last executing test programs: 2.067082371s ago: executing program 3 (id=603): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$UHID_DESTROY(r1, &(0x7f00000002c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r4, &(0x7f0000000080)='./mnt\x00', r4, &(0x7f0000000100)='./mnt\x00') unlinkat(r4, &(0x7f00000000c0)='./mnt\x00', 0x200) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000805"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) fsetxattr$security_selinux(r6, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 2.001331426s ago: executing program 1 (id=604): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x507, &(0x7f0000001500)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents64(r2, &(0x7f0000000080)=""/95, 0x5f) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0), 0x15) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) 1.970997329s ago: executing program 3 (id=605): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.812927142s ago: executing program 1 (id=606): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x507, &(0x7f0000001500)="$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") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents64(r4, &(0x7f0000000080)=""/95, 0x5f) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="94d1b94541881f9f1fc7ea5e48f9527965ad25cdaee722abb99888d306856e64ea843a5abbac88b1d75e8d6a30002f900f11cc7cc3d3580e2ff32d48da9eed29fb47a8256126544cebd3064d7ce66bf82a3a4ab5f74f70b87fcc7b43de6d768a8199a3f0691cf3c7fdaf2516ba6d806127bdd4b848fb04f85e", @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRESOCT=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000002c0), 0x15) splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x19404, 0x0) 1.642108386s ago: executing program 0 (id=608): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$nci(r0, 0x0, 0xfffffeea) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601030000000000004000000000020c00078008001240000046650500010006000000050005000a00000005000400000000000900020073797a31000000fd44e3000d000300686173683a6e657400"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000880)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000001800)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xff, 0x4, @empty, 0x8}, r6}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r7 = socket$inet(0x2, 0x801, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xac9a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r10}, 0x18) sendmmsg$inet6(r8, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000340)={0xe0002039}) epoll_pwait(0xffffffffffffffff, &(0x7f00008c9fc4)=[{}], 0x155555555555571a, 0xfdfffff3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f00000002c0)={0x60000002}) 1.637602986s ago: executing program 1 (id=609): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0608000000000000002df20000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)="eed47751a0", 0x5}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r6, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x1, 0xe4, 0x0, 0x0, 0x0, 0x2}) 1.614774918s ago: executing program 3 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000037714547112841ab7fe300"/38], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8=r7, @ANYRES32=r7, @ANYRESHEX=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, r8, 0x9, 0x0, 0x25dfdbfb, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1.512001276s ago: executing program 2 (id=611): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="f72bacc3ca1aaadf08e239411cbcf4b2ef918084f500db36e2ef38b56d756f041132ccc67bec238c21e52da753", 0x2d, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000957273091ff8fe3bb844d787724e59ae"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@deltaction={0x1a8, 0x31, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6c}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1a8}}, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) socket$nl_xfrm(0x10, 0x3, 0x6) msgrcv(0xffffffffffffffff, &(0x7f0000000240)={0x0, ""/135}, 0x8f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) 1.397388556s ago: executing program 4 (id=613): r0 = memfd_create(0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x400) 1.360695878s ago: executing program 1 (id=614): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x507, &(0x7f0000001500)="$eJzs3c9vG1kdAPCvnThx0nSTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkLohcaModhzFztKEHtIzVyQqcYIjfwDnnrhzQfTGpRyQ+BGBGiQORjOepG5iN1GT2mn8+UijeW/e1N/3ms578TeNXwBD61pE7EbEWER8FhHT2fVcdsTH7SO578nevaX9vXtLuWi1Pv1nLm1PrkXHn0lcyV6zGBE/+l7ET3PH4za2d9YWq9XKZlafbdY2ZhvbOzdXa4srlZXKerm8ML8w9+GtD8rnNta3a2NZ6auP/7j7rZ8n3ZrKrnSO4zy1h144jJMYjYgfvIxgAzCSjWds0B3hheQj4o2IeCd9/qdjJP1qAgCXWas1Ha3pzvpxV3tcBwBeTfk0B5bLl7JcwFTk86VSO4f3Zkzmq/VG88ad+tb6cjtXNhOF/J3VamUuyxXORCGX1OfT8tN6+Uj9VkS8HhG/HJ9I66WlenV5kN/4AMAQu3Jk/f/PeHv9BwAuueKgOwAA9J31HwCGj/UfAIaP9R8Ahk97/Z8YdDcAgD7y/h8Aho/1HwCGyg8/+SQ5WvvZ518vf769tVb//OZypbFWqm0tlZbqmxullXp9Jf3MntpJr1et1zfm34+tuzPf3mg0ZxvbO7dr9a315u30c71vVwrpXbt9GBkA0Mvrbz98lEtW5I8m0iM69nIoDLRnwMuWH3QHgIEZGXQHgIGx2xcMrzO8x5cegEuiyxa9zyh2+wWhVqvVkkOAV9b1L8n/w7DqWLv9L2AYMvL/MLzk/2F4tVq50+7tH6e9EQC42OT4gR4//38jO/8u++HAT5aP3vHgZfYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALraD/X9L2V7gU5HPl0oRVyNiJgq5O6vVylxEvBYRfx4vjCf1+QH3GQA4q/zfctn+X9en35t6pumtK4fFsYj42a8//dXdxWZz808RY7l/jR9cbz7Irpf733sA4GQH63R67ngj/2Tv3tLB0c/+/P27EVFsx9/fG4v9w/ijMZqei1GIiMl/57J6W64jd3EWu/cj4ovdxp+LqTQH0t759Gj8JPbVvsbPPxM/n7a1z8nfxRfOoS8wbB4m88/H3Z6/fFxLz92f/2I6Q51dNv8lL7W0n86BT+MfzH8jPea/a6eN8f4fvt8uTRxvux/x5dGIg9j7HfPPQfxcj/jvnTL+X77y1ju92lq/ibge3eN3xppt1jZmG9s7N1driyuVlcp6ubwwvzD34a0PyrNpjnq292rwj49uvNarLRn/ZI/4xRPG//VTjv+3//vsx197Tvxvvtstfj7efE78ZE38xinjL07+vtirLYm/3GP8J339b5wy/uO/7hzbNhwAGJzG9s7aYrVa2XyFCo+S72kG3w2F/heSf7IXoBtdC9/pV6yx6N70i3fbz/SRplbrhWL1mjHOI+sGXASHD31E/HfQnQEAAAAAAAAAAAAAALrqx28sDXqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXF7/DwAA//+J3Mo+") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents64(r4, &(0x7f0000000080)=""/95, 0x5f) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="94d1b94541881f9f1fc7ea5e48f9527965ad25cdaee722abb99888d306856e64ea843a5abbac88b1d75e8d6a30002f900f11cc7cc3d3580e2ff32d48da9eed29fb47a8256126544cebd3064d7ce66bf82a3a4ab5f74f70b87fcc7b43de6d768a8199a3f0691cf3c7fdaf2516ba6d806127bdd4b848fb04f85e", @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRESOCT=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) socket(0x10, 0x3, 0x9) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r7, &(0x7f00000002c0), 0x15) splice(r6, 0x0, r8, 0x0, 0x19404, 0x0) 1.304140363s ago: executing program 4 (id=615): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xdc2, &(0x7f0000001c00)=ANY=[@ANYRES32=0x0], 0x0) 1.284197315s ago: executing program 4 (id=616): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x507, &(0x7f0000001500)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0), 0x15) splice(r2, 0x0, r4, 0x0, 0x19404, 0x0) 1.1054402s ago: executing program 4 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x84, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 1.091729541s ago: executing program 0 (id=618): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00', 0x2) 1.071530932s ago: executing program 1 (id=619): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'ip6gretap0\x00', 0x400}) readv(r1, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0x18}], 0x1) 1.050843544s ago: executing program 2 (id=620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1.012323797s ago: executing program 0 (id=621): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000037714547112841ab7fe300"/38], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, 0x0, 0x9, 0x0, 0x25dfdbfb, {0x25}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 993.765568ms ago: executing program 0 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f0000000400ffdb0400000022"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="24000000010006", 0x7) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = dup(r2) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="5e421a8263bd07cf2ce6829952043658cc52d47aa0b461ad550a1adc0a86dd5d8ca732000000000000", &(0x7f0000000200)=@tcp=r3, 0x1}, 0xfffffffffffffe94) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) socket(0x400000000010, 0x3, 0x0) mq_unlink(&(0x7f0000000400)='(.,\xbe:$*}$}/+') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 968.222751ms ago: executing program 2 (id=624): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0608000000000000002df20000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001e80)={{0x1, 0x1, 0x18, r1}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)="eed47751a0", 0x5}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7, &(0x7f0000000040)=[{}], 0x1, 0xe4, 0x0, 0x0, 0x0, 0x2}) 789.623315ms ago: executing program 2 (id=625): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x84, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x8c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x5, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 644.686177ms ago: executing program 3 (id=626): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0xdc2, &(0x7f0000001c00)=ANY=[@ANYRES32=0x0], 0x0) 644.328447ms ago: executing program 2 (id=627): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x20, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x34}}, 0x8000) 618.677479ms ago: executing program 3 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000), 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 501.833778ms ago: executing program 0 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001080)=0x0, &(0x7f00000010c0)=0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000001100)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r1], &(0x7f0000000880)='GPL\x00', 0x10, 0x0, 0x0, 0x40f00, 0x13, '\x00', r7, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r9, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r9, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r9, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) flistxattr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x142) 470.800551ms ago: executing program 2 (id=630): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="f72bacc3ca1aaadf08e239411cbcf4b2ef918084f500db36e2ef38b56d756f041132ccc67bec238c21e52da753", 0x2d, 0x0, &(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000957273091ff8fe3bb844d787724e59ae"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@deltaction={0x1a8, 0x31, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6c}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfe}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x1a8}}, 0x0) readv(r0, &(0x7f0000000500)=[{&(0x7f0000002100)=""/4076, 0x2d}], 0x57) socket$nl_xfrm(0x10, 0x3, 0x6) msgrcv(0xffffffffffffffff, &(0x7f0000000240)={0x0, ""/135}, 0x8f, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) 190.911914ms ago: executing program 0 (id=631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_format(r2, &(0x7f0000000040)='-1\x00', 0x3) 88.009922ms ago: executing program 3 (id=632): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r2, 0x0, 0x3, 0x1}}, 0x20) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r0, &(0x7f00000003c0)='./file0\x00', 0x2) 696.279µs ago: executing program 4 (id=633): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x84, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 0s ago: executing program 1 (id=634): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$UHID_DESTROY(r1, &(0x7f00000002c0), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r4, &(0x7f0000000080)='./mnt\x00', r4, &(0x7f0000000100)='./mnt\x00') unlinkat(r4, &(0x7f00000000c0)='./mnt\x00', 0x200) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="00002abd7000fedbdf25020000000500050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) pipe(&(0x7f0000005880)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000900000805"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) kernel console output (not intermixed with test programs): netdevsim0: renamed from eth0 [ 37.110755][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.120980][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.137751][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.174508][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.200336][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.209182][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.225533][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.234853][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.248692][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.274609][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.288476][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.295580][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.305721][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.323213][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.330329][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.350714][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.371200][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.378288][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.396463][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.406682][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.419435][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.426720][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.442988][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.458250][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.465359][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.480312][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.487513][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.497598][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.515470][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.522674][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.532916][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.540078][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.613213][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.630522][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.673190][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.688410][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.695630][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.715204][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.722477][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.742366][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.759165][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.784280][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.819685][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.873646][ T3301] veth0_vlan: entered promiscuous mode [ 37.904949][ T3301] veth1_vlan: entered promiscuous mode [ 37.924271][ T3302] veth0_vlan: entered promiscuous mode [ 37.933294][ T3302] veth1_vlan: entered promiscuous mode [ 37.958628][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.978395][ T3302] veth0_macvtap: entered promiscuous mode [ 37.995875][ T3302] veth1_macvtap: entered promiscuous mode [ 38.005270][ T3301] veth0_macvtap: entered promiscuous mode [ 38.028514][ T3301] veth1_macvtap: entered promiscuous mode [ 38.048036][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.074548][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.084067][ T3309] veth0_vlan: entered promiscuous mode [ 38.092735][ T3309] veth1_vlan: entered promiscuous mode [ 38.103468][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.119366][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.132253][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.162213][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.173471][ T3309] veth0_macvtap: entered promiscuous mode [ 38.181660][ T3308] veth0_vlan: entered promiscuous mode [ 38.193278][ T3308] veth1_vlan: entered promiscuous mode [ 38.200314][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.209464][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.218782][ T3309] veth1_macvtap: entered promiscuous mode [ 38.234957][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.260108][ T3311] veth0_vlan: entered promiscuous mode [ 38.268291][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.275036][ T3308] veth0_macvtap: entered promiscuous mode [ 38.290842][ T2153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.300522][ T3308] veth1_macvtap: entered promiscuous mode [ 38.313271][ T3311] veth1_vlan: entered promiscuous mode [ 38.326822][ T2153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.337994][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.348016][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.370479][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.381245][ T2153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.389110][ T3474] loop1: detected capacity change from 0 to 512 [ 38.398182][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.411215][ T3474] ======================================================= [ 38.411215][ T3474] WARNING: The mand mount option has been deprecated and [ 38.411215][ T3474] and is ignored by this kernel. Remove the mand [ 38.411215][ T3474] option from the mount to silence this warning. [ 38.411215][ T3474] ======================================================= [ 38.411782][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 38.411800][ T29] audit: type=1400 audit(1754340023.616:93): avc: denied { prog_load } for pid=3471 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.472287][ T29] audit: type=1400 audit(1754340023.616:94): avc: denied { bpf } for pid=3471 comm="syz.3.4" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.492991][ T29] audit: type=1400 audit(1754340023.616:95): avc: denied { perfmon } for pid=3471 comm="syz.3.4" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.513570][ T29] audit: type=1400 audit(1754340023.616:96): avc: denied { prog_run } for pid=3471 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.539192][ T2153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.551617][ T3311] veth0_macvtap: entered promiscuous mode [ 38.561205][ T3472] loop3: detected capacity change from 0 to 512 [ 38.576798][ T3474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.588158][ T2153] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.590813][ T3474] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.600106][ T3311] veth1_macvtap: entered promiscuous mode [ 38.614374][ T29] audit: type=1400 audit(1754340023.796:97): avc: denied { mount } for pid=3473 comm="syz.1.2" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.620338][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.646599][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.663037][ T2153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.666355][ T3472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 38.687448][ T3472] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.697168][ T3474] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2: corrupted inode contents [ 38.698382][ T29] audit: type=1400 audit(1754340023.896:98): avc: denied { add_name } for pid=3473 comm="syz.1.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.711717][ T3474] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2: mark_inode_dirty error [ 38.729726][ T29] audit: type=1400 audit(1754340023.906:99): avc: denied { create } for pid=3473 comm="syz.1.2" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.763130][ T3474] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2: corrupted inode contents [ 38.786271][ T2153] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.795019][ T2153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.830060][ T3474] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2: mark_inode_dirty error [ 38.842346][ T2153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.875123][ T2153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.884911][ T29] audit: type=1400 audit(1754340024.076:100): avc: denied { create } for pid=3482 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.905259][ T29] audit: type=1400 audit(1754340024.076:101): avc: denied { write } for pid=3482 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.925307][ T29] audit: type=1400 audit(1754340024.076:102): avc: denied { read } for pid=3482 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.986009][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.998265][ T3474] syz.1.2 (3474) used greatest stack depth: 10912 bytes left [ 39.015246][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.043204][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.053269][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.062118][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.075135][ T3491] loop0: detected capacity change from 0 to 512 [ 39.240676][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.451616][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.470528][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.519054][ T3491] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.564169][ T3503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 39.795254][ T3513] loop4: detected capacity change from 0 to 512 [ 39.797853][ T3513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.055282][ T3513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.063197][ T3513] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5: Failed to acquire dquot type 1 [ 40.075741][ T3513] EXT4-fs (loop4): 1 truncate cleaned up [ 40.084626][ T3513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.150334][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.192494][ T3529] loop2: detected capacity change from 0 to 512 [ 40.195082][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10'. [ 40.209389][ T3529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.227439][ T3529] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.237450][ T3529] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.8: Failed to acquire dquot type 1 [ 40.251415][ T3529] EXT4-fs (loop2): 1 truncate cleaned up [ 40.259005][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.375398][ C0] hrtimer: interrupt took 16460 ns [ 40.400577][ T3535] loop3: detected capacity change from 0 to 2048 [ 40.471919][ T3535] loop3: p1 < > p4 [ 40.477954][ T3535] loop3: p4 size 8388608 extends beyond EOD, truncated [ 40.487098][ T3540] loop0: detected capacity change from 0 to 512 [ 40.519614][ T3540] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.557005][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.566844][ T3540] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.580519][ T3540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.590830][ T3540] EXT4-fs (loop0): Unsupported encryption level 255 [ 40.829530][ T3536] loop1: detected capacity change from 0 to 512 [ 40.914327][ T3536] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.940581][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.243177][ T3536] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.422331][ T3536] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.443466][ T3566] loop4: detected capacity change from 0 to 512 [ 41.451633][ T3566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.480914][ T3566] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.489814][ T3566] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.20: Failed to acquire dquot type 1 [ 41.504451][ T3566] EXT4-fs (loop4): 1 truncate cleaned up [ 41.514798][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.579580][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.613416][ T3573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3573 comm=syz.0.21 [ 41.664983][ T3575] loop2: detected capacity change from 0 to 128 [ 41.681938][ T3575] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.713724][ T3575] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.743511][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 41.744533][ T3579] loop3: detected capacity change from 0 to 2048 [ 41.787501][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.806408][ T3517] loop3: p1 < > p4 [ 41.812357][ T3517] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.828868][ T3584] loop2: detected capacity change from 0 to 1024 [ 41.839259][ T3584] EXT4-fs: inline encryption not supported [ 41.845597][ T3584] EXT4-fs: Ignoring removed i_version option [ 41.852751][ T3579] loop3: p1 < > p4 [ 41.858508][ T3584] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.868038][ T3581] syz.1.22 (3581) used greatest stack depth: 10176 bytes left [ 41.879252][ T3579] loop3: p4 size 8388608 extends beyond EOD, truncated [ 41.930361][ T3584] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.26: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.948219][ T3584] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.26: Failed to acquire dquot type 0 [ 41.997172][ T3584] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.26: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.017248][ T3587] loop1: detected capacity change from 0 to 128 [ 42.046725][ T3587] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.071991][ T3584] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.26: Invalid inode bitmap blk 0 in block_group 0 [ 42.106183][ T3438] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.123435][ T3587] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.123676][ T3584] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 42.144069][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 42.164568][ T3584] EXT4-fs (loop2): 1 orphan inode deleted [ 42.176622][ T3584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.188888][ T3438] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 42.231957][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.253950][ T3577] loop0: detected capacity change from 0 to 512 [ 42.286902][ T3587] netlink: 16022 bytes leftover after parsing attributes in process `syz.1.27'. [ 42.314699][ T3597] loop4: detected capacity change from 0 to 512 [ 42.326022][ T3601] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 42.340559][ T3599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 42.363471][ T3597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.383303][ T3597] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.399613][ T3577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.428843][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.478345][ T3577] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.500221][ T3610] loop3: detected capacity change from 0 to 512 [ 42.515690][ T3577] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.592547][ T3610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.602312][ T3610] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.607907][ T3609] loop1: detected capacity change from 0 to 512 [ 42.609437][ T3610] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.31: Failed to acquire dquot type 1 [ 42.629198][ T3610] EXT4-fs (loop3): 1 truncate cleaned up [ 42.638832][ T3609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.674494][ T3609] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.681651][ T3610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.688107][ T3609] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.32: Failed to acquire dquot type 1 [ 42.715071][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.729260][ T3609] EXT4-fs (loop1): 1 truncate cleaned up [ 42.735567][ T3609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.751234][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.768370][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.785045][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 42.858733][ T3618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34'. [ 42.922843][ T3625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 43.097944][ T3631] loop0: detected capacity change from 0 to 512 [ 43.138560][ T3631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.175035][ T3631] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.179308][ T3638] loop4: detected capacity change from 0 to 1024 [ 43.192787][ T3638] EXT4-fs: inline encryption not supported [ 43.198811][ T3638] EXT4-fs: Ignoring removed i_version option [ 43.216749][ T3638] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.307044][ T3622] loop2: detected capacity change from 0 to 512 [ 43.338122][ T3638] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.40: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.370103][ T3638] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.40: Failed to acquire dquot type 0 [ 43.382781][ T3638] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.40: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.398225][ T3638] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.40: Invalid inode bitmap blk 0 in block_group 0 [ 43.411826][ T3638] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 43.423066][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.429310][ T3438] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.434594][ T3638] EXT4-fs (loop4): 1 orphan inode deleted [ 43.446898][ T3622] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.462702][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.467620][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.485492][ T3438] __quota_error: 216 callbacks suppressed [ 43.485517][ T3438] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 43.500735][ T3438] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 43.548565][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.550847][ T29] audit: type=1326 audit(1754340028.756:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 43.581781][ T29] audit: type=1326 audit(1754340028.766:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 43.605540][ T29] audit: type=1326 audit(1754340028.766:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 43.629243][ T29] audit: type=1326 audit(1754340028.766:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 43.653554][ T29] audit: type=1326 audit(1754340028.816:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 43.677042][ T29] audit: type=1326 audit(1754340028.816:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 43.700321][ T29] audit: type=1326 audit(1754340028.856:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3649 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4fc0361425 code=0x7ffc0000 [ 43.726967][ T29] audit: type=1400 audit(1754340028.886:311): avc: denied { ioctl } for pid=3637 comm="syz.4.40" path="socket:[5045]" dev="sockfs" ino=5045 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.751810][ T29] audit: type=1326 audit(1754340028.916:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.3.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 43.802417][ T3622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.829412][ T3622] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.877509][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.896974][ T3646] loop1: detected capacity change from 0 to 512 [ 43.927456][ T3661] netlink: 'syz.0.46': attribute type 10 has an invalid length. [ 43.935335][ T3663] loop4: detected capacity change from 0 to 512 [ 43.947439][ T3646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.960400][ T3646] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.960508][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.985756][ T3661] bridge0: port 3(team0) entered blocking state [ 43.992289][ T3661] bridge0: port 3(team0) entered disabled state [ 44.007507][ T3663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.015031][ T3661] team0: entered allmulticast mode [ 44.025405][ T3661] team_slave_0: entered allmulticast mode [ 44.031505][ T3661] team_slave_1: entered allmulticast mode [ 44.039447][ T3661] team0: entered promiscuous mode [ 44.044609][ T3661] team_slave_0: entered promiscuous mode [ 44.050425][ T3661] team_slave_1: entered promiscuous mode [ 44.057045][ T3661] bridge0: port 3(team0) entered blocking state [ 44.063432][ T3661] bridge0: port 3(team0) entered forwarding state [ 44.071818][ T3663] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.114053][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.157477][ T3675] loop2: detected capacity change from 0 to 512 [ 44.193495][ T3680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 44.215011][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.239821][ T3675] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.302239][ T3685] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 44.331855][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.372617][ T3687] loop2: detected capacity change from 0 to 128 [ 44.387440][ T3687] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.424555][ T3687] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.453213][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.494913][ T3695] loop1: detected capacity change from 0 to 512 [ 44.502768][ T3693] loop0: detected capacity change from 0 to 2048 [ 44.524324][ T3695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.543007][ T2153] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.557268][ T3695] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.579304][ T3522] loop0: p1 < > p4 [ 44.591177][ T3522] loop0: p4 size 8388608 extends beyond EOD, truncated [ 44.593834][ T3677] loop4: detected capacity change from 0 to 512 [ 44.608379][ T3693] loop0: p1 < > p4 [ 44.618556][ T3693] loop0: p4 size 8388608 extends beyond EOD, truncated [ 44.625666][ T3699] loop2: detected capacity change from 0 to 2048 [ 44.691428][ T3519] loop2: p1 < > p4 [ 44.691803][ T3677] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.705310][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.722735][ T3519] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.725516][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 44.733205][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 44.745752][ T3699] loop2: p1 < > p4 [ 44.773152][ T3699] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.809922][ T3677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.825210][ T3677] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.897834][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.904339][ T3714] loop1: detected capacity change from 0 to 1024 [ 44.921128][ T3519] udevd[3519]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 44.938043][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 44.948505][ T3713] loop2: detected capacity change from 0 to 1024 [ 44.967696][ T3715] __nla_validate_parse: 3 callbacks suppressed [ 44.967710][ T3715] netlink: 16 bytes leftover after parsing attributes in process `syz.0.60'. [ 45.063833][ T3713] EXT4-fs: inline encryption not supported [ 45.069934][ T3713] EXT4-fs: Ignoring removed i_version option [ 45.087924][ T3713] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.110946][ T3714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.132049][ T3713] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.62: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.188753][ T3728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.63'. [ 45.197611][ T3728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 45.265915][ T3713] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.62: Failed to acquire dquot type 0 [ 45.371755][ T3713] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.62: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.511241][ T3713] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.62: Invalid inode bitmap blk 0 in block_group 0 [ 45.589732][ T3713] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 45.624726][ T3713] EXT4-fs (loop2): 1 orphan inode deleted [ 45.644191][ T3438] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.645419][ T3713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.706173][ T3438] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 45.720075][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.808836][ T3746] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 46.974509][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.022328][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.70'. [ 47.031226][ T3753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.70'. [ 47.049686][ T3765] loop0: detected capacity change from 0 to 512 [ 47.108833][ T3768] netlink: 16 bytes leftover after parsing attributes in process `syz.2.72'. [ 47.154715][ T3753] syz.4.70 (3753) used greatest stack depth: 10144 bytes left [ 47.169248][ T3765] EXT4-fs (loop0): too many log groups per flexible block group [ 47.169412][ T3765] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 47.169442][ T3765] EXT4-fs (loop0): mount failed [ 47.282907][ T3781] loop4: detected capacity change from 0 to 2048 [ 47.341931][ T3781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.369976][ T3781] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.385170][ T3781] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 47.397697][ T3781] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.397697][ T3781] [ 47.407542][ T3781] EXT4-fs (loop4): Total free blocks count 0 [ 47.413606][ T3781] EXT4-fs (loop4): Free/Dirty block details [ 47.417990][ T3792] syz.2.77 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 47.419591][ T3781] EXT4-fs (loop4): free_blocks=2415919104 [ 47.435584][ T3781] EXT4-fs (loop4): dirty_blocks=32 [ 47.441042][ T3781] EXT4-fs (loop4): Block reservation details [ 47.447327][ T3781] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 47.592878][ T3789] vxcan1: entered allmulticast mode [ 47.636739][ T3781] syz.4.75 (3781) used greatest stack depth: 9864 bytes left [ 47.721488][ T3800] loop3: detected capacity change from 0 to 2048 [ 47.739168][ T2153] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.826575][ T3517] loop3: p1 < > p4 [ 47.877715][ T3517] loop3: p4 size 8388608 extends beyond EOD, truncated [ 47.935638][ T3800] loop3: p1 < > p4 [ 47.940184][ T3800] loop3: p4 size 8388608 extends beyond EOD, truncated [ 47.967394][ T2992] loop3: p1 < > p4 [ 47.973098][ T3806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.82'. [ 47.985644][ T2992] loop3: p4 size 8388608 extends beyond EOD, truncated [ 47.993137][ T3804] loop0: detected capacity change from 0 to 2048 [ 48.012924][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 48.015989][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.022048][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 48.023720][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.029137][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 48.030527][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 48.161100][ T3519] loop0: p1 < > p4 [ 48.169130][ T3519] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.178614][ T3804] loop0: p1 < > p4 [ 48.179301][ T3804] loop0: p4 size 8388608 extends beyond EOD, truncated [ 48.192634][ T3823] loop1: detected capacity change from 0 to 128 [ 48.193436][ T3823] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.218625][ T3823] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.284055][ T3826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 48.302317][ T2153] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.337394][ T3829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 48.425670][ T3836] loop1: detected capacity change from 0 to 2048 [ 48.436942][ T3838] loop3: detected capacity change from 0 to 128 [ 48.455489][ T3840] netlink: 16 bytes leftover after parsing attributes in process `syz.4.93'. [ 48.470375][ T3838] wireguard0: entered promiscuous mode [ 48.496833][ T3519] loop1: p1 < > p4 [ 48.497586][ T3519] loop1: p4 size 8388608 extends beyond EOD, truncated [ 48.502323][ T3836] loop1: p1 < > p4 [ 48.626146][ T3836] loop1: p4 size 8388608 extends beyond EOD, truncated [ 48.644263][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 48.644284][ T29] audit: type=1400 audit(2000000001.500:620): avc: denied { execmem } for pid=3845 comm="syz.2.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.670149][ T29] audit: type=1400 audit(2000000001.570:621): avc: denied { read write } for pid=3837 comm="syz.4.93" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 48.694194][ T29] audit: type=1400 audit(2000000001.570:622): avc: denied { open } for pid=3837 comm="syz.4.93" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 48.727874][ T29] audit: type=1400 audit(2000000001.670:623): avc: denied { create } for pid=3852 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.747372][ T29] audit: type=1400 audit(2000000001.670:624): avc: denied { read } for pid=3852 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.766567][ T29] audit: type=1400 audit(2000000001.670:625): avc: denied { create } for pid=3852 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.786223][ T29] audit: type=1400 audit(2000000001.680:626): avc: denied { ioctl } for pid=3852 comm="syz.0.96" path="socket:[6292]" dev="sockfs" ino=6292 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.811672][ T29] audit: type=1400 audit(2000000001.680:627): avc: denied { bind } for pid=3852 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.831341][ T29] audit: type=1400 audit(2000000001.680:628): avc: denied { setopt } for pid=3852 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.851507][ T29] audit: type=1400 audit(2000000001.680:629): avc: denied { write } for pid=3852 comm="syz.0.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.959771][ T3860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3860 comm=syz.1.98 [ 49.101337][ T3867] loop4: detected capacity change from 0 to 512 [ 49.204301][ T3867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.287323][ T3867] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.313074][ T3872] loop1: detected capacity change from 0 to 1024 [ 49.338117][ T3872] EXT4-fs: inline encryption not supported [ 49.344278][ T3872] EXT4-fs: Ignoring removed i_version option [ 49.355945][ T3872] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.369610][ T3872] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.101: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.396136][ T3872] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.101: Failed to acquire dquot type 0 [ 49.411436][ T3876] loop3: detected capacity change from 0 to 512 [ 49.435080][ T3876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.448002][ T3866] loop0: detected capacity change from 0 to 2048 [ 49.456062][ T3876] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.458863][ T3872] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.101: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.471938][ T3867] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.97: bg 0: block 289: padding at end of block bitmap is not set [ 49.480374][ T3872] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.101: Invalid inode bitmap blk 0 in block_group 0 [ 49.507813][ T3872] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 49.516714][ T2153] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.522661][ T3880] loop2: detected capacity change from 0 to 128 [ 49.534497][ T3872] EXT4-fs (loop1): 1 orphan inode deleted [ 49.538828][ T3880] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.548345][ T3866] loop0: p1 < > p4 [ 49.558149][ T3872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.570739][ T3880] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.575837][ T2153] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 49.590190][ T3866] loop0: p4 size 8388608 extends beyond EOD, truncated [ 49.625916][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.642680][ T2153] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.834780][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.860229][ T3900] loop0: detected capacity change from 0 to 128 [ 49.877612][ T3900] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.914518][ T3906] loop2: detected capacity change from 0 to 512 [ 49.920956][ T3904] loop1: detected capacity change from 0 to 1024 [ 49.928803][ T3900] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.952959][ T3908] netlink: 'syz.4.114': attribute type 2 has an invalid length. [ 49.963343][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.978849][ T2153] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.990068][ T3906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.035253][ T3906] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.076004][ T3906] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.115: bg 0: block 289: padding at end of block bitmap is not set [ 50.122347][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.171932][ T3918] mmap: syz.0.116 (3918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.193225][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.274917][ T3928] __nla_validate_parse: 7 callbacks suppressed [ 50.274939][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 50.322742][ T3936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.124'. [ 50.394670][ T3942] loop2: detected capacity change from 0 to 128 [ 50.407934][ T3942] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.411420][ T3944] loop4: detected capacity change from 0 to 128 [ 50.431299][ T3944] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.446142][ T3942] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.474768][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.484497][ T3944] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.541697][ T3949] loop2: detected capacity change from 0 to 1024 [ 50.550786][ T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.551783][ T3949] EXT4-fs: inline encryption not supported [ 50.565896][ T3949] EXT4-fs: Ignoring removed i_version option [ 50.578183][ T3915] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 50.590336][ T3949] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.603450][ T3949] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.130: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.618589][ T3949] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.130: Failed to acquire dquot type 0 [ 50.638222][ T3949] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.130: Freeing blocks not in datazone - block = 0, count = 4096 [ 50.651849][ T3949] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.130: Invalid inode bitmap blk 0 in block_group 0 [ 50.689332][ T3949] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 50.700438][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.718000][ T3949] EXT4-fs (loop2): 1 orphan inode deleted [ 50.724280][ T3949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.733861][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 50.747578][ T3960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'. [ 50.769778][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.795291][ T3965] 9pnet_fd: Insufficient options for proto=fd [ 50.852601][ T3967] loop4: detected capacity change from 0 to 128 [ 50.860045][ T3967] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.879032][ T3971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 50.892687][ T3967] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.923707][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.941260][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.054815][ T3988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.146'. [ 51.078218][ T3989] loop2: detected capacity change from 0 to 512 [ 51.112584][ T3989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.127763][ T3988] netlink: 'syz.4.146': attribute type 2 has an invalid length. [ 51.156188][ T3989] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.229246][ T4002] FAULT_INJECTION: forcing a failure. [ 51.229246][ T4002] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.243056][ T4002] CPU: 1 UID: 0 PID: 4002 Comm: syz.3.148 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 51.243099][ T4002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.243114][ T4002] Call Trace: [ 51.243122][ T4002] [ 51.243132][ T4002] __dump_stack+0x1d/0x30 [ 51.243156][ T4002] dump_stack_lvl+0xe8/0x140 [ 51.243221][ T4002] dump_stack+0x15/0x1b [ 51.243239][ T4002] should_fail_ex+0x265/0x280 [ 51.243317][ T4002] should_fail+0xb/0x20 [ 51.243351][ T4002] should_fail_usercopy+0x1a/0x20 [ 51.243376][ T4002] _copy_from_user+0x1c/0xb0 [ 51.243404][ T4002] ___sys_sendmsg+0xc1/0x1d0 [ 51.243530][ T4002] __sys_sendmmsg+0x178/0x300 [ 51.243577][ T4002] __x64_sys_sendmmsg+0x57/0x70 [ 51.243669][ T4002] x64_sys_call+0x1c4a/0x2ff0 [ 51.243693][ T4002] do_syscall_64+0xd2/0x200 [ 51.243719][ T4002] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.243766][ T4002] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.243790][ T4002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.243815][ T4002] RIP: 0033:0x7f4fc032eb69 [ 51.243836][ T4002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.243890][ T4002] RSP: 002b:00007f4fbe94d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 51.243909][ T4002] RAX: ffffffffffffffda RBX: 00007f4fc0556160 RCX: 00007f4fc032eb69 [ 51.243922][ T4002] RDX: 0000000000000002 RSI: 0000200000000600 RDI: 0000000000000003 [ 51.243935][ T4002] RBP: 00007f4fbe94d090 R08: 0000000000000000 R09: 0000000000000000 [ 51.243948][ T4002] R10: 0000000004008440 R11: 0000000000000246 R12: 0000000000000001 [ 51.243961][ T4002] R13: 0000000000000000 R14: 00007f4fc0556160 R15: 00007ffff29a4cc8 [ 51.244045][ T4002] [ 51.550375][ T4013] loop4: detected capacity change from 0 to 128 [ 51.558919][ T4013] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 51.584215][ T4014] loop0: detected capacity change from 0 to 512 [ 51.594861][ T4014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.606321][ T4014] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.614007][ T4014] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.151: Failed to acquire dquot type 1 [ 51.631359][ T4014] EXT4-fs (loop0): 1 truncate cleaned up [ 51.643126][ T4013] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.652569][ T4014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.660074][ T4017] loop1: detected capacity change from 0 to 512 [ 51.710325][ T2153] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.716065][ T4019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'. [ 51.739868][ T4017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.794458][ T4017] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.860875][ T4028] loop3: detected capacity change from 0 to 512 [ 51.869989][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.884901][ T4028] EXT4-fs (loop3): too many log groups per flexible block group [ 51.892749][ T4028] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 51.909563][ T4028] EXT4-fs (loop3): mount failed [ 52.675928][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.024333][ T4047] loop3: detected capacity change from 0 to 512 [ 53.062551][ T4047] EXT4-fs (loop3): too many log groups per flexible block group [ 53.070724][ T4047] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 53.077919][ T4049] loop4: detected capacity change from 0 to 512 [ 53.086875][ T4047] EXT4-fs (loop3): mount failed [ 53.094135][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.134168][ T4058] loop0: detected capacity change from 0 to 128 [ 53.139563][ T4049] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.152720][ T4058] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.189739][ T4064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 53.205637][ T4058] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.305318][ T3438] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.655193][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 53.655275][ T29] audit: type=1400 audit(2000000006.620:875): avc: denied { create } for pid=4092 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 53.744095][ T4094] loop4: detected capacity change from 0 to 1024 [ 53.809565][ T4094] EXT4-fs: Ignoring removed bh option [ 53.830416][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 53.839316][ T4097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.180'. [ 53.889285][ T29] audit: type=1400 audit(2000000006.860:876): avc: denied { bind } for pid=4099 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.923138][ T4094] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.936151][ T4100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.948856][ T29] audit: type=1400 audit(2000000006.880:877): avc: denied { setopt } for pid=4099 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.969829][ T29] audit: type=1400 audit(2000000006.920:878): avc: denied { mounton } for pid=4096 comm="syz.3.180" path="/29/bus" dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.017089][ T4094] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 54.031810][ T29] audit: type=1400 audit(2000000006.990:879): avc: denied { remove_name } for pid=4092 comm="syz.4.178" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.054596][ T29] audit: type=1400 audit(2000000006.990:880): avc: denied { rename } for pid=4092 comm="syz.4.178" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.078283][ T4094] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.178: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 54.100374][ T4094] EXT4-fs (loop4): Remounting filesystem read-only [ 54.112861][ T29] audit: type=1400 audit(2000000007.080:881): avc: denied { connect } for pid=4092 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.141096][ T4100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.152802][ T29] audit: type=1400 audit(2000000007.080:882): avc: denied { ioctl } for pid=4092 comm="syz.4.178" path="socket:[5968]" dev="sockfs" ino=5968 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.234942][ T29] audit: type=1400 audit(2000000007.170:883): avc: denied { connect } for pid=4092 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 54.286698][ T4100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.401697][ T29] audit: type=1326 audit(2000000007.360:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4119 comm="syz.2.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8810e0eb69 code=0x7ffc0000 [ 54.427279][ T4100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.440257][ T4125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 54.537638][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.537870][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.538298][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.543064][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.735024][ T4106] loop1: detected capacity change from 0 to 512 [ 54.845627][ T4106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.857004][ T4156] loop0: detected capacity change from 0 to 512 [ 54.884435][ T4156] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.890071][ T4159] ieee802154 phy0 wpan0: encryption failed: -22 [ 54.964914][ T4106] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.983015][ T4171] loop4: detected capacity change from 0 to 512 [ 54.987376][ T4171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.999960][ T4171] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.011880][ T4171] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.198: Failed to acquire dquot type 1 [ 55.023414][ T4171] EXT4-fs (loop4): 1 truncate cleaned up [ 55.101989][ T4177] loop1: detected capacity change from 0 to 512 [ 55.124546][ T4177] EXT4-fs (loop1): too many log groups per flexible block group [ 55.132988][ T4177] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 55.146107][ T4177] EXT4-fs (loop1): mount failed [ 55.532881][ T4198] __nla_validate_parse: 4 callbacks suppressed [ 55.532898][ T4198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.206'. [ 55.706874][ T4203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 55.715707][ T4203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 55.886421][ T4207] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'. [ 55.900254][ T4209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 55.909087][ T4209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.211'. [ 56.111552][ T4193] loop3: detected capacity change from 0 to 512 [ 56.166577][ T4193] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 56.208969][ T4226] loop2: detected capacity change from 0 to 512 [ 56.232455][ T4226] EXT4-fs: Ignoring removed oldalloc option [ 56.254763][ T4226] journal_path: Lookup failure for './bus' [ 56.260868][ T4226] EXT4-fs: error: could not find journal device path [ 56.293157][ T4240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.222'. [ 56.364128][ T4193] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.396001][ T4253] loop0: detected capacity change from 0 to 512 [ 56.407357][ T4253] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.419326][ T4253] EXT4-fs (loop0): orphan cleanup on readonly fs [ 56.429363][ T4253] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.224: Failed to acquire dquot type 1 [ 56.431516][ T4255] loop4: detected capacity change from 0 to 1024 [ 56.441444][ T4253] EXT4-fs (loop0): 1 truncate cleaned up [ 56.455016][ T4255] EXT4-fs: inline encryption not supported [ 56.461055][ T4255] EXT4-fs: Ignoring removed i_version option [ 56.474676][ T4258] loop1: detected capacity change from 0 to 128 [ 56.484314][ T4258] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 56.496911][ T4258] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.507059][ T4255] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.551318][ T4255] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.226: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.567914][ T3438] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 56.569510][ T4255] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.226: Failed to acquire dquot type 0 [ 56.589835][ T4255] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.226: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.621161][ T4255] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.226: Invalid inode bitmap blk 0 in block_group 0 [ 56.635335][ T4255] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 56.644536][ T2153] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.652251][ T4255] EXT4-fs (loop4): 1 orphan inode deleted [ 56.666010][ T2153] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 56.810115][ T4273] loop1: detected capacity change from 0 to 1024 [ 57.077535][ T4286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 57.090145][ T4286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.235'. [ 57.417245][ T4302] loop1: detected capacity change from 0 to 128 [ 57.421913][ T4302] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.489460][ T4302] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.539601][ T4315] loop2: detected capacity change from 0 to 512 [ 57.627774][ T4315] EXT4-fs (loop2): too many log groups per flexible block group [ 57.635582][ T4315] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 57.642688][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.650112][ T4315] EXT4-fs (loop2): mount failed [ 57.674290][ T4321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 57.828785][ T4336] FAULT_INJECTION: forcing a failure. [ 57.828785][ T4336] name failslab, interval 1, probability 0, space 0, times 1 [ 57.842159][ T4336] CPU: 0 UID: 0 PID: 4336 Comm: syz.1.252 Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 57.842207][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.842281][ T4336] Call Trace: [ 57.842287][ T4336] [ 57.842293][ T4336] __dump_stack+0x1d/0x30 [ 57.842378][ T4336] dump_stack_lvl+0xe8/0x140 [ 57.842403][ T4336] dump_stack+0x15/0x1b [ 57.842420][ T4336] should_fail_ex+0x265/0x280 [ 57.842481][ T4336] should_failslab+0x8c/0xb0 [ 57.842570][ T4336] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.842609][ T4336] ? __alloc_skb+0x101/0x320 [ 57.842643][ T4336] __alloc_skb+0x101/0x320 [ 57.842670][ T4336] ? audit_log_start+0x365/0x6c0 [ 57.842778][ T4336] audit_log_start+0x380/0x6c0 [ 57.842830][ T4336] audit_seccomp+0x48/0x100 [ 57.842867][ T4336] ? __seccomp_filter+0x68c/0x10d0 [ 57.842890][ T4336] __seccomp_filter+0x69d/0x10d0 [ 57.842915][ T4336] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 57.842952][ T4336] ? vfs_write+0x75e/0x8e0 [ 57.842988][ T4336] __secure_computing+0x82/0x150 [ 57.843098][ T4336] syscall_trace_enter+0xcf/0x1e0 [ 57.843132][ T4336] do_syscall_64+0xac/0x200 [ 57.843211][ T4336] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.843246][ T4336] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.843296][ T4336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.843322][ T4336] RIP: 0033:0x7f54d9aaeb69 [ 57.843397][ T4336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.843508][ T4336] RSP: 002b:00007f54d8117038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 57.843536][ T4336] RAX: ffffffffffffffda RBX: 00007f54d9cd5fa0 RCX: 00007f54d9aaeb69 [ 57.843575][ T4336] RDX: 00000000fffffffb RSI: 0000000000000000 RDI: ffffffffffffff9c [ 57.843591][ T4336] RBP: 00007f54d8117090 R08: 0000000000000000 R09: 0000000000000000 [ 57.843606][ T4336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.843620][ T4336] R13: 0000000000000000 R14: 00007f54d9cd5fa0 R15: 00007fff2ac3eb48 [ 57.843644][ T4336] [ 58.474108][ T4350] loop2: detected capacity change from 0 to 764 [ 58.618700][ T4359] vlan2: entered allmulticast mode [ 58.660603][ T4356] netlink: 'syz.0.258': attribute type 2 has an invalid length. [ 58.689658][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 58.689677][ T29] audit: type=1400 audit(2000000011.660:1081): avc: denied { read } for pid=4361 comm="syz.1.262" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.697975][ T4365] loop4: detected capacity change from 0 to 1024 [ 58.717371][ T29] audit: type=1400 audit(2000000011.660:1082): avc: denied { open } for pid=4361 comm="syz.1.262" path="net:[4026532492]" dev="nsfs" ino=4026532492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.746769][ T4365] EXT4-fs: inline encryption not supported [ 58.753136][ T4365] EXT4-fs: Ignoring removed i_version option [ 58.754858][ T29] audit: type=1400 audit(2000000011.670:1083): avc: denied { read write } for pid=4364 comm="syz.4.263" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.784501][ T29] audit: type=1400 audit(2000000011.670:1084): avc: denied { open } for pid=4364 comm="syz.4.263" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.795564][ T4369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4890 sclass=netlink_route_socket pid=4369 comm=syz.2.256 [ 58.808951][ T29] audit: type=1400 audit(2000000011.670:1085): avc: denied { ioctl } for pid=4364 comm="syz.4.263" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 58.847328][ T29] audit: type=1400 audit(2000000011.690:1086): avc: denied { mounton } for pid=4364 comm="syz.4.263" path="/59/file0" dev="tmpfs" ino=337 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 58.870152][ T29] audit: type=1400 audit(2000000011.720:1087): avc: denied { create } for pid=4361 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.895902][ T29] audit: type=1400 audit(2000000011.760:1088): avc: denied { create } for pid=4367 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.917302][ T29] audit: type=1400 audit(2000000011.790:1089): avc: denied { bind } for pid=4361 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.938171][ T29] audit: type=1400 audit(2000000011.790:1090): avc: denied { write } for pid=4367 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 58.963897][ T4365] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.981941][ T4365] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.263: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.999036][ T4365] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.263: Failed to acquire dquot type 0 [ 59.030782][ T4365] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.263: Freeing blocks not in datazone - block = 0, count = 4096 [ 59.052705][ T4365] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.263: Invalid inode bitmap blk 0 in block_group 0 [ 59.067895][ T3438] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 59.074422][ T4379] loop0: detected capacity change from 0 to 512 [ 59.089613][ T4381] loop3: detected capacity change from 0 to 512 [ 59.092367][ T3438] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 59.099286][ T4381] EXT4-fs: Ignoring removed oldalloc option [ 59.114422][ T4365] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 59.120787][ T4381] journal_path: Lookup failure for './bus' [ 59.125502][ T4379] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.268: corrupted in-inode xattr: invalid ea_ino [ 59.130924][ T4381] EXT4-fs: error: could not find journal device path [ 59.148991][ T4365] EXT4-fs (loop4): 1 orphan inode deleted [ 59.199409][ T4379] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.268: couldn't read orphan inode 15 (err -117) [ 59.258632][ T4389] loop2: detected capacity change from 0 to 128 [ 59.266891][ T4389] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.293273][ T4389] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.300846][ T4394] loop0: detected capacity change from 0 to 512 [ 59.325556][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.333845][ T4394] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.412494][ T4403] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 59.438353][ T4403] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.456761][ T4404] loop0: detected capacity change from 0 to 512 [ 60.046427][ T4425] loop3: detected capacity change from 0 to 512 [ 60.151516][ T4425] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.184359][ T4426] loop4: detected capacity change from 0 to 512 [ 60.266747][ T4434] loop1: detected capacity change from 0 to 128 [ 60.273622][ T4426] loop4: detected capacity change from 0 to 1024 [ 60.285112][ T4434] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.306319][ T4434] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.398630][ T2153] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.482477][ T4441] loop4: detected capacity change from 0 to 1024 [ 60.512184][ T4441] EXT4-fs: inline encryption not supported [ 60.512257][ T4441] EXT4-fs: Ignoring removed i_version option [ 60.512679][ T4441] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.597865][ T4441] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.285: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.597997][ T4441] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.285: Failed to acquire dquot type 0 [ 60.598118][ T4441] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.285: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.598325][ T4441] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.285: Invalid inode bitmap blk 0 in block_group 0 [ 60.598418][ T4441] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 60.598741][ T4441] EXT4-fs (loop4): 1 orphan inode deleted [ 60.618260][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.724089][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 60.786034][ T4428] loop0: detected capacity change from 0 to 512 [ 60.818265][ T4455] __nla_validate_parse: 11 callbacks suppressed [ 60.818283][ T4455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.289'. [ 60.862097][ T4428] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.868925][ T4463] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 60.970542][ T4428] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.988576][ T4471] loop2: detected capacity change from 0 to 512 [ 60.998476][ T4471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.009194][ T4471] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.018053][ T4471] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.292: Failed to acquire dquot type 1 [ 61.031700][ T4471] EXT4-fs (loop2): 1 truncate cleaned up [ 61.113774][ T4478] loop0: detected capacity change from 0 to 128 [ 61.122231][ T4478] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.136808][ T4478] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.150464][ T4479] loop3: detected capacity change from 0 to 512 [ 61.174426][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.187461][ T4479] EXT4-fs (loop3): too many log groups per flexible block group [ 61.195250][ T4479] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 61.221596][ T4479] EXT4-fs (loop3): mount failed [ 61.868700][ T4509] loop4: detected capacity change from 0 to 128 [ 61.879950][ T4509] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.898581][ T4509] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.937026][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 61.955294][ T4514] loop1: detected capacity change from 0 to 1024 [ 61.980057][ T4514] EXT4-fs: inline encryption not supported [ 61.986174][ T4514] EXT4-fs: Ignoring removed i_version option [ 61.998112][ T4516] loop4: detected capacity change from 0 to 2048 [ 62.005543][ T4514] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.018571][ T4519] loop2: detected capacity change from 0 to 512 [ 62.018813][ T4514] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.308: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.044440][ T4521] loop3: detected capacity change from 0 to 512 [ 62.045395][ T4514] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.308: Failed to acquire dquot type 0 [ 62.062465][ T4521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.072506][ T3522] loop4: p1 < > p4 [ 62.077460][ T4521] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.084404][ T4521] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.311: Failed to acquire dquot type 1 [ 62.096800][ T4521] EXT4-fs (loop3): 1 truncate cleaned up [ 62.135269][ T4514] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.308: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.153179][ T4514] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.308: Invalid inode bitmap blk 0 in block_group 0 [ 62.155565][ T3522] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.174121][ T4514] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 62.183983][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 62.200648][ T4519] EXT4-fs (loop2): too many log groups per flexible block group [ 62.208603][ T4519] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 62.217431][ T4516] loop4: p1 < > p4 [ 62.219387][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 62.233132][ T4519] EXT4-fs (loop2): mount failed [ 62.234371][ T4514] EXT4-fs (loop1): 1 orphan inode deleted [ 62.239474][ T4516] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.266202][ T2992] loop4: p1 < > p4 [ 62.270590][ T2992] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.325066][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.325503][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 62.365652][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.366777][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 62.393628][ T4533] loop4: detected capacity change from 0 to 2048 [ 62.446338][ T3517] loop4: p1 < > p4 [ 62.451210][ T3517] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.462457][ T4533] loop4: p1 < > p4 [ 62.467211][ T4533] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.511293][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.522174][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 62.543891][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 62.555292][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 62.678822][ T4537] loop4: detected capacity change from 0 to 512 [ 62.707355][ T4537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.741722][ T4537] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.784326][ T4542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.317'. [ 62.836155][ T4547] loop4: detected capacity change from 0 to 2048 [ 62.876691][ T4551] loop3: detected capacity change from 0 to 128 [ 62.883628][ T3519] loop4: p1 < > p4 [ 62.884153][ T4551] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.884392][ T4551] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 62.886951][ T3519] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.897371][ T4547] loop4: p1 < > p4 [ 62.897939][ T4547] loop4: p4 size 8388608 extends beyond EOD, truncated [ 62.916276][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.018543][ T4558] loop3: detected capacity change from 0 to 512 [ 63.044649][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 63.046868][ T3522] udevd[3522]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 63.094536][ T4558] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.167153][ T4563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 63.167172][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.324'. [ 63.219522][ T4566] loop0: detected capacity change from 0 to 512 [ 63.240843][ T4566] EXT4-fs: Ignoring removed oldalloc option [ 63.240888][ T4566] journal_path: Lookup failure for './bus' [ 63.240902][ T4566] EXT4-fs: error: could not find journal device path [ 63.670562][ T4582] loop2: detected capacity change from 0 to 512 [ 63.689332][ T4582] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.726262][ T4586] loop3: detected capacity change from 0 to 1024 [ 63.742828][ T4586] EXT4-fs: inline encryption not supported [ 63.748820][ T4586] EXT4-fs: Ignoring removed i_version option [ 63.789874][ T4586] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.807531][ T4586] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.329: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.832445][ T4586] __quota_error: 360 callbacks suppressed [ 63.832464][ T4586] Quota error (device loop3): write_blk: dquota write failed [ 63.845729][ T4586] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.865053][ T29] audit: type=1400 audit(2000000016.830:1438): avc: denied { create } for pid=4590 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.884789][ T29] audit: type=1400 audit(2000000016.830:1439): avc: denied { connect } for pid=4590 comm="syz.4.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.904683][ T29] audit: type=1400 audit(2000000016.830:1440): avc: denied { ioctl } for pid=4590 comm="syz.4.334" path="socket:[7811]" dev="sockfs" ino=7811 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.904940][ T4586] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.329: Failed to acquire dquot type 0 [ 63.941988][ T4595] netlink: 'syz.4.334': attribute type 10 has an invalid length. [ 63.949922][ T4595] bridge0: port 3(team0) entered blocking state [ 63.956569][ T4595] bridge0: port 3(team0) entered disabled state [ 63.973364][ T4595] team0: entered allmulticast mode [ 63.978714][ T4595] team_slave_0: entered allmulticast mode [ 63.984611][ T4595] team_slave_1: entered allmulticast mode [ 63.990940][ T4586] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.329: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.012117][ T4586] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.329: Invalid inode bitmap blk 0 in block_group 0 [ 64.025657][ T4586] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 64.035337][ T4595] team0: entered promiscuous mode [ 64.040437][ T4595] team_slave_0: entered promiscuous mode [ 64.046454][ T4595] team_slave_1: entered promiscuous mode [ 64.054183][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 64.068894][ T4600] loop1: detected capacity change from 0 to 512 [ 64.071755][ T4595] bridge0: port 3(team0) entered blocking state [ 64.081500][ T4595] bridge0: port 3(team0) entered forwarding state [ 64.092304][ T4586] EXT4-fs (loop3): 1 orphan inode deleted [ 64.098337][ T4600] EXT4-fs (loop1): too many log groups per flexible block group [ 64.106090][ T4600] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 64.113138][ T4600] EXT4-fs (loop1): mount failed [ 64.119244][ T51] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 64.127829][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 64.161865][ T4604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.337'. [ 64.170930][ T4604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.337'. [ 64.236907][ T4609] loop4: detected capacity change from 0 to 512 [ 64.269060][ T29] audit: type=1400 audit(2000000017.240:1441): avc: denied { write } for pid=4611 comm="syz.0.341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 64.271024][ T4609] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.322748][ T4617] loop0: detected capacity change from 0 to 512 [ 64.354525][ T4621] netlink: 16 bytes leftover after parsing attributes in process `syz.2.344'. [ 64.365224][ T4617] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.622750][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'. [ 64.631642][ T4633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.346'. [ 64.736362][ T4641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.347'. [ 64.753984][ T29] audit: type=1400 audit(2000000017.720:1442): avc: denied { create } for pid=4640 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 64.813000][ T4642] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 64.958804][ T4655] loop2: detected capacity change from 0 to 512 [ 64.976003][ T29] audit: type=1400 audit(2000000017.940:1443): avc: denied { bind } for pid=4647 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.995425][ T29] audit: type=1400 audit(2000000017.940:1444): avc: denied { connect } for pid=4647 comm="syz.1.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.022214][ T4648] vxcan1: entered allmulticast mode [ 65.044301][ T4655] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.084555][ T4655] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.351: corrupted inode contents [ 65.097240][ T4655] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.351: mark_inode_dirty error [ 65.113037][ T4655] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.351: corrupted inode contents [ 65.138319][ T4655] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.351: mark_inode_dirty error [ 65.250715][ T4679] loop4: detected capacity change from 0 to 128 [ 65.281049][ T4682] loop0: detected capacity change from 0 to 512 [ 65.287291][ T4684] netlink: 'syz.3.363': attribute type 10 has an invalid length. [ 65.295750][ T4682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.299374][ T4684] bridge0: port 3(team0) entered blocking state [ 65.305314][ T4679] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.310987][ T4684] bridge0: port 3(team0) entered disabled state [ 65.336928][ T4682] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.341506][ T4684] team0: entered allmulticast mode [ 65.344767][ T4682] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.360: Failed to acquire dquot type 1 [ 65.348505][ T4684] team_slave_0: entered allmulticast mode [ 65.348531][ T4684] team_slave_1: entered allmulticast mode [ 65.356477][ T4684] team0: entered promiscuous mode [ 65.361641][ T4682] EXT4-fs (loop0): 1 truncate cleaned up [ 65.365525][ T4684] team_slave_0: entered promiscuous mode [ 65.388432][ T4684] team_slave_1: entered promiscuous mode [ 65.394840][ T4679] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.396789][ T4684] bridge0: port 3(team0) entered blocking state [ 65.410996][ T4684] bridge0: port 3(team0) entered forwarding state [ 65.437810][ T31] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 65.659828][ T4711] loop3: detected capacity change from 0 to 512 [ 65.699129][ T4711] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.709057][ T4711] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.372: corrupted inode contents [ 65.730139][ T4711] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.372: mark_inode_dirty error [ 65.730380][ T4711] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.372: corrupted inode contents [ 65.730541][ T4711] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.372: mark_inode_dirty error [ 65.734502][ T4718] loop4: detected capacity change from 0 to 1024 [ 65.772422][ T4718] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.375: Failed to acquire dquot type 0 [ 65.791421][ T4718] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 65.806598][ T4718] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.375: corrupted inode contents [ 65.828741][ T4718] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #13: comm syz.4.375: mark_inode_dirty error [ 65.832626][ T4718] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.375: corrupted inode contents [ 65.864629][ T4718] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.375: mark_inode_dirty error [ 65.878343][ T4718] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.375: corrupted inode contents [ 65.906975][ T4718] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 65.916870][ T4718] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #13: comm syz.4.375: corrupted inode contents [ 65.928823][ T4718] EXT4-fs error (device loop4): ext4_truncate:4666: inode #13: comm syz.4.375: mark_inode_dirty error [ 65.940236][ T4718] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 65.950076][ T4718] EXT4-fs (loop4): 1 truncate cleaned up [ 66.020245][ T4730] loop3: detected capacity change from 0 to 512 [ 66.027687][ T4730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.039128][ T4730] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.046179][ T4730] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.379: Failed to acquire dquot type 1 [ 66.074410][ T4730] EXT4-fs (loop3): 1 truncate cleaned up [ 66.113404][ T4737] loop2: detected capacity change from 0 to 2048 [ 66.195189][ T4748] loop1: detected capacity change from 0 to 512 [ 66.201842][ T4747] loop0: detected capacity change from 0 to 1024 [ 66.210513][ T4737] __nla_validate_parse: 8 callbacks suppressed [ 66.210529][ T4737] netlink: 196 bytes leftover after parsing attributes in process `syz.2.384'. [ 66.317725][ T4737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.344239][ T4747] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.385: Failed to acquire dquot type 0 [ 66.349151][ T4748] EXT4-fs (loop1): too many log groups per flexible block group [ 66.363752][ T4748] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 66.371872][ T4747] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 66.388337][ T4747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.385: corrupted inode contents [ 66.402138][ T4748] EXT4-fs (loop1): mount failed [ 66.416716][ T4747] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.385: mark_inode_dirty error [ 66.431303][ T4747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.385: corrupted inode contents [ 66.443980][ T4747] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.385: mark_inode_dirty error [ 66.468515][ T4747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.385: corrupted inode contents [ 66.482922][ T4747] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 66.493068][ T4747] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.385: corrupted inode contents [ 66.540186][ T4747] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.385: mark_inode_dirty error [ 66.563817][ T4747] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 66.574538][ T4747] EXT4-fs (loop0): 1 truncate cleaned up [ 66.837296][ T4762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.390'. [ 66.866156][ T4765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.391'. [ 66.955500][ T4769] netlink: 'syz.0.393': attribute type 1 has an invalid length. [ 66.967310][ T4769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.533260][ T4797] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 67.708492][ T4803] loop3: detected capacity change from 0 to 512 [ 67.754013][ T4805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 67.763230][ T4805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.405'. [ 67.814220][ T4803] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.848725][ T4814] loop0: detected capacity change from 0 to 512 [ 67.964880][ T4814] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.984847][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.410'. [ 67.998661][ T4825] loop1: detected capacity change from 0 to 512 [ 68.033689][ T4825] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.271677][ T4835] loop2: detected capacity change from 0 to 512 [ 68.350404][ T4835] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.418082][ T4841] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 68.704276][ T4851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.417'. [ 68.860990][ T4862] loop1: detected capacity change from 0 to 512 [ 68.869239][ T4864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.423'. [ 68.878422][ T4862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.889560][ T4862] EXT4-fs (loop1): orphan cleanup on readonly fs [ 68.897077][ T4862] __quota_error: 169 callbacks suppressed [ 68.897092][ T4862] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 68.912590][ T4862] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 68.922381][ T4862] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.420: Failed to acquire dquot type 1 [ 68.937468][ T4862] EXT4-fs (loop1): 1 truncate cleaned up [ 69.025306][ T4873] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 69.065191][ T4876] loop2: detected capacity change from 0 to 512 [ 69.083919][ T4843] loop0: detected capacity change from 0 to 512 [ 69.086267][ T4876] EXT4-fs (loop2): too many log groups per flexible block group [ 69.098631][ T4876] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 69.112532][ T4843] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.126127][ T4876] EXT4-fs (loop2): mount failed [ 69.147725][ T4881] loop4: detected capacity change from 0 to 512 [ 69.183869][ T4881] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.200158][ T4843] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.298219][ T3309] EXT4-fs unmount: 74 callbacks suppressed [ 69.298241][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.491570][ T4898] loop0: detected capacity change from 0 to 1024 [ 69.514938][ T4898] EXT4-fs: inline encryption not supported [ 69.521207][ T4898] EXT4-fs: Ignoring removed i_version option [ 69.605743][ T4898] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.702885][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.712969][ T4898] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.432: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.774694][ T4905] netlink: 340 bytes leftover after parsing attributes in process `syz.3.431'. [ 69.794408][ T4898] Quota error (device loop0): write_blk: dquota write failed [ 69.802017][ T4898] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 69.806029][ T4905] netlink: 48 bytes leftover after parsing attributes in process `syz.3.431'. [ 69.837255][ T4898] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.432: Failed to acquire dquot type 0 [ 69.851000][ T4898] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.432: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.885856][ T4898] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.432: Invalid inode bitmap blk 0 in block_group 0 [ 69.899754][ T4898] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 69.908814][ T4898] EXT4-fs (loop0): 1 orphan inode deleted [ 69.909823][ T157] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.923000][ T4898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.953636][ T157] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 69.962467][ T157] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 70.063030][ T4925] loop3: detected capacity change from 0 to 512 [ 70.160051][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.172377][ T4925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.207769][ T4925] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.269983][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.315983][ T4944] loop0: detected capacity change from 0 to 512 [ 70.363069][ T4944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 70.379851][ T4944] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.524900][ T4966] loop2: detected capacity change from 0 to 1024 [ 70.532156][ T4966] EXT4-fs: inline encryption not supported [ 70.538221][ T4966] EXT4-fs: Ignoring removed i_version option [ 70.553913][ T4966] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.568576][ T4966] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.454: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.597251][ T4966] Quota error (device loop2): write_blk: dquota write failed [ 70.604718][ T4966] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 70.621134][ T29] audit: type=1326 audit(2000000023.590:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 70.623124][ T4972] loop3: detected capacity change from 0 to 128 [ 70.645026][ T29] audit: type=1326 audit(2000000023.590:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4fc032eb69 code=0x7ffc0000 [ 70.662125][ T4966] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.454: Failed to acquire dquot type 0 [ 70.674947][ T29] audit: type=1326 audit(2000000023.590:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4971 comm="syz.3.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4fc032eba3 code=0x7ffc0000 [ 70.699475][ T4972] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.713645][ T4966] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.454: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.736907][ T4966] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.454: Invalid inode bitmap blk 0 in block_group 0 [ 70.738194][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.759397][ T4966] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 70.760026][ T4972] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.769337][ T4966] EXT4-fs (loop2): 1 orphan inode deleted [ 70.783500][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.785478][ T4966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.799875][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 70.851412][ T3438] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 70.978921][ T4988] netlink: 'syz.0.465': attribute type 1 has an invalid length. [ 70.992375][ T4992] Driver unsupported XDP return value 0 on prog (id 296) dev N/A, expect packet loss! [ 71.019103][ T4992] netlink: 'syz.1.467': attribute type 4 has an invalid length. [ 71.388619][ T5031] loop0: detected capacity change from 0 to 512 [ 71.411746][ T5031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.455424][ T5031] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.495604][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.541550][ T5042] __nla_validate_parse: 14 callbacks suppressed [ 71.541567][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 71.557045][ T5042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.486'. [ 71.625242][ T5045] loop3: detected capacity change from 0 to 512 [ 71.649682][ T5045] EXT4-fs (loop3): too many log groups per flexible block group [ 71.657469][ T5045] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 71.676122][ T5045] EXT4-fs (loop3): mount failed [ 71.741825][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 71.750866][ T5054] netlink: 24 bytes leftover after parsing attributes in process `syz.2.492'. [ 72.082257][ T5063] loop1: detected capacity change from 0 to 512 [ 72.099417][ T5063] EXT4-fs (loop1): too many log groups per flexible block group [ 72.107586][ T5063] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 72.117360][ T5063] EXT4-fs (loop1): mount failed [ 72.177953][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.392135][ T5072] loop0: detected capacity change from 0 to 1024 [ 72.426490][ T5072] EXT4-fs: inline encryption not supported [ 72.432515][ T5072] EXT4-fs: Ignoring removed i_version option [ 72.471715][ T5072] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 72.559629][ T5072] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.496: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.593673][ T5072] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.496: Failed to acquire dquot type 0 [ 72.614879][ T5072] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.496: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.634682][ T5072] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.496: Invalid inode bitmap blk 0 in block_group 0 [ 72.648026][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 72.648425][ T5072] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 72.674076][ T5072] EXT4-fs (loop0): 1 orphan inode deleted [ 72.680004][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 72.697792][ T5072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.877318][ T5090] loop2: detected capacity change from 0 to 512 [ 72.938087][ T5088] loop1: detected capacity change from 0 to 128 [ 72.945545][ T5088] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.992688][ T5088] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.010708][ T5090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.025953][ T5090] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.038569][ T5090] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.503: corrupted inode contents [ 73.050614][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 73.051357][ T5090] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.503: mark_inode_dirty error [ 73.072638][ T5090] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.503: corrupted inode contents [ 73.092450][ T5090] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.503: mark_inode_dirty error [ 73.130845][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.169990][ T5113] loop4: detected capacity change from 0 to 512 [ 73.195735][ T5113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.209855][ T5113] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.239695][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 73.248989][ T5117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.511'. [ 73.288251][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.370711][ T5125] loop0: detected capacity change from 0 to 1024 [ 73.377687][ T5125] EXT4-fs: inline encryption not supported [ 73.383748][ T5125] EXT4-fs: Ignoring removed i_version option [ 73.392691][ T5125] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 73.405700][ T5125] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.513: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.427999][ T5125] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.513: Failed to acquire dquot type 0 [ 73.462968][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.485184][ T5125] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.513: Freeing blocks not in datazone - block = 0, count = 4096 [ 73.500385][ T5125] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.513: Invalid inode bitmap blk 0 in block_group 0 [ 73.513834][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 73.518587][ T5125] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 73.532198][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 73.549766][ T5125] EXT4-fs (loop0): 1 orphan inode deleted [ 73.550150][ T5132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.518'. [ 73.557668][ T5125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.750880][ T5149] loop2: detected capacity change from 0 to 512 [ 73.768366][ T5149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.778330][ T5149] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.785390][ T5149] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.521: Failed to acquire dquot type 1 [ 73.797524][ T5149] EXT4-fs (loop2): 1 truncate cleaned up [ 73.803919][ T5149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.807083][ T5152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 73.825217][ T5152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.522'. [ 73.882762][ T5155] loop4: detected capacity change from 0 to 512 [ 73.910480][ T5155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.925299][ T5155] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.961123][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.017304][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 74.017323][ T29] audit: type=1326 audit(2000000026.990:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427f55eb69 code=0x7ffc0000 [ 74.053254][ T29] audit: type=1326 audit(2000000026.990:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427f55eb69 code=0x7ffc0000 [ 74.077654][ T29] audit: type=1326 audit(2000000026.990:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f427f55eb69 code=0x7ffc0000 [ 74.103743][ T29] audit: type=1326 audit(2000000026.990:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427f55eb69 code=0x7ffc0000 [ 74.127558][ T29] audit: type=1326 audit(2000000026.990:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f427f55eb69 code=0x7ffc0000 [ 74.151190][ T29] audit: type=1326 audit(2000000026.990:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f427f55eb69 code=0x7ffc0000 [ 74.176218][ T29] audit: type=1326 audit(2000000026.990:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5165 comm="syz.4.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f427f55eb69 code=0x7ffc0000 [ 74.255945][ T5173] loop3: detected capacity change from 0 to 512 [ 74.280910][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.284938][ T5173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.305095][ T5173] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.325475][ T29] audit: type=1400 audit(2000000027.290:1895): avc: denied { write } for pid=5176 comm="syz.0.531" name="rt_acct" dev="proc" ino=4026532634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.326806][ T5177] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.539419][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.578739][ T5188] loop1: detected capacity change from 0 to 512 [ 74.610699][ T5188] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.627159][ T5188] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 74.655075][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.677531][ T29] audit: type=1326 audit(2000000027.650:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d9aaeb69 code=0x7ffc0000 [ 74.701397][ T29] audit: type=1326 audit(2000000027.650:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5196 comm="syz.1.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d9aaeb69 code=0x7ffc0000 [ 74.726991][ T5197] loop1: detected capacity change from 0 to 128 [ 74.734253][ T5197] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.750405][ T5197] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.750919][ T5198] loop2: detected capacity change from 0 to 512 [ 74.788750][ T5198] EXT4-fs (loop2): too many log groups per flexible block group [ 74.796821][ T5198] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 74.804380][ T5198] EXT4-fs (loop2): mount failed [ 74.804511][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.873537][ T5204] netlink: 'syz.4.540': attribute type 10 has an invalid length. [ 74.899851][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.541'. [ 74.938630][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.997068][ T5214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.045523][ T5218] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 75.060989][ T5214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.110612][ T5223] loop4: detected capacity change from 0 to 128 [ 75.111094][ T5214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.119824][ T5223] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.142303][ T5223] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.171071][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 75.209584][ T5214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.293874][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.306430][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.318024][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.329876][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.340313][ T5233] loop0: detected capacity change from 0 to 512 [ 75.361619][ T5233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.378149][ T5233] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.538017][ T5243] loop2: detected capacity change from 0 to 1024 [ 75.545021][ T5243] EXT4-fs: inline encryption not supported [ 75.551260][ T5243] EXT4-fs: Ignoring removed i_version option [ 75.559758][ T5243] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.572163][ T5243] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.557: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.587254][ T5243] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.557: Failed to acquire dquot type 0 [ 75.598835][ T5243] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.557: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.613597][ T5243] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.557: Invalid inode bitmap blk 0 in block_group 0 [ 75.627247][ T5243] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 75.636170][ T5243] EXT4-fs (loop2): 1 orphan inode deleted [ 75.636375][ T2153] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 75.642667][ T5243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.658871][ T2153] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 76.128115][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.133057][ T5252] loop3: detected capacity change from 0 to 128 [ 76.144931][ T5252] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.159141][ T5252] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.194434][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 76.377331][ T5272] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.517841][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.722337][ T5296] __nla_validate_parse: 11 callbacks suppressed [ 76.722352][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.580'. [ 76.738217][ T5296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.580'. [ 76.773059][ T5298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.581'. [ 76.950811][ T5308] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.165606][ T5315] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.200447][ T5319] loop1: detected capacity change from 0 to 512 [ 77.247299][ T5315] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.274550][ T5319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.288840][ T5319] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.407429][ T5327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.590'. [ 77.437905][ T5315] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.637514][ T5315] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.651502][ T5333] netlink: 'syz.2.591': attribute type 10 has an invalid length. [ 77.686948][ T5333] bridge0: port 3(team0) entered blocking state [ 77.693586][ T5333] bridge0: port 3(team0) entered disabled state [ 77.723272][ T5333] team0: entered allmulticast mode [ 77.728626][ T5333] team_slave_0: entered allmulticast mode [ 77.734580][ T5333] team_slave_1: entered allmulticast mode [ 77.758716][ T5333] team0: entered promiscuous mode [ 77.764162][ T5333] team_slave_0: entered promiscuous mode [ 77.770058][ T5333] team_slave_1: entered promiscuous mode [ 77.778045][ T5333] bridge0: port 3(team0) entered blocking state [ 77.784471][ T5333] bridge0: port 3(team0) entered forwarding state [ 77.792999][ T5337] loop3: detected capacity change from 0 to 512 [ 77.807024][ T3438] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.821891][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.832161][ T5337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.859224][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.875075][ T5337] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.887266][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.905502][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 77.920167][ T5337] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.592: corrupted inode contents [ 77.920584][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 77.941128][ T5343] netlink: 24 bytes leftover after parsing attributes in process `syz.0.594'. [ 77.942659][ T5337] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.592: mark_inode_dirty error [ 77.972632][ T5337] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.592: corrupted inode contents [ 77.977485][ T5345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'. [ 77.985096][ T5337] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.592: mark_inode_dirty error [ 78.070540][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.188853][ T5362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 78.250510][ T5366] loop3: detected capacity change from 0 to 2048 [ 78.277625][ T5366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.325310][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.342088][ T5371] loop1: detected capacity change from 0 to 512 [ 78.384973][ T5373] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.385562][ T5371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.420209][ T5371] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.439402][ T5373] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.472782][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.490526][ T5373] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.527960][ T5378] loop1: detected capacity change from 0 to 512 [ 78.549261][ T5373] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.579191][ T5378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.594395][ T5378] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.636668][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.659088][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.670890][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.679600][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.682746][ T5385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 78.698939][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.846071][ T5396] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.968692][ T5407] loop1: detected capacity change from 0 to 512 [ 79.026500][ T5411] loop4: detected capacity change from 0 to 512 [ 79.073884][ T5407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.096720][ T5411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.134282][ T5407] ext4 filesystem being mounted at /113/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.148365][ T5411] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.191112][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.224455][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.227750][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.617'. [ 79.345563][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 79.345578][ T29] audit: type=1326 audit(2000000032.280:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.375537][ T29] audit: type=1326 audit(2000000032.280:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.398939][ T29] audit: type=1326 audit(2000000032.280:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.422486][ T29] audit: type=1326 audit(2000000032.280:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.428784][ T5431] ieee802154 phy0 wpan0: encryption failed: -22 [ 79.446482][ T29] audit: type=1326 audit(2000000032.280:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.476722][ T29] audit: type=1326 audit(2000000032.280:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.500480][ T29] audit: type=1326 audit(2000000032.280:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.524009][ T29] audit: type=1326 audit(2000000032.280:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.548071][ T29] audit: type=1326 audit(2000000032.280:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febeb27eb69 code=0x7ffc0000 [ 79.571966][ T29] audit: type=1326 audit(2000000032.280:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7febeb2809fc code=0x7ffc0000 [ 79.709972][ T5440] netlink: 'syz.2.627': attribute type 1 has an invalid length. [ 79.895079][ T5446] loop3: detected capacity change from 0 to 128 [ 79.930772][ T5446] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.032010][ T5446] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.220517][ T5457] vlan2: entered allmulticast mode [ 80.232356][ T31] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 80.304190][ T5460] loop3: detected capacity change from 0 to 512 [ 80.318380][ T2992] ================================================================== [ 80.326687][ T2992] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 80.334248][ T2992] [ 80.336673][ T2992] write to 0xffff888106ad9870 of 8 bytes by task 3519 on cpu 0: [ 80.344419][ T2992] dentry_unlink_inode+0x65/0x260 [ 80.349578][ T2992] d_delete+0x164/0x180 [ 80.353788][ T2992] d_delete_notify+0x32/0x100 [ 80.358743][ T2992] vfs_unlink+0x30b/0x420 [ 80.363098][ T2992] do_unlinkat+0x24e/0x480 [ 80.367545][ T2992] __x64_sys_unlink+0x2e/0x40 [ 80.372333][ T2992] x64_sys_call+0x2dc0/0x2ff0 [ 80.377122][ T2992] do_syscall_64+0xd2/0x200 [ 80.381640][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.387542][ T2992] [ 80.389882][ T2992] read to 0xffff888106ad9870 of 8 bytes by task 2992 on cpu 1: [ 80.397430][ T2992] step_into+0x122/0x820 [ 80.401790][ T2992] walk_component+0x162/0x220 [ 80.406486][ T2992] path_lookupat+0xfe/0x2a0 [ 80.411104][ T2992] filename_lookup+0x147/0x340 [ 80.415891][ T2992] do_readlinkat+0x7d/0x320 [ 80.420418][ T2992] __x64_sys_readlink+0x47/0x60 [ 80.425303][ T2992] x64_sys_call+0x28da/0x2ff0 [ 80.429994][ T2992] do_syscall_64+0xd2/0x200 [ 80.434522][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.440450][ T2992] [ 80.442775][ T2992] value changed: 0xffff8881273477b8 -> 0x0000000000000000 [ 80.449973][ T2992] [ 80.452307][ T2992] Reported by Kernel Concurrency Sanitizer on: [ 80.458481][ T2992] CPU: 1 UID: 0 PID: 2992 Comm: udevd Not tainted 6.16.0-syzkaller-11568-gd632ab86aff2 #0 PREEMPT(voluntary) [ 80.470210][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.480446][ T2992] ================================================================== [ 80.519828][ T5463] loop1: detected capacity change from 0 to 2048 [ 80.527154][ T5460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.540559][ T5460] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.563575][ T5460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.632: corrupted inode contents [ 80.569896][ T5463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.587910][ T5460] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.632: mark_inode_dirty error [ 80.601525][ T5460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.632: corrupted inode contents [ 80.614172][ T5460] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.632: mark_inode_dirty error [ 80.641213][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.651869][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.