit(1763664574.956:16085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19213 comm="syz.8.4753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 348.097538][T19221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4754'. [ 348.219401][ T29] audit: type=1400 audit(1763664575.156:16086): avc: denied { mounton } for pid=19215 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 348.299846][T19215] lo speed is unknown, defaulting to 1000 [ 348.490435][T19215] chnl_net:caif_netlink_parms(): no params data found [ 348.542230][T19215] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.549430][T19215] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.557579][T19215] bridge_slave_0: entered allmulticast mode [ 348.564555][T19215] bridge_slave_0: entered promiscuous mode [ 348.592051][T19215] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.599174][T19215] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.606589][T19215] bridge_slave_1: entered allmulticast mode [ 348.632857][T19215] bridge_slave_1: entered promiscuous mode [ 348.675621][T19215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.713596][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.724297][ T3588] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 348.756901][T19215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.794752][T19215] team0: Port device team_slave_0 added [ 348.805779][ T3588] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 348.824386][T19253] xt_hashlimit: max too large, truncated to 1048576 [ 348.832211][T19249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.841350][T19253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.841865][T19215] team0: Port device team_slave_1 added [ 348.857372][T19249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.881978][T19215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.889084][T19215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.915136][T19215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.927629][T19215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.934681][T19215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.960647][T19215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.994401][T19262] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4764'. [ 349.004462][T19215] hsr_slave_0: entered promiscuous mode [ 349.011174][T19215] hsr_slave_1: entered promiscuous mode [ 349.017305][T19215] debugfs: 'hsr0' already exists in 'hsr' [ 349.023050][T19215] Cannot create hsr debugfs directory [ 349.045932][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4764'. [ 349.134697][ T3588] bond3 (unregistering): (slave geneve3): Releasing active interface [ 349.307098][T19275] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 349.371947][T19278] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4768'. [ 349.420208][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4773'. [ 349.586481][ T3588] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 349.595028][ T3588] bridge0 (unregistering): left promiscuous mode [ 349.601403][ T3588] bridge0 (unregistering): left allmulticast mode [ 349.636340][ T3588] bridge10 (unregistering): left promiscuous mode [ 349.797795][ T3588] $H (unregistering): (slave dummy0): Releasing backup interface [ 349.806338][ T3588] dummy0: left promiscuous mode [ 349.811760][ T3588] $H (unregistering): Released all slaves [ 349.822336][ T3588] bond1 (unregistering): (slave veth3): Releasing backup interface [ 349.830690][ T3588] bond1 (unregistering): Released all slaves [ 349.839148][ T3588] bond2 (unregistering): Released all slaves [ 349.847990][ T3588] bond3 (unregistering): Released all slaves [ 349.856701][ T3588] bond0 (unregistering): Released all slaves [ 349.885314][T19278] 0X: renamed from caif0 [ 349.937682][T19278] 0X: entered allmulticast mode [ 349.942949][T19278] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 349.976413][T19284] 8021q: adding VLAN 0 to HW filter on device $H [ 349.987949][T19284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 350.025315][ T3588] tipc: Disabling bearer [ 350.030611][ T3588] tipc: Disabling bearer [ 350.035753][ T3588] tipc: Disabling bearer [ 350.040996][ T3588] tipc: Left network mode [ 350.066762][T19215] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 350.083610][T19292] bridge: RTM_NEWNEIGH with invalid ether address [ 350.126240][T19215] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 350.140414][ T3588] veth1: left promiscuous mode [ 350.147109][ T3588] hsr_slave_0: left promiscuous mode [ 350.152787][ T3588] hsr_slave_1: left promiscuous mode [ 350.228474][T19215] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 350.237543][T19215] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 350.272465][T19215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.284705][T19215] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.293664][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.300831][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.314799][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.321890][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.375103][T19215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.473815][T19215] veth0_vlan: entered promiscuous mode [ 350.481421][T19215] veth1_vlan: entered promiscuous mode [ 350.495466][T19215] veth0_macvtap: entered promiscuous mode [ 350.502725][T19215] veth1_macvtap: entered promiscuous mode [ 350.513415][T19215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.523941][T19215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.534673][ T3582] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.550279][ T3582] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.563046][ T3582] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.577307][ T3582] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.626497][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4752'. [ 350.657133][T19318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4752'. [ 350.800944][T19331] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.844900][T19336] loop7: detected capacity change from 0 to 4096 [ 350.852978][T19336] EXT4-fs: test_dummy_encryption option not supported [ 350.876096][T19331] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.976371][T19321] xt_CT: You must specify a L4 protocol and not use inversions on it [ 350.985542][T19331] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.067770][T19331] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.995521][T19341] syz.8.4782 (19341) used greatest stack depth: 6264 bytes left [ 352.164142][T19358] vlan1: entered allmulticast mode [ 352.402720][ T3588] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.411385][T19365] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4792'. [ 352.865509][T19355] syz.8.4789 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 352.879476][T19355] CPU: 0 UID: 0 PID: 19355 Comm: syz.8.4789 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 352.879590][T19355] Tainted: [W]=WARN [ 352.879631][T19355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 352.879644][T19355] Call Trace: [ 352.879651][T19355] [ 352.879659][T19355] __dump_stack+0x1d/0x30 [ 352.879680][T19355] dump_stack_lvl+0xe8/0x140 [ 352.879699][T19355] dump_stack+0x15/0x1b [ 352.879716][T19355] dump_header+0x81/0x220 [ 352.879738][T19355] oom_kill_process+0x342/0x400 [ 352.879792][T19355] out_of_memory+0x979/0xb80 [ 352.879820][T19355] try_charge_memcg+0x610/0xa10 [ 352.879854][T19355] obj_cgroup_charge_pages+0xa6/0x150 [ 352.879919][T19355] __memcg_kmem_charge_page+0x9f/0x170 [ 352.879944][T19355] __alloc_frozen_pages_noprof+0x188/0x360 [ 352.880020][T19355] alloc_pages_mpol+0xb3/0x260 [ 352.880044][T19355] alloc_pages_noprof+0x90/0x130 [ 352.880110][T19355] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 352.880159][T19355] __kvmalloc_node_noprof+0x483/0x670 [ 352.880199][T19355] ? ip_set_alloc+0x24/0x30 [ 352.880245][T19355] ? ip_set_alloc+0x24/0x30 [ 352.880279][T19355] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 352.880314][T19355] ip_set_alloc+0x24/0x30 [ 352.880347][T19355] hash_netiface_create+0x282/0x740 [ 352.880416][T19355] ? __pfx_hash_netiface_create+0x10/0x10 [ 352.880445][T19355] ip_set_create+0x3cc/0x970 [ 352.880472][T19355] ? __nla_parse+0x40/0x60 [ 352.880556][T19355] nfnetlink_rcv_msg+0x4c6/0x590 [ 352.880599][T19355] ? is_bpf_text_address+0x141/0x160 [ 352.880635][T19355] netlink_rcv_skb+0x123/0x220 [ 352.880664][T19355] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 352.880765][T19355] nfnetlink_rcv+0x167/0x16c0 [ 352.880874][T19355] ? fixup_exception+0x741/0xd50 [ 352.880902][T19355] ? lock_mm_and_find_vma+0x112/0x400 [ 352.880937][T19355] ? __rcu_read_unlock+0x34/0x70 [ 352.880966][T19355] ? is_bpf_text_address+0x141/0x160 [ 352.880995][T19355] ? __rcu_read_unlock+0x34/0x70 [ 352.881066][T19355] ? unwind_next_frame+0xada/0xc80 [ 352.881098][T19355] ? kfree+0x351/0x400 [ 352.881125][T19355] ? security_compute_sid+0x11da/0x1290 [ 352.881203][T19355] ? __kernel_text_address+0xd/0x40 [ 352.881234][T19355] ? unwind_get_return_address+0x16/0x40 [ 352.881287][T19355] ? perf_callchain_kernel+0x2f0/0x350 [ 352.881325][T19355] ? security_compute_sid+0x11da/0x1290 [ 352.881377][T19355] ? get_perf_callchain+0x452/0x530 [ 352.881399][T19355] ? perf_callchain_user+0xae0/0xb50 [ 352.881427][T19355] ? __bpf_get_stackid+0x2bf/0x800 [ 352.881452][T19355] ? should_fail_ex+0x30/0x280 [ 352.881553][T19355] ? selinux_nlmsg_lookup+0x99/0x890 [ 352.881582][T19355] ? __rcu_read_unlock+0x34/0x70 [ 352.881611][T19355] ? __netlink_lookup+0x266/0x2a0 [ 352.881635][T19355] netlink_unicast+0x5c0/0x690 [ 352.881711][T19355] netlink_sendmsg+0x58b/0x6b0 [ 352.881731][T19355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.881749][T19355] __sock_sendmsg+0x145/0x180 [ 352.881825][T19355] ____sys_sendmsg+0x31e/0x4e0 [ 352.881846][T19355] ___sys_sendmsg+0x17b/0x1d0 [ 352.881878][T19355] __x64_sys_sendmsg+0xd4/0x160 [ 352.881900][T19355] x64_sys_call+0x191e/0x3000 [ 352.881923][T19355] do_syscall_64+0xd2/0x200 [ 352.881986][T19355] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 352.882011][T19355] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 352.882045][T19355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.882070][T19355] RIP: 0033:0x7f105385f749 [ 352.882104][T19355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.882161][T19355] RSP: 002b:00007f10522bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.882184][T19355] RAX: ffffffffffffffda RBX: 00007f1053ab5fa0 RCX: 00007f105385f749 [ 352.882204][T19355] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 352.882219][T19355] RBP: 00007f10538e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.882234][T19355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.882248][T19355] R13: 00007f1053ab6038 R14: 00007f1053ab5fa0 R15: 00007ffd09281328 [ 352.882270][T19355] [ 352.882278][T19355] memory: usage 307200kB, limit 307200kB, failcnt 201 [ 353.290005][T19355] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 353.297937][T19355] kmem: usage 306840kB, limit 9007199254740988kB, failcnt 0 [ 353.305253][T19355] Memory cgroup stats for /syz8: [ 353.381252][ T3588] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.404017][ T3588] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.422287][ T3588] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.431017][T19370] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 353.438741][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4793'. [ 353.448806][T19355] cache 0 [ 353.451761][T19355] rss 110592 [ 353.455110][T19355] shmem 0 [ 353.458107][T19355] mapped_file 0 [ 353.461653][T19355] dirty 0 [ 353.464594][T19355] writeback 0 [ 353.467958][T19355] workingset_refault_anon 1179 [ 353.472739][T19355] workingset_refault_file 1792 [ 353.477531][T19355] swap 454656 [ 353.480828][T19355] swapcached 110592 [ 353.484647][T19355] pgpgin 359099 [ 353.488167][T19355] pgpgout 359072 [ 353.491722][T19355] pgfault 342478 [ 353.495324][T19355] pgmajfault 244 [ 353.498913][T19355] inactive_anon 90112 [ 353.502929][T19355] active_anon 20480 [ 353.506769][T19355] inactive_file 0 [ 353.510406][T19355] active_file 0 [ 353.513894][T19355] unevictable 0 [ 353.517404][T19355] hierarchical_memory_limit 314572800 [ 353.522794][T19355] hierarchical_memsw_limit 9223372036854771712 [ 353.529008][T19355] total_cache 0 [ 353.532535][T19355] total_rss 110592 [ 353.536326][T19355] total_shmem 0 [ 353.539770][T19355] total_mapped_file 0 [ 353.543734][T19355] total_dirty 0 [ 353.547212][T19355] total_writeback 0 [ 353.551008][T19355] total_workingset_refault_anon 1179 [ 353.556305][T19355] total_workingset_refault_file 1792 [ 353.561583][T19355] total_swap 454656 [ 353.565394][T19355] total_swapcached 110592 [ 353.569710][T19355] total_pgpgin 359099 [ 353.573750][T19355] total_pgpgout 359072 [ 353.577989][T19355] total_pgfault 342478 [ 353.582052][T19355] total_pgmajfault 244 [ 353.586127][T19355] total_inactive_anon 90112 [ 353.590698][T19355] total_active_anon 20480 [ 353.595018][T19355] total_inactive_file 0 [ 353.599318][T19355] total_active_file 0 [ 353.603340][T19355] total_unevictable 0 [ 353.607347][T19355] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1560,pid=10153,uid=0 [ 353.622405][T19355] Memory cgroup out of memory: Killed process 10153 (syz.8.1560) total-vm:95884kB, anon-rss:1172kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 353.725559][T19380] loop7: detected capacity change from 0 to 512 [ 353.732597][T19380] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 353.763379][T19380] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4796: bad orphan inode 131083 [ 353.784898][T19380] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.839850][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 353.839866][ T29] audit: type=1400 audit(1763664580.946:16141): avc: denied { rename } for pid=19375 comm="syz.7.4796" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 353.918915][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.953209][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4798'. [ 354.036816][ T29] audit: type=1400 audit(1763664581.136:16142): avc: denied { read } for pid=19399 comm="syz.7.4803" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 354.063839][ T29] audit: type=1400 audit(1763664581.136:16143): avc: denied { open } for pid=19399 comm="syz.7.4803" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 354.087990][T19401] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 354.146117][ T29] audit: type=1326 audit(1763664581.256:16144): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 354.171162][ T29] audit: type=1326 audit(1763664581.286:16145): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 354.195246][ T29] audit: type=1326 audit(1763664581.286:16146): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 354.219434][ T29] audit: type=1326 audit(1763664581.286:16147): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 354.244734][ T29] audit: type=1326 audit(1763664581.356:16148): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 354.268770][ T29] audit: type=1326 audit(1763664581.356:16149): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 354.292919][ T29] audit: type=1326 audit(1763664581.356:16150): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19402 comm="syz.0.4804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 354.329532][T19393] futex_wake_op: syz.8.4801 tries to shift op by -1; fix this program [ 354.394779][T19411] tipc: Enabled bearer , priority 0 [ 354.403169][T19411] syzkaller0: MTU too low for tipc bearer [ 354.409093][T19411] tipc: Disabling bearer [ 354.546168][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4811'. [ 354.591616][T19423] bond0: (slave dummy0): Releasing backup interface [ 354.619266][T19423] bridge_slave_0: left promiscuous mode [ 354.624957][T19423] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.641651][T19426] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19426 comm=syz.8.4811 [ 354.683562][T19423] bridge_slave_1: left allmulticast mode [ 354.689352][T19423] bridge_slave_1: left promiscuous mode [ 354.695038][T19423] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.714724][T19423] bond0: (slave bond_slave_0): Releasing backup interface [ 354.735479][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4815'. [ 354.745277][T19423] bond0: (slave bond_slave_1): Releasing backup interface [ 354.755560][T19423] team0: Port device team_slave_0 removed [ 354.762497][T19423] team0: Port device team_slave_1 removed [ 354.768591][T19423] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.796267][T19431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19431 comm=syz.0.4825 [ 354.820472][T19434] lo speed is unknown, defaulting to 1000 [ 355.806744][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4830'. [ 355.828122][T19468] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4830'. [ 355.828324][T19470] loop7: detected capacity change from 0 to 164 [ 355.891714][T19470] loop7: detected capacity change from 0 to 128 [ 356.368288][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4837'. [ 356.926239][T19503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4844'. [ 356.931502][T19501] lo speed is unknown, defaulting to 1000 [ 357.125270][T19509] lo speed is unknown, defaulting to 1000 [ 357.240844][T19512] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.289831][T19514] lo speed is unknown, defaulting to 1000 [ 357.297162][T19512] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.356045][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4848'. [ 357.377266][T19512] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.439912][T19512] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.504680][ T3622] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.525176][ T3622] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.547474][ T3622] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.586495][ T3622] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.612667][T19523] loop9: detected capacity change from 0 to 1024 [ 357.619401][T19523] EXT4-fs: inline encryption not supported [ 357.658684][T19523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.735701][T19523] usb usb8: usbfs: process 19523 (syz.9.4850) did not claim interface 0 before use [ 357.766885][T19523] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.4850: Allocating blocks 385-513 which overlap fs metadata [ 357.825761][T19522] EXT4-fs (loop9): pa ffff888106a4d770: logic 16, phys. 129, len 24 [ 357.833822][T19522] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 357.878704][T19536] loop7: detected capacity change from 0 to 8192 [ 357.960388][T19215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.007292][T19547] veth2: entered promiscuous mode [ 358.012501][T19547] veth2: entered allmulticast mode [ 358.256363][T19562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4866'. [ 358.266921][T19558] bond4: (slave dummy0): Releasing active interface [ 358.298123][T19558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 358.364631][T19569] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4868'. [ 358.373740][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4868'. [ 358.411949][T19569] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4868'. [ 358.421038][T19569] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4868'. [ 358.432164][T19577] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4871'. [ 359.504908][T19605] loop7: detected capacity change from 0 to 512 [ 359.520981][T19605] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 359.531418][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 359.531434][ T29] audit: type=1326 audit(1763664586.636:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19589 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 359.561456][ T29] audit: type=1326 audit(1763664586.636:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19589 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 359.655544][T19605] EXT4-fs (loop7): 1 truncate cleaned up [ 359.661682][T19605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.684823][ T29] audit: type=1326 audit(1763664586.756:16420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19589 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 359.709421][ T29] audit: type=1326 audit(1763664586.756:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19589 comm="syz.9.4877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 359.778873][T19617] tipc: Started in network mode [ 359.783894][T19617] tipc: Node identity ac14140f, cluster identity 4711 [ 359.802816][T19617] tipc: New replicast peer: 255.255.255.83 [ 359.808913][T19617] tipc: Enabled bearer , priority 10 [ 359.956870][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4886'. [ 360.081486][T19623] netlink: 'syz.6.4887': attribute type 9 has an invalid length. [ 360.089295][T19623] netlink: 'syz.6.4887': attribute type 7 has an invalid length. [ 360.097071][T19623] netlink: 'syz.6.4887': attribute type 8 has an invalid length. [ 360.152144][T19616] loop9: detected capacity change from 0 to 512 [ 360.158912][T19616] ext4: Unknown parameter 'euid' [ 360.166253][ T29] audit: type=1400 audit(1763664587.056:16422): avc: denied { ioctl } for pid=19619 comm="syz.8.4886" path="socket:[77654]" dev="sockfs" ino=77654 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.377189][ T29] audit: type=1326 audit(1763664587.476:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 360.400897][ T29] audit: type=1326 audit(1763664587.476:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 360.426006][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.480641][ T29] audit: type=1326 audit(1763664587.486:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 360.504380][ T29] audit: type=1326 audit(1763664587.486:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 360.528031][ T29] audit: type=1326 audit(1763664587.486:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19635 comm="syz.6.4893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 360.531555][T19642] rdma_rxe: rxe_newlink: failed to add lo [ 360.692693][T19644] netlink: 'syz.8.4896': attribute type 4 has an invalid length. [ 360.738564][T19644] netlink: 'syz.8.4896': attribute type 4 has an invalid length. [ 360.748746][ T9190] lo speed is unknown, defaulting to 1000 [ 360.754605][ T9190] syz2: Port: 1 Link ACTIVE [ 360.825206][ T4789] tipc: Node number set to 2886997007 [ 361.074199][T19656] lo speed is unknown, defaulting to 1000 [ 361.673981][T19672] netlink: 'syz.9.4907': attribute type 15 has an invalid length. [ 362.152485][T19704] bridge0: left allmulticast mode [ 362.170786][T19704] $H: (slave dummy0): Releasing backup interface [ 362.199718][T19704] bond5: (slave bridge15): Releasing backup interface [ 362.207751][T19704] bridge15: left promiscuous mode [ 362.212934][T19704] bridge15: left allmulticast mode [ 362.231098][T19704] bond6: (slave bond7): Releasing backup interface [ 362.237709][T19704] bond6: (slave bond7): the permanent HWaddr of slave - 96:95:d9:99:c4:89 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 362.281231][T19704] bond6: (slave gretap2): making interface the new active one [ 362.310122][T19704] bond6: (slave gretap2): Releasing backup interface [ 362.344713][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4918'. [ 362.604119][T19715] lo speed is unknown, defaulting to 1000 [ 362.947214][T19727] netlink: 'syz.7.4923': attribute type 4 has an invalid length. [ 363.075776][T19735] netlink: 'syz.6.4927': attribute type 4 has an invalid length. [ 363.099007][T19735] netlink: 'syz.6.4927': attribute type 4 has an invalid length. [ 363.378161][T19744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4930'. [ 364.201951][T19755] macvtap0: entered promiscuous mode [ 364.208015][T19755] macvtap0: left promiscuous mode [ 364.295825][T19764] bridge_slave_0: left allmulticast mode [ 364.301540][T19764] bridge_slave_0: left promiscuous mode [ 364.307405][T19764] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.361398][T19764] bridge_slave_1: left allmulticast mode [ 364.367174][T19764] bridge_slave_1: left promiscuous mode [ 364.372848][T19764] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.431481][T19757] netlink: 'syz.6.4936': attribute type 13 has an invalid length. [ 364.452698][T19764] bond0: (slave bond_slave_0): Releasing backup interface [ 364.484174][T19764] bond0: (slave bond_slave_1): Releasing backup interface [ 364.561898][T19764] team0: Port device team_slave_0 removed [ 364.602368][T19764] team0: Port device team_slave_1 removed [ 364.638634][T19772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4940'. [ 364.652717][T19764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.660176][T19764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.723610][T19764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.731060][T19764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.748928][T19764] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.836454][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4942'. [ 365.038631][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 365.038649][ T29] audit: type=1326 audit(1763664592.146:16518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 365.092794][ T29] audit: type=1326 audit(1763664592.186:16519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 365.116915][ T29] audit: type=1326 audit(1763664592.186:16520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1053861667 code=0x7ffc0000 [ 365.140459][ T29] audit: type=1326 audit(1763664592.186:16521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f10538615dc code=0x7ffc0000 [ 365.163982][ T29] audit: type=1326 audit(1763664592.186:16522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1053861514 code=0x7ffc0000 [ 365.187825][ T29] audit: type=1326 audit(1763664592.186:16523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f1053861514 code=0x7ffc0000 [ 365.200341][T19786] veth2: left promiscuous mode [ 365.211682][ T29] audit: type=1326 audit(1763664592.186:16524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f105385e3aa code=0x7ffc0000 [ 365.216410][T19786] veth2: left allmulticast mode [ 365.217195][T19786] veth6: left promiscuous mode [ 365.239961][ T29] audit: type=1326 audit(1763664592.186:16525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 365.244809][T19786] veth6: left allmulticast mode [ 365.249639][ T29] audit: type=1326 audit(1763664592.186:16526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 365.273785][T19786] veth8: left promiscuous mode [ 365.278328][ T29] audit: type=1326 audit(1763664592.186:16527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19782 comm="syz.8.4945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 365.330579][T19786] veth8: left allmulticast mode [ 365.336057][T19786] veth12: left promiscuous mode [ 365.340977][T19786] veth12: left allmulticast mode [ 365.346406][T19786] vlan2: left promiscuous mode [ 365.351484][T19786] bridge3: left promiscuous mode [ 365.356658][T19786] vlan2: left allmulticast mode [ 365.361577][T19786] bridge3: left allmulticast mode [ 365.366820][T19786] veth14: left promiscuous mode [ 365.371793][T19786] veth14: left allmulticast mode [ 365.377007][T19786] veth18: left promiscuous mode [ 365.381877][T19786] veth18: left allmulticast mode [ 366.030888][T19818] netlink: 228 bytes leftover after parsing attributes in process `syz.7.4957'. [ 366.323191][T19834] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.366937][T19834] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.427193][T19834] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.477954][T19834] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.563263][ T3588] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.575241][ T3588] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.587061][ T3612] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.599430][ T3612] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.620118][T19854] lo speed is unknown, defaulting to 1000 [ 366.659882][T19859] loop9: detected capacity change from 0 to 1024 [ 366.669484][T19859] EXT4-fs: Ignoring removed orlov option [ 366.685926][T19859] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.708972][T19859] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.4974: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 366.734107][T19864] bridge: RTM_NEWNEIGH with invalid ether address [ 366.912364][T19215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.015875][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4988'. [ 367.221905][T19883] veth1_macvtap: left promiscuous mode [ 367.244525][T19883] macsec0: entered promiscuous mode [ 367.444507][T19891] lo speed is unknown, defaulting to 1000 [ 367.463635][T19894] lo speed is unknown, defaulting to 1000 [ 367.474421][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4987'. [ 367.483471][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4987'. [ 367.836684][T19914] $H: renamed from bond0 (while UP) [ 368.036738][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4993'. [ 368.045766][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4993'. [ 368.297840][T19914] $H: entered promiscuous mode [ 368.367405][T19923] loop9: detected capacity change from 0 to 128 [ 368.374130][T19923] vfat: Unknown parameter '/dev/input/event#' [ 368.495462][T19934] vlan0: entered allmulticast mode [ 368.635694][T19923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.651308][T19923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.680876][T19941] xt_connbytes: Forcing CT accounting to be enabled [ 368.758776][T19941] set match dimension is over the limit! [ 369.445548][T19956] lo speed is unknown, defaulting to 1000 [ 369.868571][T19959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5006'. [ 369.877080][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5010'. [ 369.906350][T19959] tipc: Disabling bearer [ 369.951982][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5010'. [ 370.248337][T19985] siw: device registration error -23 [ 370.379608][T19987] vlan0: entered allmulticast mode [ 370.674000][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5019'. [ 370.989691][T20001] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.5021'. [ 371.021901][T20006] bridge0: port 1(gretap0) entered blocking state [ 371.028558][T20006] bridge0: port 1(gretap0) entered disabled state [ 371.036441][T20001] netlink: zone id is out of range [ 371.041632][T20001] netlink: zone id is out of range [ 371.047668][T20006] gretap0: entered allmulticast mode [ 371.049274][T20001] netlink: zone id is out of range [ 371.058302][T20001] netlink: zone id is out of range [ 371.062146][T20006] gretap0: entered promiscuous mode [ 371.063542][T20001] netlink: zone id is out of range [ 371.074024][T20001] netlink: zone id is out of range [ 371.079164][T20001] netlink: zone id is out of range [ 371.085202][T20001] netlink: zone id is out of range [ 371.090382][T20001] netlink: zone id is out of range [ 371.095532][T20001] netlink: zone id is out of range [ 371.380266][T20026] lo speed is unknown, defaulting to 1000 [ 371.544660][T20023] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.5029'. [ 371.786959][T20037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5031'. [ 371.926099][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 371.926116][ T29] audit: type=1326 audit(1763664599.036:16865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.9.5036" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d17d5f749 code=0x0 [ 372.045041][ T29] audit: type=1326 audit(1763664599.136:16866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.9.5036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 372.068815][ T29] audit: type=1326 audit(1763664599.136:16867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.9.5036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 372.092608][ T29] audit: type=1326 audit(1763664599.136:16868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.9.5036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 372.116654][ T29] audit: type=1326 audit(1763664599.136:16869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.9.5036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 372.140622][ T29] audit: type=1326 audit(1763664599.136:16870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20046 comm="syz.9.5036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 372.236887][ T29] audit: type=1400 audit(1763664599.346:16871): avc: denied { setopt } for pid=20052 comm="syz.0.5038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 372.291729][T20057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5039'. [ 373.022426][T20081] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5050'. [ 373.039020][T20079] loop7: detected capacity change from 0 to 512 [ 373.046480][T20079] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 373.057467][T20079] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.5047: inode has both inline data and extents flags [ 373.071018][T20079] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5047: couldn't read orphan inode 15 (err -117) [ 373.084156][T20079] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.240195][T20086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5051'. [ 374.954997][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.987469][T20119] set match dimension is over the limit! [ 375.137361][ T29] audit: type=1326 audit(1763664602.236:16872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20121 comm="syz.6.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 375.161093][ T29] audit: type=1326 audit(1763664602.236:16873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20121 comm="syz.6.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 375.184754][ T29] audit: type=1326 audit(1763664602.236:16874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20121 comm="syz.6.5063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 375.282601][T20124] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5073'. [ 375.322945][T20124] netlink: 'syz.7.5073': attribute type 1 has an invalid length. [ 375.330783][T20124] netlink: 'syz.7.5073': attribute type 2 has an invalid length. [ 375.338561][T20124] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5073'. [ 375.550551][T20162] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5074'. [ 375.567417][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5074'. [ 375.685379][T20170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 376.596568][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5078'. [ 376.704443][T20187] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5082'. [ 376.716265][T20187] bond0: entered promiscuous mode [ 376.721357][T20187] bond_slave_0: entered promiscuous mode [ 376.727224][T20187] bond_slave_1: entered promiscuous mode [ 376.733236][T20187] dummy0: entered promiscuous mode [ 376.746817][T20187] gretap0: entered promiscuous mode [ 376.752420][T20187] debugfs: 'hsr0' already exists in 'hsr' [ 376.758210][T20187] Cannot create hsr debugfs directory [ 376.763604][T20187] hsr0: entered promiscuous mode [ 376.836287][T20197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5085'. [ 376.858585][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5085'. [ 377.035855][T20203] netlink: 161700 bytes leftover after parsing attributes in process `syz.9.5087'. [ 377.102099][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 377.102118][ T29] audit: type=1400 audit(1763664604.206:16906): avc: denied { nlmsg_write } for pid=20200 comm="syz.6.5096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 377.421260][T20226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5099'. [ 377.433779][T20224] loop9: detected capacity change from 0 to 128 [ 377.538571][T20224] net_ratelimit: 22 callbacks suppressed [ 377.538589][T20224] netlink: zone id is out of range [ 377.549608][T20224] netlink: zone id is out of range [ 377.559547][T20224] netlink: zone id is out of range [ 377.564719][T20224] netlink: zone id is out of range [ 377.569948][T20224] netlink: zone id is out of range [ 377.575104][T20224] netlink: zone id is out of range [ 377.580225][T20224] netlink: zone id is out of range [ 377.586123][T20224] netlink: zone id is out of range [ 377.591266][T20224] netlink: zone id is out of range [ 377.596493][T20224] netlink: zone id is out of range [ 378.341813][T20248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20248 comm=syz.8.5107 [ 378.357864][ T29] audit: type=1107 audit(1763664605.466:16907): pid=20246 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 378.595185][T20260] syz.9.5100 (20260) used obsolete PPPIOCDETACH ioctl [ 379.389677][T20269] lo speed is unknown, defaulting to 1000 [ 379.509622][T20274] netlink: 'syz.0.5106': attribute type 10 has an invalid length. [ 379.567781][ T29] audit: type=1400 audit(1763664606.666:16908): avc: denied { write } for pid=20278 comm="syz.9.5109" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 379.573838][T20279] dvmrp0: entered allmulticast mode [ 379.591337][ T29] audit: type=1400 audit(1763664606.666:16909): avc: denied { open } for pid=20278 comm="syz.9.5109" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 379.620300][ T29] audit: type=1400 audit(1763664606.666:16910): avc: denied { ioctl } for pid=20278 comm="syz.9.5109" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 379.665329][T20281] lo speed is unknown, defaulting to 1000 [ 379.750391][ T29] audit: type=1400 audit(1763664606.856:16911): avc: denied { bind } for pid=20283 comm="syz.9.5111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.770207][ T29] audit: type=1400 audit(1763664606.856:16912): avc: denied { name_bind } for pid=20283 comm="syz.9.5111" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 379.791752][ T29] audit: type=1400 audit(1763664606.856:16913): avc: denied { node_bind } for pid=20283 comm="syz.9.5111" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 379.814368][ T29] audit: type=1326 audit(1763664606.856:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20283 comm="syz.9.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 379.838241][ T29] audit: type=1326 audit(1763664606.856:16915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20283 comm="syz.9.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d17d5f749 code=0x7ffc0000 [ 379.912041][T20293] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=20293 comm=syz.9.5114 [ 380.827977][T20322] lo speed is unknown, defaulting to 1000 [ 380.955515][T20327] lo speed is unknown, defaulting to 1000 [ 381.165023][T20340] __nla_validate_parse: 2 callbacks suppressed [ 381.165044][T20340] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5127'. [ 381.180477][T20340] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5127'. [ 381.262187][T20344] lo speed is unknown, defaulting to 1000 [ 381.952275][T20373] lo speed is unknown, defaulting to 1000 [ 382.007773][T20375] lo speed is unknown, defaulting to 1000 [ 382.619911][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 382.619930][ T29] audit: type=1326 audit(1763664609.726:16928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20385 comm="syz.0.5145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x0 [ 383.186441][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5149'. [ 383.212282][ T29] audit: type=1326 audit(1763664610.316:16929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.216541][T20403] loop9: detected capacity change from 0 to 512 [ 383.236127][ T29] audit: type=1326 audit(1763664610.316:16930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.330887][ T29] audit: type=1326 audit(1763664610.376:16931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.354572][ T29] audit: type=1326 audit(1763664610.376:16932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.378218][ T29] audit: type=1326 audit(1763664610.376:16933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.401976][ T29] audit: type=1326 audit(1763664610.376:16934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.425681][ T29] audit: type=1326 audit(1763664610.376:16935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.449484][ T29] audit: type=1326 audit(1763664610.376:16936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.473029][ T29] audit: type=1326 audit(1763664610.376:16937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20398 comm="syz.8.5150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 383.764463][T20425] netlink: 'syz.7.5160': attribute type 1 has an invalid length. [ 383.827132][T20425] bond2: entered promiscuous mode [ 383.832434][T20425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.885850][T20425] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5160'. [ 383.894857][T20425] bond2: entered allmulticast mode [ 384.256156][T20425] bond2: (slave bridge5): making interface the new active one [ 384.263694][T20425] bridge5: entered promiscuous mode [ 384.269119][T20425] bridge5: entered allmulticast mode [ 384.383655][T20425] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 385.294625][T20446] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5165'. [ 385.331803][T20448] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.371754][T20450] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5167'. [ 385.381987][T20448] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.396563][T20450] hsr_slave_0: left promiscuous mode [ 385.506067][T20448] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.557027][T20448] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.626363][ T3622] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.641478][ T3622] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.657652][ T3622] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.666750][ T3622] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.697958][T20461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.706798][T20461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.766198][T20470] netlink: 'syz.9.5175': attribute type 4 has an invalid length. [ 385.774866][T20468] sch_fq: defrate 4294967295 ignored. [ 385.799705][T20470] netlink: 'syz.9.5175': attribute type 4 has an invalid length. [ 385.855617][T20472] sctp: [Deprecated]: syz.6.5176 (pid 20472) Use of struct sctp_assoc_value in delayed_ack socket option. [ 385.855617][T20472] Use struct sctp_sack_info instead [ 386.016240][T20484] netlink: 'syz.6.5181': attribute type 13 has an invalid length. [ 386.233531][T20492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20492 comm=syz.6.5184 [ 386.327853][T20496] netlink: 'syz.8.5186': attribute type 1 has an invalid length. [ 386.341712][T20496] bond7: entered promiscuous mode [ 386.347330][T20496] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.362975][T20496] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5186'. [ 386.372401][T20496] bond7: entered allmulticast mode [ 386.386177][T20496] bond7: (slave bridge6): making interface the new active one [ 386.393718][T20496] bridge6: entered promiscuous mode [ 386.399123][T20496] bridge6: entered allmulticast mode [ 386.414098][T20496] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 386.437605][T20500] loop7: detected capacity change from 0 to 512 [ 386.447275][T20500] EXT4-fs (loop7): 1 truncate cleaned up [ 386.453458][T20500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.538670][T20503] lo speed is unknown, defaulting to 1000 [ 387.188746][T20512] Y4`ҘDʆ5: renamed from lo (while UP) [ 387.215602][T20500] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm gtp: bg 0: block 465: padding at end of block bitmap is not set [ 387.289619][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.395550][T20521] netlink: 'syz.8.5195': attribute type 12 has an invalid length. [ 387.740468][T20530] lo speed is unknown, defaulting to 1000 [ 388.853541][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 388.853556][ T29] audit: type=1326 audit(1763664615.956:17028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 388.884523][ T29] audit: type=1326 audit(1763664615.956:17029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 388.908462][ T29] audit: type=1326 audit(1763664615.956:17030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 388.932088][ T29] audit: type=1326 audit(1763664615.996:17031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 388.955729][ T29] audit: type=1326 audit(1763664615.996:17032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 388.979372][ T29] audit: type=1326 audit(1763664615.996:17033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 389.003250][ T29] audit: type=1326 audit(1763664615.996:17034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 389.027299][ T29] audit: type=1326 audit(1763664616.136:17035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20553 comm="syz.6.5205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 389.219227][T20556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5206'. [ 389.334788][T20574] net_ratelimit: 22 callbacks suppressed [ 389.334807][T20574] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 389.372533][T20574] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 389.604311][T20587] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5217'. [ 389.622440][T20587] netlink: 156 bytes leftover after parsing attributes in process `syz.7.5217'. [ 389.677793][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5219'. [ 389.689122][T20592] hsr_slave_0: left promiscuous mode [ 389.695278][T20592] hsr_slave_1: left promiscuous mode [ 389.714114][ T29] audit: type=1326 audit(1763664616.816:17036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 389.737902][ T29] audit: type=1326 audit(1763664616.816:17037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.6.5220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 389.825671][T20598] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5221'. [ 389.890357][T20605] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5221'. [ 390.237947][T20631] veth34: entered promiscuous mode [ 390.243219][T20631] veth34: entered allmulticast mode [ 390.276849][T20634] netlink: 'syz.8.5230': attribute type 33 has an invalid length. [ 390.284778][T20634] netlink: 152 bytes leftover after parsing attributes in process `syz.8.5230'. [ 390.302326][T20634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5230'. [ 390.413561][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5232'. [ 390.441402][T20643] loop7: detected capacity change from 0 to 512 [ 390.449460][T20643] EXT4-fs (loop7): orphan cleanup on readonly fs [ 390.456196][T20643] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.5233: bad orphan inode 13 [ 390.466641][T20643] ext4_test_bit(bit=12, block=18) = 1 [ 390.472069][T20643] is_bad_inode(inode)=0 [ 390.476313][T20643] NEXT_ORPHAN(inode)=2130706432 [ 390.481155][T20643] max_ino=32 [ 390.484339][T20643] i_nlink=1 [ 390.487864][T20643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 390.521476][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.639457][T20658] netlink: 'syz.7.5238': attribute type 4 has an invalid length. [ 390.647611][T20658] netlink: 'syz.7.5238': attribute type 4 has an invalid length. [ 390.681731][T20660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20660 comm=syz.6.5240 [ 390.718950][T20664] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 390.756246][T20664] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 390.957466][T20671] loop7: detected capacity change from 0 to 512 [ 390.965701][T20671] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.7.5245: corrupted xattr block 95: invalid header [ 390.979953][T20671] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5245: bg 0: block 7: invalid block bitmap [ 390.992474][T20671] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 391.001580][T20671] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2967: inode #11: comm syz.7.5245: corrupted xattr block 95: invalid header [ 391.015284][T20671] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 391.024379][T20671] EXT4-fs (loop7): 1 orphan inode deleted [ 391.030556][T20671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.065441][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.083164][T20679] netlink: 'syz.7.5247': attribute type 4 has an invalid length. [ 391.511892][ T3416] IPVS: starting estimator thread 0... [ 391.605153][T20708] IPVS: using max 2832 ests per chain, 141600 per kthread [ 391.695808][T20715] __nla_validate_parse: 2 callbacks suppressed [ 391.695828][T20715] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5263'. [ 391.711483][T20715] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5263'. [ 392.618870][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5271'. [ 392.733779][T20752] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 392.745679][T20750] lo speed is unknown, defaulting to 1000 [ 392.786921][T20755] lo speed is unknown, defaulting to 1000 [ 393.244732][T20770] netlink: 'syz.6.5279': attribute type 32 has an invalid length. [ 393.918791][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 393.918807][ T29] audit: type=1400 audit(1763664621.026:17177): avc: denied { remove_name } for pid=20795 comm="syz.7.5287" name="file0" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 393.970231][ T29] audit: type=1326 audit(1763664621.076:17178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.013345][ T29] audit: type=1326 audit(1763664621.076:17179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.037223][ T29] audit: type=1326 audit(1763664621.076:17180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.060951][ T29] audit: type=1326 audit(1763664621.076:17181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.084530][ T29] audit: type=1326 audit(1763664621.076:17182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.108142][ T29] audit: type=1326 audit(1763664621.076:17183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.131714][ T29] audit: type=1326 audit(1763664621.076:17184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.155474][ T29] audit: type=1326 audit(1763664621.076:17185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.179106][ T29] audit: type=1326 audit(1763664621.076:17186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.7.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 394.208009][T20802] netlink: 'syz.9.5289': attribute type 4 has an invalid length. [ 394.225963][T20802] netlink: 'syz.9.5289': attribute type 4 has an invalid length. [ 394.265157][T20806] SELinux: Context system_u:object_r:logrotate_exec_t:s0 is not valid (left unmapped). [ 394.317578][T20810] loop9: detected capacity change from 0 to 1024 [ 394.338253][T20810] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.5293: Failed to acquire dquot type 0 [ 394.353073][T20810] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 394.368052][T20810] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.5293: corrupted inode contents [ 394.380397][T20810] EXT4-fs error (device loop9): ext4_dirty_inode:6517: inode #13: comm syz.9.5293: mark_inode_dirty error [ 394.392557][T20810] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.5293: corrupted inode contents [ 394.408086][T20810] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.5293: mark_inode_dirty error [ 394.440815][T20810] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.5293: corrupted inode contents [ 394.464140][T20810] EXT4-fs error (device loop9) in ext4_orphan_del:301: Corrupt filesystem [ 394.473536][T20810] EXT4-fs error (device loop9): ext4_do_update_inode:5632: inode #13: comm syz.9.5293: corrupted inode contents [ 394.473587][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5297'. [ 394.494496][T20810] EXT4-fs error (device loop9): ext4_truncate:4637: inode #13: comm syz.9.5293: mark_inode_dirty error [ 394.506733][T20810] EXT4-fs error (device loop9) in ext4_process_orphan:343: Corrupt filesystem [ 394.516347][T20810] EXT4-fs (loop9): 1 truncate cleaned up [ 394.522373][T20810] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.573405][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5297'. [ 394.605738][T19215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.968265][T20841] veth20: entered promiscuous mode [ 394.973444][T20841] veth20: entered allmulticast mode [ 395.677189][T20847] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 395.715916][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 395.745034][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 395.754532][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 395.777808][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 395.818064][T20847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5305'. [ 396.528445][T20882] lo speed is unknown, defaulting to 1000 [ 396.568048][T20887] set match dimension is over the limit! [ 396.620435][T20886] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20886 comm=syz.8.5317 [ 396.807459][T20900] netlink: 'syz.9.5321': attribute type 32 has an invalid length. [ 396.835908][T20901] __nla_validate_parse: 1 callbacks suppressed [ 396.835927][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5323'. [ 396.860537][T20898] lo speed is unknown, defaulting to 1000 [ 396.879791][T20901] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5323'. [ 397.191061][T20926] lo speed is unknown, defaulting to 1000 [ 397.219471][T20932] wg2: entered promiscuous mode [ 397.224398][T20932] wg2: entered allmulticast mode [ 397.411805][T20938] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5334'. [ 397.455307][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5337'. [ 397.455363][T20946] netlink: 57 bytes leftover after parsing attributes in process `syz.6.5338'. [ 397.479590][T20944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.531457][T20952] netlink: 'syz.8.5336': attribute type 32 has an invalid length. [ 397.578219][T20955] lo speed is unknown, defaulting to 1000 [ 398.794273][T21003] lo speed is unknown, defaulting to 1000 [ 399.261921][T21007] loop9: detected capacity change from 0 to 2048 [ 399.303249][T21008] IPv6: NLM_F_CREATE should be specified when creating new route [ 399.535230][T21019] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 399.569676][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 399.569693][ T29] audit: type=1400 audit(1763664626.676:17282): avc: denied { rename } for pid=21018 comm="syz.7.5359" name="file1" dev="tmpfs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 399.602447][T21025] netlink: 'syz.7.5362': attribute type 10 has an invalid length. [ 399.610358][T21025] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5362'. [ 399.621394][T21025] team0: Port device geneve1 added [ 399.632497][T21027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5363'. [ 399.641914][T21027] xt_time: unknown flags 0xf4 [ 399.652187][ T29] audit: type=1400 audit(1763664626.686:17283): avc: denied { unlink } for pid=14273 comm="syz-executor" name="file7" dev="tmpfs" ino=2102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 399.652567][ T3582] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.685219][ T3582] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.720155][ T3582] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.728695][ T3582] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.468284][T21037] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5367'. [ 400.537033][T21039] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5368'. [ 400.685330][T21042] netlink: 'syz.7.5370': attribute type 33 has an invalid length. [ 400.693298][T21042] netlink: 152 bytes leftover after parsing attributes in process `syz.7.5370'. [ 401.001565][T21056] loop7: detected capacity change from 0 to 512 [ 401.009339][T21056] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 401.019524][T21056] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.5374: inode has both inline data and extents flags [ 401.055542][T21056] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5374: couldn't read orphan inode 15 (err -117) [ 401.090063][T21056] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.256828][ T29] audit: type=1326 audit(1763664628.366:17284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 401.280565][ T29] audit: type=1326 audit(1763664628.366:17285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 401.304551][ T29] audit: type=1326 audit(1763664628.366:17286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 401.328203][ T29] audit: type=1326 audit(1763664628.366:17287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 401.585475][ T29] audit: type=1326 audit(1763664628.466:17288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 401.609018][ T29] audit: type=1326 audit(1763664628.466:17289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 401.632661][ T29] audit: type=1326 audit(1763664628.466:17290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 401.656259][ T29] audit: type=1326 audit(1763664628.466:17291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.0.5376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 402.893474][T21086] bridge: RTM_NEWNEIGH with invalid ether address [ 402.981018][T21091] netlink: 'syz.0.5384': attribute type 33 has an invalid length. [ 402.989029][T21091] __nla_validate_parse: 1 callbacks suppressed [ 402.989046][T21091] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5384'. [ 403.017152][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5384'. [ 403.558721][T21097] lo speed is unknown, defaulting to 1000 [ 403.802757][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.928742][T21117] bridge: RTM_NEWNEIGH with invalid ether address [ 404.043637][T21122] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=21122 comm=syz.6.5395 [ 404.068348][T21122] lo speed is unknown, defaulting to 1000 [ 404.139870][T21123] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 404.761681][T21141] loop9: detected capacity change from 0 to 512 [ 404.821320][T21141] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 404.841118][T21141] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.5403: inode has both inline data and extents flags [ 404.876748][T21141] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.5403: couldn't read orphan inode 15 (err -117) [ 404.935444][T21141] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.546680][T21165] lo speed is unknown, defaulting to 1000 [ 407.190840][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 407.190860][ T29] audit: type=1326 audit(1763664634.296:17468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.245215][ T29] audit: type=1326 audit(1763664634.336:17469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.268885][ T29] audit: type=1326 audit(1763664634.336:17470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.292514][ T29] audit: type=1326 audit(1763664634.336:17471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.316173][ T29] audit: type=1326 audit(1763664634.336:17472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.339940][ T29] audit: type=1326 audit(1763664634.336:17473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.363653][ T29] audit: type=1326 audit(1763664634.346:17474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.387300][ T29] audit: type=1326 audit(1763664634.346:17475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.451633][ T29] audit: type=1326 audit(1763664634.556:17476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 407.550870][ T29] audit: type=1326 audit(1763664634.586:17477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21174 comm="syz.8.5413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 408.254349][T21194] tmpfs: Unsupported parameter 'huge' [ 408.593125][T21209] netlink: 57 bytes leftover after parsing attributes in process `syz.8.5426'. [ 408.649547][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5427'. [ 408.658652][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5427'. [ 408.814676][T21222] geneve3: entered promiscuous mode [ 408.820213][T21222] geneve3: entered allmulticast mode [ 409.194674][T19215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.279470][T21230] lo speed is unknown, defaulting to 1000 [ 409.450143][T21237] tmpfs: Unsupported parameter 'huge' [ 410.633559][T21280] netlink: 57 bytes leftover after parsing attributes in process `syz.9.5447'. [ 411.284614][T21299] tmpfs: Unsupported parameter 'huge' [ 411.455408][T21306] netlink: 'syz.9.5457': attribute type 1 has an invalid length. [ 411.484771][T21306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 411.514786][T21306] veth5: entered promiscuous mode [ 411.522495][T21306] bond1: (slave veth5): Enslaving as an active interface with a down link [ 411.548131][T21309] bond8: option all_slaves_active: invalid value (5) [ 411.562914][T21309] bond8 (unregistering): Released all slaves [ 411.574226][T21306] erspan0: entered allmulticast mode [ 411.593610][T21306] bond1: (slave erspan0): making interface the new active one [ 411.613453][T21306] erspan0: entered promiscuous mode [ 411.629144][T21306] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 411.986168][T21338] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.144410][T21338] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.298914][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 412.298933][ T29] audit: type=1326 audit(1763664639.336:17718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.328883][ T29] audit: type=1326 audit(1763664639.336:17719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.352740][ T29] audit: type=1326 audit(1763664639.336:17720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.376588][ T29] audit: type=1326 audit(1763664639.336:17721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.400354][ T29] audit: type=1326 audit(1763664639.336:17722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.424009][ T29] audit: type=1326 audit(1763664639.336:17723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.447698][ T29] audit: type=1326 audit(1763664639.336:17724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.471300][ T29] audit: type=1326 audit(1763664639.336:17725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.495103][ T29] audit: type=1326 audit(1763664639.336:17726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.518742][ T29] audit: type=1326 audit(1763664639.346:17727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.7.5474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b7bff749 code=0x7ffc0000 [ 412.594580][T21338] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.748576][T21338] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.831946][ T3612] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.870055][ T3612] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.895169][ T3612] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.903437][ T3612] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.986280][T21363] loop9: detected capacity change from 0 to 128 [ 413.017236][T21363] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 413.075301][T21363] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.135847][T19215] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.329815][T21369] netlink: 'syz.9.5481': attribute type 4 has an invalid length. [ 413.359328][T21369] netlink: 'syz.9.5481': attribute type 4 has an invalid length. [ 413.698776][T21376] lo speed is unknown, defaulting to 1000 [ 414.158212][T21382] loop7: detected capacity change from 0 to 164 [ 414.192117][T21382] bio_check_eod: 28 callbacks suppressed [ 414.192209][T21382] syz.7.5486: attempt to access beyond end of device [ 414.192209][T21382] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 414.246660][T21382] syz.7.5486: attempt to access beyond end of device [ 414.246660][T21382] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 414.445966][T21380] xt_connbytes: Forcing CT accounting to be enabled [ 414.454207][T21380] Cannot find set identified by id 0 to match [ 414.563090][T21402] vlan0: entered allmulticast mode [ 414.610854][T21407] loop7: detected capacity change from 0 to 512 [ 414.618399][T21407] EXT4-fs: Ignoring removed nobh option [ 414.656670][T21407] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm syz.7.5493: corrupted inode contents [ 414.668827][T21407] EXT4-fs (loop7): Remounting filesystem read-only [ 414.679260][T21407] EXT4-fs (loop7): 1 truncate cleaned up [ 414.692241][T21407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.714347][T21407] ext4 filesystem being mounted at /420/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.725600][T21407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.750318][T21415] netlink: 'syz.8.5496': attribute type 83 has an invalid length. [ 415.157348][T21424] lo speed is unknown, defaulting to 1000 [ 415.573212][T21430] loop9: detected capacity change from 0 to 512 [ 415.608213][T21430] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.667583][T21436] lo speed is unknown, defaulting to 1000 [ 415.940048][T21445] loop7: detected capacity change from 0 to 512 [ 415.981044][T21445] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 415.989293][T21445] EXT4-fs (loop7): orphan cleanup on readonly fs [ 415.997962][T21445] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.5507: corrupted inode contents [ 416.010280][T21445] EXT4-fs (loop7): Remounting filesystem read-only [ 416.016952][T21445] EXT4-fs (loop7): 1 truncate cleaned up [ 416.023003][ T3568] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 416.033642][ T3568] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 416.108298][ T3568] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 416.125701][T21445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.138978][T21445] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.168895][T21457] lo speed is unknown, defaulting to 1000 [ 416.298760][T21459] lo speed is unknown, defaulting to 1000 [ 416.369637][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5512'. [ 416.392055][T19215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.808861][T21471] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.956101][T21471] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.063681][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5517'. [ 417.072737][T21480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5517'. [ 417.087495][T21471] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.166704][T21471] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.310215][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 417.310231][ T29] audit: type=1326 audit(1763664644.416:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bea3165e7 code=0x7ffc0000 [ 417.461067][ T3622] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.473007][ T3622] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.475752][ T29] audit: type=1326 audit(1763664644.456:17908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bea2bb829 code=0x7ffc0000 [ 417.505145][ T29] audit: type=1326 audit(1763664644.456:17909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bea3165e7 code=0x7ffc0000 [ 417.505821][ T3622] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.528861][ T29] audit: type=1326 audit(1763664644.456:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bea2bb829 code=0x7ffc0000 [ 417.528890][ T29] audit: type=1326 audit(1763664644.456:17911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 417.584121][ T29] audit: type=1326 audit(1763664644.486:17912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bea3165e7 code=0x7ffc0000 [ 417.607638][ T29] audit: type=1326 audit(1763664644.486:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bea2bb829 code=0x7ffc0000 [ 417.631342][ T29] audit: type=1326 audit(1763664644.486:17914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f3bea31f749 code=0x7ffc0000 [ 417.654919][ T29] audit: type=1326 audit(1763664644.566:17915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3bea3165e7 code=0x7ffc0000 [ 417.678830][ T29] audit: type=1326 audit(1763664644.566:17916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21483 comm="syz.0.5519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bea2bb829 code=0x7ffc0000 [ 417.715368][ T3622] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.700557][T21505] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5527'. [ 418.709803][T21505] bridge_slave_1: left allmulticast mode [ 418.715561][T21505] bridge_slave_1: left promiscuous mode [ 418.721238][T21505] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.729469][T21505] bridge_slave_0: left allmulticast mode [ 418.735208][T21505] bridge_slave_0: left promiscuous mode [ 418.740980][T21505] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.817244][T21499] xt_CT: No such helper "pptp" [ 420.031525][T21522] 8021q: adding VLAN 0 to HW filter on device $H [ 420.440943][T21534] loop7: detected capacity change from 0 to 512 [ 420.467526][T21534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.477587][T21534] EXT4-fs (loop7): orphan cleanup on readonly fs [ 420.484949][T21534] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5536: bg 0: block 248: padding at end of block bitmap is not set [ 420.500446][T21534] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.5536: Failed to acquire dquot type 1 [ 420.512601][T21534] EXT4-fs (loop7): 1 truncate cleaned up [ 420.518877][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5534'. [ 420.989005][T21534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 421.018998][T21522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.034623][T21538] tipc: Bearer : already 2 bearers with priority 10 [ 421.042009][T21538] tipc: Bearer : trying with adjusted priority [ 421.059953][T21538] tipc: New replicast peer: 255.255.255.83 [ 421.066173][T21538] tipc: Enabled bearer , priority 9 [ 421.318267][T21545] lo speed is unknown, defaulting to 1000 [ 421.918426][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.952597][T21556] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5543'. [ 422.008904][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5543'. [ 422.118540][T21563] netlink: 'syz.7.5546': attribute type 1 has an invalid length. [ 422.133041][T21563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 422.164266][T21563] veth23: entered promiscuous mode [ 422.173624][T21563] bond3: (slave veth23): Enslaving as an active interface with a down link [ 422.192058][T21563] erspan0: entered allmulticast mode [ 422.200561][T21563] bond3: (slave erspan0): making interface the new active one [ 422.209662][T21563] erspan0: entered promiscuous mode [ 422.215189][T21563] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 422.348078][T21575] lo speed is unknown, defaulting to 1000 [ 423.057940][T21592] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 423.066171][T21592] tipc: Enabled bearer , priority 10 [ 423.304280][T21605] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5564'. [ 423.345523][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 423.345549][ T29] audit: type=1326 audit(1763664650.456:18042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.378723][ T29] audit: type=1326 audit(1763664650.486:18043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.402432][ T29] audit: type=1326 audit(1763664650.486:18044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.426119][ T29] audit: type=1326 audit(1763664650.486:18045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.449804][ T29] audit: type=1326 audit(1763664650.486:18046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.473418][ T29] audit: type=1326 audit(1763664650.486:18047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.497086][ T29] audit: type=1326 audit(1763664650.486:18048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.520719][ T29] audit: type=1326 audit(1763664650.486:18049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.544132][ T29] audit: type=1326 audit(1763664650.486:18050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.567766][ T29] audit: type=1326 audit(1763664650.486:18051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21608 comm="syz.8.5556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 423.683411][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5557'. [ 423.692500][T21619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5557'. [ 423.913149][T21630] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.5563'. [ 424.365218][ T3613] erspan0: left promiscuous mode [ 424.707293][T21681] loop7: detected capacity change from 0 to 1024 [ 424.744073][T21681] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.5578: Failed to acquire dquot type 0 [ 424.771834][T21681] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 424.801402][T21681] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.5578: corrupted inode contents [ 424.815296][T21681] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #13: comm syz.7.5578: mark_inode_dirty error [ 424.849134][T21681] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.5578: corrupted inode contents [ 424.864014][T21681] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.5578: mark_inode_dirty error [ 424.875980][T21681] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.5578: corrupted inode contents [ 424.889738][T21681] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 424.900966][T21681] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #13: comm syz.7.5578: corrupted inode contents [ 424.915952][T21681] EXT4-fs error (device loop7): ext4_truncate:4637: inode #13: comm syz.7.5578: mark_inode_dirty error [ 424.951957][T21681] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 424.971128][T21681] EXT4-fs (loop7): 1 truncate cleaned up [ 424.977360][T21681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.204323][T21701] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1536) ! [ 425.243361][T21703] loop9: detected capacity change from 0 to 512 [ 425.282232][T21706] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.5578: Failed to acquire dquot type 0 [ 425.297570][T21703] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.5584: error while reading EA inode 32 err=-116 [ 425.386258][T21703] EXT4-fs (loop9): Remounting filesystem read-only [ 425.416930][T21703] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 425.466849][T21703] EXT4-fs (loop9): 1 orphan inode deleted [ 425.476116][T21703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.706985][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.740979][T19215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.784069][T21729] sch_fq: defrate 53322 ignored. [ 426.502854][T21750] netlink: 'syz.7.5596': attribute type 16 has an invalid length. [ 426.510872][T21750] netlink: 'syz.7.5596': attribute type 17 has an invalid length. [ 426.535402][T21750] bridge0: port 1(gretap0) entered blocking state [ 426.541890][T21750] bridge0: port 1(gretap0) entered forwarding state [ 426.551034][T21750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.558373][T21752] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5594'. [ 426.569052][T21750] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.580782][T21750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.617435][T21754] lo speed is unknown, defaulting to 1000 [ 427.190516][T21790] lo speed is unknown, defaulting to 1000 [ 427.929558][ T9179] Process accounting resumed [ 429.211405][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 429.211448][ T29] audit: type=1400 audit(1763664656.316:18372): avc: denied { name_bind } for pid=21868 comm="syz.0.5611" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 429.363806][T21852] syzkaller0: entered promiscuous mode [ 429.369719][T21852] syzkaller0: entered allmulticast mode [ 429.396017][ T29] audit: type=1400 audit(1763664656.426:18373): avc: denied { name_connect } for pid=21868 comm="syz.0.5611" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 429.475476][ T29] audit: type=1326 audit(1763664656.576:18374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.499116][ T29] audit: type=1326 audit(1763664656.576:18375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.522608][ T29] audit: type=1326 audit(1763664656.576:18376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.546230][ T29] audit: type=1326 audit(1763664656.576:18377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.569807][ T29] audit: type=1326 audit(1763664656.576:18378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.593476][ T29] audit: type=1326 audit(1763664656.576:18379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.617040][ T29] audit: type=1326 audit(1763664656.576:18380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.640681][ T29] audit: type=1326 audit(1763664656.576:18381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21876 comm="syz.6.5612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee3627f749 code=0x7ffc0000 [ 429.671117][T21884] netlink: 131740 bytes leftover after parsing attributes in process `syz.8.5615'. [ 429.689821][T21884] netlink: zone id is out of range [ 429.694991][T21884] netlink: zone id is out of range [ 429.701064][T21888] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.712373][T21884] netlink: zone id is out of range [ 429.717723][T21884] netlink: zone id is out of range [ 429.723006][T21884] netlink: zone id is out of range [ 429.733889][T21884] netlink: del zone limit has 8 unknown bytes [ 429.741958][T21888] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.745271][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5627'. [ 429.760658][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5627'. [ 429.917137][T21888] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.037600][T21903] lo speed is unknown, defaulting to 1000 [ 430.960984][T21888] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.627236][ T3588] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.960036][ T3588] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.992466][ T3588] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.944129][T21964] netlink: 'syz.7.5629': attribute type 1 has an invalid length. [ 432.973742][ T3588] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.142155][T21964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 433.601247][T21969] bond4: entered allmulticast mode [ 433.784563][T22010] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5632'. [ 433.799840][T21964] bond4: (slave ip6gretap1): making interface the new active one [ 433.807652][T21964] ip6gretap1: entered allmulticast mode [ 433.825179][T21964] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 433.944376][T22024] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5634'. [ 433.959020][T22027] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5637'. [ 434.307419][T22042] netlink: 2 bytes leftover after parsing attributes in process `syz.7.5635'. [ 434.330277][T22042] bridge0: port 1(gretap0) entered disabled state [ 434.337539][T22042] erspan0: left allmulticast mode [ 434.354337][T22042] wg2: left promiscuous mode [ 434.359021][T22042] wg2: left allmulticast mode [ 434.366391][T22042] bond2: left promiscuous mode [ 434.371267][T22042] bridge5: left promiscuous mode [ 434.376480][T22042] bond2: left allmulticast mode [ 434.381367][T22042] bridge5: left allmulticast mode [ 434.387673][T22042] veth20: left promiscuous mode [ 434.392556][T22042] veth20: left allmulticast mode [ 434.399132][T22042] veth23: left promiscuous mode [ 434.404529][T22042] bond4: left allmulticast mode [ 434.409464][T22042] ip6gretap1: left allmulticast mode [ 434.630243][ T3568] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.666445][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 434.666510][ T29] audit: type=1326 audit(1763664661.756:18601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10538565e7 code=0x7ffc0000 [ 434.696278][ T29] audit: type=1326 audit(1763664661.756:18602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10537fb829 code=0x7ffc0000 [ 434.719843][ T29] audit: type=1326 audit(1763664661.756:18603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10538565e7 code=0x7ffc0000 [ 434.743470][ T29] audit: type=1326 audit(1763664661.756:18604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10537fb829 code=0x7ffc0000 [ 434.767005][ T29] audit: type=1326 audit(1763664661.756:18605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 434.783816][ T3568] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.790676][ T29] audit: type=1326 audit(1763664661.756:18606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10538565e7 code=0x7ffc0000 [ 434.799161][ T3568] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.822459][ T29] audit: type=1326 audit(1763664661.756:18607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10537fb829 code=0x7ffc0000 [ 434.830823][ T3568] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.854342][ T29] audit: type=1326 audit(1763664661.756:18608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f105385f749 code=0x7ffc0000 [ 434.886620][ T29] audit: type=1326 audit(1763664661.976:18609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f10538565e7 code=0x7ffc0000 [ 434.910271][ T29] audit: type=1326 audit(1763664661.976:18610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22002 comm="syz.8.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f10537fb829 code=0x7ffc0000 [ 435.060628][T22056] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5644'. [ 435.069751][T22056] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5644'. [ 435.166031][T22053] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5640'. [ 435.294373][T22066] netlink: 'syz.0.5647': attribute type 1 has an invalid length. [ 435.368557][T22070] tipc: Enabling of bearer rejected, failed to enable media [ 435.406816][T22066] 8021q: adding VLAN 0 to HW filter on device bond8 [ 435.423123][T22109] loop9: detected capacity change from 0 to 1024 [ 435.481045][T22109] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.501223][T22066] bond8: entered allmulticast mode [ 435.517496][T22109] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4193: comm syz.9.5650: Allocating blocks 385-513 which overlap fs metadata [ 435.554105][T22109] EXT4-fs (loop9): pa ffff888106a4d7e0: logic 16, phys. 129, len 24 [ 435.562276][T22109] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 435.572851][T22109] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 435.574136][T22122] tipc: New replicast peer: 255.255.255.32 [ 435.585122][T22109] EXT4-fs (loop9): This should not happen!! Data will be lost [ 435.585122][T22109] [ 435.591012][T22122] tipc: Enabled bearer , priority 10 [ 435.600648][T22109] EXT4-fs (loop9): Total free blocks count 0 [ 435.612667][T22109] EXT4-fs (loop9): Free/Dirty block details [ 435.618623][T22109] EXT4-fs (loop9): free_blocks=128 [ 435.623751][T22109] EXT4-fs (loop9): dirty_blocks=0 [ 435.628831][T22109] EXT4-fs (loop9): Block reservation details [ 435.634857][T22109] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 435.704217][T22133] loop7: detected capacity change from 0 to 128 [ 435.711256][T22133] vfat: Unknown parameter '' [ 435.752842][T22142] 9pnet_fd: Insufficient options for proto=fd [ 435.935927][T22155] vhci_hcd: invalid port number 96 [ 435.941091][T22155] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 436.326696][T22164] loop7: detected capacity change from 0 to 1024 [ 436.347179][T22164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.386550][T22164] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.5667: Allocating blocks 385-513 which overlap fs metadata [ 436.420853][T22164] EXT4-fs (loop7): pa ffff8881054f5a10: logic 16, phys. 129, len 24 [ 436.428984][T22164] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 436.439340][T22164] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 436.451582][T22164] EXT4-fs (loop7): This should not happen!! Data will be lost [ 436.451582][T22164] [ 436.461474][T22164] EXT4-fs (loop7): Total free blocks count 0 [ 436.467657][T22164] EXT4-fs (loop7): Free/Dirty block details [ 436.473576][T22164] EXT4-fs (loop7): free_blocks=128 [ 436.478739][T22164] EXT4-fs (loop7): dirty_blocks=0 [ 436.483770][T22164] EXT4-fs (loop7): Block reservation details [ 436.489782][T22164] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 436.594724][T22181] block device autoloading is deprecated and will be removed. [ 436.606916][T22183] loop9: detected capacity change from 0 to 128 [ 436.658116][T22183] vfat: Unknown parameter '' [ 436.679854][T22190] loop7: detected capacity change from 0 to 512 [ 436.708003][T22190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.723481][T22190] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 436.731571][T22190] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 436.740066][T22190] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 436.749638][T22190] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 436.759633][T22190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 436.773019][T22190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.780386][T22190] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 436.793891][T22190] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.5674: dx entry: limit 65535 != root limit 120 [ 436.806113][T22190] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.5674: Corrupt directory, running e2fsck is recommended [ 436.935911][T14273] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.018802][T22223] loop7: detected capacity change from 0 to 128 [ 437.070249][T22234] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 437.168207][T22243] loop9: detected capacity change from 0 to 128 [ 437.763932][T22243] ================================================================== [ 437.772169][T22243] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 437.780196][T22243] [ 437.782535][T22243] write to 0xffff88811a186614 of 4 bytes by task 22247 on cpu 1: [ 437.790271][T22243] xas_set_mark+0x12b/0x140 [ 437.794800][T22243] tag_pages_for_writeback+0xc2/0x290 [ 437.800200][T22243] writeback_iter+0x340/0x820 [ 437.804903][T22243] mpage_writepages+0x87/0x1250 [ 437.809791][T22243] fat_writepages+0x24/0x30 [ 437.814329][T22243] do_writepages+0x1c6/0x310 [ 437.818949][T22243] file_write_and_wait_range+0x156/0x2c0 [ 437.824693][T22243] __generic_file_fsync+0x46/0x140 [ 437.829843][T22243] fat_file_fsync+0x49/0x100 [ 437.834455][T22243] vfs_fsync_range+0x10d/0x130 [ 437.839236][T22243] generic_file_write_iter+0x1b8/0x2f0 [ 437.844725][T22243] iter_file_splice_write+0x666/0xa60 [ 437.850120][T22243] direct_splice_actor+0x156/0x2a0 [ 437.855262][T22243] splice_direct_to_actor+0x312/0x680 [ 437.860743][T22243] do_splice_direct+0xda/0x150 [ 437.865541][T22243] do_sendfile+0x380/0x650 [ 437.869971][T22243] __x64_sys_sendfile64+0x105/0x150 [ 437.875192][T22243] x64_sys_call+0x2bb4/0x3000 [ 437.879893][T22243] do_syscall_64+0xd2/0x200 [ 437.884418][T22243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.890344][T22243] [ 437.892709][T22243] read to 0xffff88811a186614 of 4 bytes by task 22243 on cpu 0: [ 437.900361][T22243] file_write_and_wait_range+0x10e/0x2c0 [ 437.906013][T22243] __generic_file_fsync+0x46/0x140 [ 437.911144][T22243] fat_file_fsync+0x49/0x100 [ 437.915739][T22243] vfs_fsync_range+0x10d/0x130 [ 437.920518][T22243] generic_file_write_iter+0x1b8/0x2f0 [ 437.925989][T22243] iter_file_splice_write+0x666/0xa60 [ 437.931373][T22243] direct_splice_actor+0x156/0x2a0 [ 437.936494][T22243] splice_direct_to_actor+0x312/0x680 [ 437.941877][T22243] do_splice_direct+0xda/0x150 [ 437.946689][T22243] do_sendfile+0x380/0x650 [ 437.951224][T22243] __x64_sys_sendfile64+0x105/0x150 [ 437.956448][T22243] x64_sys_call+0x2bb4/0x3000 [ 437.961160][T22243] do_syscall_64+0xd2/0x200 [ 437.965671][T22243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.971572][T22243] [ 437.973932][T22243] value changed: 0x02000021 -> 0x04000021 [ 437.979654][T22243] [ 437.981977][T22243] Reported by Kernel Concurrency Sanitizer on: [ 437.988135][T22243] CPU: 0 UID: 0 PID: 22243 Comm: syz.9.5688 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 437.999597][T22243] Tainted: [W]=WARN [ 438.003399][T22243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 438.013459][T22243] ==================================================================