last executing test programs: 8.484916282s ago: executing program 4 (id=556): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fdatasync(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) io_pgetevents(0x0, 0x9, 0x0, 0x0, &(0x7f0000000140), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x0, &(0x7f0000000240)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) socket$inet6(0xa, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d6080045b9001c00670000ff02e71423379275c55c14aa124090"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000280)=0xc) setgroups(0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) 7.582996185s ago: executing program 4 (id=567): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x7, 0x401}) ioctl$PTP_PIN_SETFUNC(r0, 0x40603d07, &(0x7f00000008c0)={'\x00', 0x3e, 0x0, 0xde1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x109) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r2, 0x5, 0x4) r3 = getuid() mount$9p_fd(0x0, &(0x7f0000000280)='./file2\x00', &(0x7f0000000300), 0x800000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6163636573733d757365722c636163e8653d7265616461686561642c6d73697a653d3078303030303030303030303030666632332c756e616d653d6e656967685f757064617465002c63616368653d7265616461686561642c63616368657461673d6b6d656d5f63616368655f66726565002c66756e633d4d4f44554c455f434845434b2c7365636c6162656c2c736d61636b6673726f6f743d7d272e267d5b2c7065726d69745f646972656374696f2c6673757569643d32363900653639c22d626638372d5e3652332d363938332d38656515666434322c657569643c", @ANYRESDEC=r3, @ANYBLOB]) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000940)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private1}}, &(0x7f0000000a40)=0xe8) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x340800, &(0x7f0000000a80)={[], [{@euid_lt={'euid<', r3}}, {@euid_gt={'euid>', r4}}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000400), 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='name', &(0x7f00000000c0)='\x00\x1f\"\f\x00\x00\"\x00\x04\x00\x00', 0x0) readv(r6, &(0x7f0000000040)=[{&(0x7f0000002300)=""/4077, 0xfed}], 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bind$can_raw(r8, &(0x7f0000000000), 0x10) 6.53305319s ago: executing program 4 (id=573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210329bd7000fbdbdf25010000001800018014000200776730"], 0x2c}, 0x1, 0x0, 0x0, 0x4d811}, 0x4) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYBLOB="2a645aab6fa7f90dba3fcd18a22b33fa8fdf66c41b7cbb3d0ec5f57054b8ee327256335615d8509b5c177b3bdf2f2640b6f9fda8b749dfce6346cfb0be5c4e91d638c2efc4bae048bb1e3b7c54fa90f020f9eb262c683b8e0a4dd427263fbf7f3de74243c1ff688482927e0f5b700e60e3f968f77d1eec371bc6d8bac8e4587261dfbe2d59add67bbd51d71d29aef1b3421062b19b9658b4adb8a4863c6a1186e3620476a973231df38d3c4e8d2c69a9c25f4807f998f560218882e0997451e244653cca641cf77c2dc68d7704c251523251ee20f2d95b29e921fccd8747c76e82beb551f4e7017cc086df316cd3d3d25bdd07fb15f0e21a4c06f3eca7fe65e398fa091c1baece9f09fa8729dda5979b77f79d9c975230dfcc8327b1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = accept4$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80800) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) creat(0x0, 0x6) r7 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r7, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r9) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) 4.771335743s ago: executing program 4 (id=592): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) io_setup(0x3, &(0x7f0000000340)=0x0) io_cancel(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x58a, r0, &(0x7f0000000500)="31c29075ddfa959ff93fa313cb9496aea4ca95b431f71d371214ed8a7cff9547787e5fec4e064beef6894fc30a56aa3292e8da7d6477048b1911011ca767decb4b276f4a812a17bc789796ae74f235e6bc0a90e741acd5cde9834d5d2d5c4dfb969b30590433e4a229252dd23201951cfc14a1a758ca1bd57b09683535c68521", 0xb1, 0x3a, 0x0, 0x3}, &(0x7f0000000740)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001478659e6060000008000910e81f836a99b7a396f085dd3ef5c704974e10d75449e1d7e9efdc8bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a3, &(0x7f0000000080)) 3.511752275s ago: executing program 3 (id=601): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000802b71d8c7c7db5a424f8ff413e3d913af20e0300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x80}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000240)=@cgroup={0x2, r2, 0xc6bd}, 0x10}}, 0x20) pipe2$9p(&(0x7f0000000000), 0x0) stat(0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x40680) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0xfffffff8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 3.304672622s ago: executing program 3 (id=602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000020601040000000000000000000000001400078005001400f400000008000840000000360500010006000000050005000200000005000400040000000900020073797a3100000000120003006269746d61703a6970"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000a18c4fb336df7fa4070c74b4f1420800e7057b8af8fff5ff0000bfa2000000000000070200f7c007bf00f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) write$P9_RLINK(r4, &(0x7f0000000540)={0x7, 0x47, 0x2}, 0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) mkdirat(r4, &(0x7f0000000080)='./file0\x00', 0x140) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8000006}, 0x0, 0x10000, 0xda, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchmodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620700000000000095"], &(0x7f0000000100)='GPL\x00', 0x9, 0xdb, &(0x7f0000000700)=""/219}, 0x94) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[@ANYRESHEX=r4], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.807540612s ago: executing program 2 (id=604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5, 0x4, 0x0, 0xb, 0x0, 0x2, 0x10410, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x7}, 0x1142f, 0x100000000, 0x10, 0x4983f72b69235169, 0x400005, 0xe6, 0x9, 0x0, 0x2, 0x0, 0xff}, 0xffffffffffffffff, 0xb, r1, 0x0) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x40010, r3, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r4}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x44, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0xffffffffffffff80, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0xfd44) pipe(&(0x7f0000000180)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf2503000000080020000200000008000200020000000800010003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.761098287s ago: executing program 2 (id=607): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000014000e0a49bf925471e7fc50983f097013799b641ea79c734b6ef4a909f6c2743f53f288e526b45fe0769b612cae30d347d692db24c0a7fc637fa1cb855773a97058bb1e89ea2629a03a000f0f527000fbdb2d1b65fa9d7a12f86e4727da8c12d73cadf3961abdb1e575e65427efb303c637f2785cdb1d128d656102d655936b6ead69539ab7933768022578e97e1df45e204b804dce7f1b89c9e85251bbe2f57c3b4be994e3dfaefab23911bf72bf62214f8d1154befd11e305e47343dc4bc0e603181bc0bcd0a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x8, 0x0, {{0x38, 0x4, 0x0, 0x2c, 0xe0, 0x68, 0x0, 0x6, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x35, 0x2, [{0x1, 0xe, "55b9b6354d8c8a2bca050f72"}, {0x2, 0xc, "0cc3ca6181f71562fe52"}, {0x0, 0x7, "416a1ec2e2"}, {0x6, 0x2}, {0x5, 0x3, "c9"}, {0x7, 0x9, "0f9a07391fa831"}]}, @timestamp_prespec={0x44, 0xc, 0x96, 0x3, 0xe, [{@multicast1, 0x1}]}, @end, @timestamp_prespec={0x44, 0x24, 0x18, 0x3, 0x3, [{@multicast1, 0x9}, {@remote, 0xe6}, {@broadcast, 0x3}, {@multicast1, 0xfffff6e7}]}, @generic={0x44, 0x5, "9b6a50"}, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x9, [{@local, 0x4}]}, @cipso={0x86, 0x49, 0x0, [{0x7, 0xd, "75b74d88fa05e8e70d5bba"}, {0x7, 0x6, "c3bf971a"}, {0x2, 0x7, "67309e61b4"}, {0x6, 0x4, '1\b'}, {0x1, 0x2}, {0x1, 0x2}, {0x2, 0xf, "0b8556523b120a32649d3e1ceb"}, {0x2, 0x12, "958286ee6e9794cb55d76d51ae2dc576"}]}, @timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x1, [{@remote, 0x8}]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@usrquota}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000380), &(0x7f0000000480)='system_u:object_r:ld_so_t:s0\x00', 0x1d, 0x1) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r8, &(0x7f00000004c0)={'#! ', '', [{0x20, '\xae-^/:[#'}, {0x20, 'dummy0\x00'}]}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r9 = socket$isdn_base(0x22, 0x3, 0x0) bind$rds(r9, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000032c0)='/sys/power/pm_print_times', 0x200802, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 2.71668806s ago: executing program 1 (id=608): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x3}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000140)='./file0\x00') fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file2\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0xa6) stat(0x0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r9}, 0x18) r11 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r11) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32=r4, @ANYRES16=r5, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYRES64=r8, @ANYBLOB="6f314d06", @ANYBLOB="02b5e29b44f7cfdd17f9", @ANYRES8=r2, @ANYRESDEC, @ANYBLOB="4f9c30448838d52fe5b3a295c17cdfc3604daa51ca4172f241d5018466f3c6dbc04045fe35403720b4441248da1987a72875d2fa4b21f77091e9c0bebc49e26dacb4edfec472db86526393d14b568a6191fe0dc25430ae4ead02469f497f14f77e9e167dedeee75e96afd3262c876adfb63361531be3e983a04bf8bdf4f9a9ca04f839e661070690347b09ad195e909d86724153c96ccdd8dd6adbb3cf76071a61251eee8539d46579a29a69f3c83f7b41d4f2fcbff7a5eabd9c128a2ef7fac3cc3b529345b70f730e307bcb99ed11185c7cba6465c8c76ab3", @ANYRESOCT=r7, @ANYBLOB='\b', @ANYRES32=r7, @ANYBLOB, @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16], 0x94, 0x1) ioctl$AUTOFS_IOC_EXPIRE(r10, 0x810c9365, &(0x7f0000000780)={{0x6, 0xc00000}, 0x100, './file2\x00'}) r12 = getpid() sched_setscheduler(r12, 0x1, &(0x7f0000000200)=0x7) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x4, 0x2, 0x346, 0xffffffffffffffff, 0x1, 0x0}) r14 = getgid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='rpc_buf_alloc\x00', r0}, 0x18) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sendmsg$netlink(r8, &(0x7f0000000480)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000001080)=ANY=[@ANYBLOB="140100001500080929bd7000fef481e1ddaa7823326e43fc3d5607d676cc9d8b517daabe256cc3fc1dd2c30100ea220f44b0cc4af1d10000080029003b25fcee3b50c6236407d8c325e7ce36c6e8132371a0540349531cff4b4127c4610d74c63d45028dd617bba959eb3149db0022c37419a1ef659a9da1a2204341d1eb71d420bc904ebfd59fd60c34cad99223c5e43f5b2d9ca0f3e44bcddf8b44403532278e54c8", @ANYRES32=r12, @ANYBLOB="ca00188004000b000e96749f0c1bffa4e9432775b0737c0716c61b15583f57130b691b2339ea199c867ff3fc1b0bc2638d89cef6c27f9bf3e03ddf1497bbfdf942ff329751f27409f031b75e84707735f7717990fba05b658b3c4671e6358d24e92606ee6289e698d652965be46c29cbf1fa5be070938682dddfb58655d2d89ccd4895f14cde0fc6fff22501747ca2e8c735b536af260553e3022b87a90b1d89639b9bd13036979402cdf4d6c528e1c5373e1dd6bcbd25312ea4749150f32aa617f1da2b1b2604009380000004006a8004002b80"], 0x114}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r6, r4}}}, @cred={{0x1c, 0x1, 0x2, {r13, r3, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r1, r7}}}], 0x60, 0x90}, 0x4000) lchown(&(0x7f0000000080)='./file0\x00', r1, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2.676477793s ago: executing program 3 (id=610): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) read$char_usb(r0, 0x0, 0x0) syz_read_part_table(0x5df, &(0x7f0000000000)="$eJzs3DGIE1kYB/CXIBEFETs7gykichAh3UkEDXGQgAnBQ4s70c4t0qyVRYxgQCzMNhE5Gy0UYQ1aaCUiCCImFkIqUXavuN1l2eJY2CawLHMEZrvjYG/JHQe/Hzx4b97/zcfHMOVM4H8tHf6I4zgVQoj37vz0T/OVs+ey9dONCyGkwi8hhN/zs79OdlJJYvuuR5P1YrIuvt3TvDcf3en2Dhx+nd38nE72byVjZfjw8q6bY+qOXT/+/sh4dOhNNTwenBqc3N+8dK2fL7f7X+qvzjzNPtt+7oUp1X9Z+njwdmc26t4ozXyNWkvRanpjPTr/4FEhM9du5NdOJLkrU6rf3LqYef7kQ7mzvK/4qVqr9V58v59rVd51bo6GuW/ju1eT3MI/eLsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj3Hbt+/P2R8ejQm2p4PDg1OLm/eelaP19u97/UX515mn12NMkVplT/Zenjwdud2ah7ozTzNWotRavpjfXo/INHhcxcu5FfO5HkrvzV4TiO27us39y6mHn+5EO5s7yv+Klaq/VefL+fa1XedW6Ohrlv47tXk9zC3l0WAgAAAAAAAAAAAAAAAAAAgL9ROXsuWz/duDCZ/xxC+GHmx7nJPE6+d08lue3/ACxOrqdDKL7d07w3H93p9g4cfp3d/Pxbkr+VjJXhw8v/QTvs0J8BAAD//9odjZ8=") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x7fffffff, 0x2, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x1) readv(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00'}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x2) preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x7a}], 0x1, 0x0, 0x0) chdir(&(0x7f0000000080)='./cgroup\x00') unshare(0x2c060000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'dvmrp1\x00', @broadcast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f0000000800)=0x6, 0x4) getsockopt$netlink(r6, 0x10e, 0x5, &(0x7f0000000d00)=""/4096, &(0x7f00000001c0)=0x1000) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f00000002c0)={0x1, 0x2}, 0x8) sendto$inet6(r8, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.318303482s ago: executing program 0 (id=611): r0 = add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000080)="75a101010100188d9233a34871d6000000000003c1d6fe173ee8ed471cb5", 0x1e, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = open(&(0x7f0000000180)='./bus\x00', 0x1c3bc2, 0x1c0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000008c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000100)={r4, 0x1, r3, 0x7, 0x80000}) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) r6 = socket(0x2, 0x805, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x12, 0xffffffffffffffff, 0x10000000) r8 = signalfd4(r6, &(0x7f0000000100)={[0x9]}, 0x8, 0x80800) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000700)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1c, 0x0, r6, 0x0, &(0x7f0000000340)="fae0ca88958915f21bfa9c260bf76b5eab1fb020e6ac1d82f8e972ba7dec2521dddb7f11b790454a471c7dc41790261e98cc39cb7bb1e640b22c9da745c71988e334aed33983e65dc7c151b9730d4757db92c7c72db9bf02cf8e49dfdc160f5714a0e9b117c13a935f1ce5f9f6e191eb3ec7555e99e506422c03022d972461fefee9392f132fc43416e915a394366067de4a8a1f", 0x94, 0x1b46865ac35f676d, 0x1}) r10 = epoll_create(0x1) r11 = open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0xc, 0x0, r11, 0x0, 0x0, 0x0, 0x8000}) syz_io_uring_submit(r12, r7, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0xa, 0x0, r10, 0x0, r8, 0x2, 0x0, 0x0, {0x0, r9}}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000480)={r14, 0xffffffff, 0x80000007, 0xfffffff7}, 0x10) 2.278723315s ago: executing program 1 (id=612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000680)={[{@nodioread_nolock}, {@noload}, {@acl}, {@resuid}]}, 0x1, 0x797, &(0x7f0000002040)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x17, 0x1, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socketpair(0x2f, 0x1, 0xffff, &(0x7f0000000100)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r4, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x121000e, &(0x7f0000000b40)={[{@abort}, {@data_err_abort}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@dioread_nolock}, {@oldalloc}, {@jqfmt_vfsv0}, {@nolazytime}, {@acl}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'min_batch_time'}}, {@subj_type={'subj_type', 0x3d, ',\\-'}}, {@hash}, {@uid_gt={'uid>', 0xee01}}]}, 0x1, 0x542, &(0x7f0000000140)="$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") timer_gettime(0x0, &(0x7f00000002c0)) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) write$cgroup_type(r7, &(0x7f00000004c0), 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r8, 0x0, 0x0, 0x5412, 0x0, 0x0) r9 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000600)="300e3080b734830aaffdd7338895c834", 0x10, r9) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETS(r10, 0x5402, &(0x7f0000000140)={0x1, 0x8, 0x80000000, 0x5, 0x16, "6e8aeabeb7c8f21d9ccf04800df9bf1b51d029"}) 2.198951762s ago: executing program 2 (id=613): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000802b71d8c7c7db5a424f8ff413e3d913af20e0300000003000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x80}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142c00000000001d430000000000007a0a00fe0000001f6114340000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, 0x0, 0x25, 0x10, @val=@iter={&(0x7f0000000240)=@cgroup={0x2, r2, 0xc6bd}, 0x10}}, 0x20) pipe2$9p(&(0x7f0000000000), 0x0) stat(0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x40680) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, 0xfffffff8) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) 2.187545123s ago: executing program 3 (id=614): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='tlb_flush\x00'}, 0x18) syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r4, 0xfffffffffffffc01, 0x0) tee(r1, r4, 0x60000000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r2, 0x1e, &(0x7f0000000500)={r1}, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0) pread64(r7, &(0x7f0000001600)=""/4103, 0x1007, 0x7f) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x2, 0x1, 0xf, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.968387361s ago: executing program 2 (id=615): r0 = socket(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) r2 = getpid() syz_pidfd_open(r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(0x0, 0x0, 0x48802) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) move_mount(0xffffffffffffffff, &(0x7f0000003900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x44) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "313c09de00fd6d007400", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r6, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) close_range(r0, r6, 0x0) 1.211181653s ago: executing program 2 (id=616): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000440)=""/104) timer_create(0x4, &(0x7f0000000040)={0x0, 0x5, 0x4, @tid=r1}, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="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", @ANYBLOB="000000000000b9e4b7040000010000008500000078ffff0000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRES32], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000006de91f442d540dfd014de000000000000"], &(0x7f0000000600)='GPL\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$key(r6, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x3, 0x8, {{0x31, 0x4, 0x1, 0x39, 0xc4, 0x64, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0xb, [@dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @local, @private=0xa010102, @rand_addr=0x64010102, @empty, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x39, 0x1, 0x0, [{@broadcast, 0xb3}, {@multicast2, 0xac}, {@empty, 0x4}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@remote, 0xd}, {@broadcast, 0xfffffffd}, {@multicast2, 0x4}, {@loopback, 0x1}]}, @rr={0x7, 0x1f, 0xe7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x7, [{@local, 0xffffff0d}, {@local, 0x2}]}, @timestamp={0x44, 0xc, 0xa1, 0x0, 0x8, [0x3, 0x9]}]}}}}}) truncate(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xf26, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xfffffd26) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='ext4\x00', &(0x7f00000004c0)="7c45b3605983c4136d54327f5eef6a4026c5626bf070243d82bda771f560ddaf05eb4736919d2b4c9d1a0b709bd329475e5acec7504603129b47cb87b6c23f0429a72da688be2c08ddc3da077ef1dde006233c0b4a332b2a1e25820b2f5122ad56f1fee3a2422728b76efa3d15cb9fd196913afbff302933d6f3799f47c12e000dc9308b90353f418477ab117e796a3c521d413b67a5b520fc7b25e45ec5c34514c059c21080d0b08461d99c0b4d73c1d4e68b6d876943e655de703f3b279c3d519332ba7b40b2693cb147f6ff6b0b19ce6317056b277aebd6fe40e5e821ebb1acf1665dee841a6a45b33924b075638c", 0xf0) 1.209028482s ago: executing program 0 (id=626): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000002c0)={0x4}) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="0300f198aaaeba98ca0000850800", 0xe, 0x26004085, &(0x7f0000000600)={0x11, 0x1c, r0, 0x1, 0xfe, 0x6, @random}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=0x0, @ANYRESOCT], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r2, 0x0, 0x7fffffff}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = gettid() r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f00000002c0)={r3, r3, 0x8}) socket$packet(0x11, 0x2, 0x300) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r11, 0x31, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x44044}, 0x8040) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r6) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() getdents(0xffffffffffffffff, 0x0, 0x0) 1.091485812s ago: executing program 3 (id=617): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0xc000000000, 0x80000000}], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r5, 0x0, 0x8000000000000}, 0x18) socket$kcm(0x10, 0x2, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x4030582a, &(0x7f00000001c0)={0x1, 0x8, 0x6b, 0x401, 0x6b, 0x7}) r8 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000240100000000000000000000186100000d000000000000000600000018460000fcffffff000000000000e91011fec01e563c6fccfba63ac4b2e23b37ffa9baa47792732b4fa7982d5706ea9d075a3bcb3285ebecde105065852527f31a719f28f444a529e3c7b176846f4d1fb4a8f52f1e8663eb97487ea30983482587251f175af6d152a1df9e1af454caa6ce0398b7ff1821586d7851a0319bf8354da48400308bc56612723846b01123caaa37743851d54e4b4eb167eecae5b12dbfbd7c29ba24272949bfb79d279f1426de38ff6029fb36c6bc0df8032fad75d87f40706444db99a12115"], &(0x7f00000006c0)='syzkaller\x00', 0x34, 0x20, &(0x7f0000000700)=""/32, 0x40f00, 0xc, '\x00', 0x0, @sock_ops=0x3, r7, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xd, 0x23, 0x8}, 0x10, 0x0, r5, 0x8, 0x0, &(0x7f0000000a80)=[{0x3, 0x3, 0xe, 0x16}, {0x5, 0x2, 0xb, 0xa}, {0x2, 0x1, 0x3}, {0x2, 0x3, 0x10}, {0x4, 0x2, 0x5, 0x2}, {0x1, 0x3, 0xe}, {0x3, 0x5, 0x3, 0x2}, {0x2, 0x2, 0x1, 0x8}], 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000500)={0x11, 0xf5, r9, 0x1, 0x3, 0x6, @multicast}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x488c4) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r12}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902000000ffff07000000df25"], 0x10}}, 0x0) sendmsg$AUDIT_TTY_SET(r8, &(0x7f0000000900)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x18, 0x3f9, 0x800, 0x70bd2a, 0x25dfdbfe, {0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0xc0) 859.675281ms ago: executing program 1 (id=618): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000040)={0x1}, 0x8, 0x0) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000000e4cf55784d31749f3a6317769813e8e0d2d62ea8831c6d090db50522e1a1e54d910b0f771fe8da34fae12f8329f8c9fd8d8b3aa7841b139dfbadd65b5deec544440a122322d72ed4609c599df7ef1fb61cd7a5ead47c55d76776f03d2735588cd1b863ea460bf9377fe6f0ee64f5be49ccdbbef065388e9238522218bb20dcc6ac2a45183d17b915de63a9e4eb4a051f89d595d7da30f1ae067bd90d6c3b53ea671e87f727679d543c7aeb3b9fcf31748fbe426be98ad6cbcdbb372a4efd59f0b09a097b72e659fecc6a52923daeab884f4a49c83238e2e7feb0ec1f7728639da9613f9d9e08fa5c627c0846747a8de7b3aaa63cafe504faaca7b9ef3e7efad6a560e6374df8a18de077455b61e04491313d38e017451b094cc20a43fc396bc9af16733bdca1315da1772194b5b9ee533ad4dea3c9d7a5254262e9d5eaed3e4e00a44be2cb914e9d870363146bcdc092a64e909356f5d248b23322f8296fd57c914c742196d4dd66ff349161890e3c93b101a06eb45c86afebab675f5312ceaa2f621b293d6031b92e834b73784c159bd266974fc1c7bff263ae1ebd4c9596dff14e6ed1bdc7ee71a12011c119d3b890955ff868cd0bffccf57778ac362a139ad72532df20487cc5b29c1ee18f4b95f98dd1412ee039d3216952731365ab8b687757567c4c181b4ffc88f19e3522d6d1b003e32539ef1d19dec160f48425bdea166c72f03be567ee98f48a4ec65dd3d8aed583f42baf4390fe251db6aac71c1927d9cf4030b695433f2f84f83b42b2d673490f0b65a23db3be78ca8bb735b5ba16a4b383d6b79ac73e88e162aaa5c5a951fe149a8ee8df103393084d8fce1da461fcc6dec4cb940cacc9a9bb0b124fa852bff4f83e03ddeb1b055772036e5bce9fc079bf568e9080911a2f91581d0f5b356a0aa04551fe2d670500000000915aa5e58ab927f09c208ebc4b16ad6b4cb3b79738434e129f56e8915e38f6715f8a49f9493f73c7437eb3e565dca1f574e07596169817afdab517d4b5d9026b124123d2e97e45994eb28412365f5d6acb153e0c2e30ad3dc622cad6955dd9890d3def37fb0a8dd7445a94cafd00c3b5994da958d75c7b12b034aad01ed84c1f4d8473b750f5db85ad0ffb51b85a65554f6c6470a20178139d93f32c4efc219fe05c37b2e6ad145fffa02fc7bf3f05451d6964bde16268dbb1466ff87820e1a47b6a09373562922f75c08879ee692ed4604ee299ddde23e0d4e0ceb60da6f576dcffbfc5fbd1996f607f623d990d2cf2c195a27d634297fcb3d3e27bef1a7f966b1000804cd63194ef8630ca194a7522cf38a93578e0aff9384e53b1b4758583e7ddff2cb9cf172b799e8a79f3e7463305118be967fe9bf9762e2a1b0000ef6f9fa34391bf54f94969093863472e261806e5a8ae9bc2e244350ab61c8ddbdcd55a4841ad66844d029c367dda2e24e6faf87c5006d74479f806cb27ebada85dec72780feef4799c34238e3dc81f715e9daa3a96b5ac"], 0x3f9, 0x0) msgrcv(r2, 0x0, 0x0, 0x3, 0x3000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r6, @ANYRES64=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r8, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000019001f0900000000fddbdf25021800000000ff010020000008000100ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f0000000600)=0x1) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000e) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) io_uring_enter(0xffffffffffffffff, 0x32d7, 0x0, 0x46, 0x0, 0x0) 749.18525ms ago: executing program 0 (id=619): fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) madvise(&(0x7f0000920000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x13) setreuid(r0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x3, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x9000) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x8}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 681.690126ms ago: executing program 0 (id=620): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x4b800, 0x0) r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESDEC, @ANYBLOB="4ecec27cf18820a4ec18ee210249ec702546b28b4c5f493dcd2c11e3196dff3bcc2e6c0a404411b6d5c50e0c63cd149f8ead3c7649648a89819b27f75f6bae4a0066941724496461619a30d3afcca1c53a57e4013f60fdb1052c1296e4d2f4b214a3ef152dcde73e99fe1bce0c63fddadef196f0d44879ff94d8408a4f8dbd33d48a66d0e60541dac7276f7e34a40a4dd7b752c3d88c63bf1416d851ec91dcfff6dd7cfa38edba20ada5e7e852687a9c1e3ff0109c9fc23ab2b8b813092ea1bda0ef97a86e9fbda3d374edc5e7702987587313f09d727875ee676d00"/234, @ANYRES64=r0, @ANYBLOB='\t\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB="03373ada06a20413d6b660e857923da8ae4287d92f04b68ff6af741da628c139b5922540e75fb38cbf6829ffffb8b8b42daaf1aab3b29dc4b469ae449cedb1c8c22648e78ee4897812de99e3bd1188cbc585e961dccbf0d5350ea9856161b5c46047"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x3, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0x0, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x20004000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4001000010000100000000000000000064010102000000000000000000000000ff01000000000000000000000000000100000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000e72ff55146b66b6a000000003200000000000000000000000000000000000001feffffffffffffff0500000000000000000000000000000065000000000000000000000000000000010000000000000000000000000000000000000000000000040000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000a0004fdaf00000000000000480002006362632873657270656e74290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008"], 0x140}, 0x1, 0x0, 0x0, 0x3886f31be662c690}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x4000, 0x8}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000005304ec"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 550.484606ms ago: executing program 0 (id=621): fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) madvise(&(0x7f0000920000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x13) setreuid(r0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x6, 0x1000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x3, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x9000) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6, 0x0, 0x8}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") 494.453941ms ago: executing program 0 (id=622): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4668, &(0x7f0000000040)={0x0, 0xc89f, 0xc002, 0x2, 0x20002f7}) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000109c6bc885054f23b00000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x100}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) socketpair(0x25, 0x80000, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 380.10412ms ago: executing program 4 (id=623): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38e3590d464c4e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000840)={'#! ', './file0'}, 0xb) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000000080)="4f1002f8839db50f6b17361b", 0xc) sendfile(r7, r2, 0x0, 0x3ffff) sendfile(r7, r2, 0x0, 0x7ffff000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) 379.03025ms ago: executing program 1 (id=624): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) r6 = getegid() ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0x9) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[r9, r9], 0x0, 0x10, 0x1000}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x1, 0x0, r9}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r10, 0x0, 0x8000000}, 0x27) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000d00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="feb6efdf", @ANYRES64=r2, @ANYRESOCT, @ANYRES16=r1, @ANYBLOB="0ffe0500", @ANYRES64, @ANYRES8, @ANYBLOB="020003", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r5, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r3, @ANYRESOCT, @ANYBLOB='\b\x00', @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES32=r6, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r3, &(0x7f0000000040)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz72NwkAUhdHrkUf2SpY23yK2ElJimqAPCiAnoB2KQZAMMj8uAQjOCT+9G7zwWSXX1lorS7gk3d+Y/5Ts6xy6JO0u/bDMTllya7V/9cOuZpPUnyTTPF4NY7KdUpLH0e95fN52WR/f+CkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfK1bAAAA//8UbRpm") timerfd_create(0x2, 0x80000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) 259.01861ms ago: executing program 2 (id=625): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e00e0006e657464657673696d00006e759664657673696d300000ce32a44720b75b4b42c7907e41fd82edc58e72e58a003a3b3c74f5ec1dcc068907b530639f90e7d2bc0319a3316e3c5b1758c332bfa8b62d95bbca0e3fdb23264273af00000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x80082, &(0x7f00000001c0)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@dioread_nolock}, {@journal_checksum}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x1, 0x468, &(0x7f0000000a80)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) write$ppp(r0, &(0x7f0000000380)="4176adc3a0", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000024c0), 0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000900)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f00000003c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r2, @ANYBLOB="00012bbd7000fedbdf253d0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c74696361737400080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c746963617374000e0001006e6574646576736d6d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c7469636173e569d2e974000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d75ef571c63ed7d465e0e0001006e657464657673696d0000000f0002006e657464657673696d300000bc778200736f757263655f6d61635f69735f6d756c746963617374008c7c26984614baf507b0ded20f0086a6b97d01b7cd64dc83cec0ffc2f9f33c34430593d9a63271d6b6f4755fb06f1fcd3df4d4dbd3a9698580"], 0x13c}, 0x1, 0x0, 0x0, 0x2}, 0x4000) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x7, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x80, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 142.561229ms ago: executing program 3 (id=627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) io_cancel(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@remote, 0x26}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000e40)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r6, 0x2, &(0x7f00000000c0)={&(0x7f0000000000)=""/114, 0x72}) ptrace$getregset(0x4204, r6, 0x2, &(0x7f0000000740)={0x0}) write$cgroup_subtree(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r3, @ANYRESDEC], 0x27) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r0, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) 122.21195ms ago: executing program 1 (id=628): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) ioperm(0x0, 0xd, 0x4000000000000020) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0xc29080, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x3c}, 0x2, @in6=@local, 0x6, 0x4, 0x3, 0x0, 0x401}]}]}, 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000040)=0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x2, @rand_addr, 0x6}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000080000000000000004850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) writev(r7, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c10000000010000000000", 0x58}], 0x1) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) 0s ago: executing program 1 (id=629): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe", 0x39}], 0x1}}], 0x2, 0x0) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xfffffffffffffde0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9, 0xc180}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000800000", @ANYRES32=r3, @ANYBLOB="0000000000000008b70383ec72f3bbdd2a49b112000000000000850000001b000052b7000000cc5b0000c2aa35eb00c3e533592f69d1c7c87e307a87197600000000000000002cfbd13b09fa83e9635240c49f42705d09c57b1b9fe87acb20b3665b22f09e5577ec9e809aeaf6ddc3898fa538985f7dc7d92855914a26fa485297a0e3c9d1cdc416bc40d198a3f8940de21a34792171331825eb94e48fd472"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$eventfd(r5, &(0x7f0000000140)=0x7, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f0000002dc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x2, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x6, 0x2, 0x2}, {0x3, 0x5}]}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x2e, 0x30]}}, &(0x7f0000002e40)=""/217, 0x45, 0xd9, 0x1, 0x6}, 0x28) fdatasync(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r7, 0x1, &(0x7f0000000480)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x8, 0x0, r6, &(0x7f0000000600)="6d2868544c9431cff63a37c148582d6c244f58708e20e600", 0x18, 0x3, 0x0, 0x1}]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x420801, 0x98) kernel console output (not intermixed with test programs): ournal. Quota mode: writeback. [ 52.909847][ T3905] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.88: bg 0: block 10: padding at end of block bitmap is not set [ 52.968809][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.063555][ T3913] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 53.168553][ T3297] printk: udevd: 6 output lines suppressed due to ratelimiting [ 53.233643][ T3920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 53.364588][ T3924] 0ªX¹¦D: left allmulticast mode [ 53.468387][ T3924] net_ratelimit: 105 callbacks suppressed [ 53.468402][ T3924] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.490512][ T10] lo speed is unknown, defaulting to 1000 [ 53.500124][ T3925] netlink: 32 bytes leftover after parsing attributes in process `syz.4.92'. [ 53.507237][ T3920] lo speed is unknown, defaulting to 1000 [ 53.557048][ T3536] IPVS: starting estimator thread 0... [ 53.586905][ C0] Illegal XDP return value 16128 on prog (id 95) dev bridge0, expect packet loss! [ 53.645342][ T3926] IPVS: using max 2016 ests per chain, 100800 per kthread [ 53.723508][ T3929] loop0: detected capacity change from 0 to 512 [ 53.743864][ T3929] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.770149][ T3929] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.93: invalid indirect mapped block 4294967295 (level 0) [ 53.796460][ T3929] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.93: invalid indirect mapped block 4294967295 (level 1) [ 53.823328][ T3929] EXT4-fs (loop0): 1 orphan inode deleted [ 53.829173][ T3929] EXT4-fs (loop0): 1 truncate cleaned up [ 53.848903][ T3929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.030719][ T3937] loop1: detected capacity change from 0 to 1024 [ 54.045661][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.079186][ T3937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.095953][ T3936] netlink: 'syz.4.95': attribute type 3 has an invalid length. [ 54.118977][ T3937] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.94: Allocating blocks 385-513 which overlap fs metadata [ 54.124181][ T3936] netlink: 'syz.4.95': attribute type 3 has an invalid length. [ 54.370487][ T3952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3952 comm=syz.0.99 [ 54.410513][ T3952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 54.671319][ T3931] EXT4-fs (loop1): pa ffff888105514150: logic 16, phys. 129, len 24 [ 54.679430][ T3931] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 54.740705][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.859694][ T3964] netlink: 14 bytes leftover after parsing attributes in process `syz.4.103'. [ 54.936248][ T3968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.965158][ T3969] veth0: entered promiscuous mode [ 55.050373][ T3968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.131906][ T3968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.233587][ T3968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.274447][ T3971] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 55.275343][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 55.275360][ T29] audit: type=1400 audit(55.251:1657): avc: denied { write } for pid=3970 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 55.341966][ T56] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.351462][ T56] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.357220][ T29] audit: type=1400 audit(55.301:1658): avc: denied { load_policy } for pid=3970 comm="syz.0.104" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.360734][ T3971] SELinux: failed to load policy [ 55.407699][ T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.434121][ T56] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.509434][ T3959] loop2: detected capacity change from 0 to 512 [ 55.620846][ T3975] loop4: detected capacity change from 0 to 1024 [ 55.658543][ T3974] loop2: detected capacity change from 0 to 7 [ 55.666922][ T3975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 55.680065][ T29] audit: type=1400 audit(55.661:1659): avc: denied { getopt } for pid=3972 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.698878][ T29] audit: type=1400 audit(55.661:1660): avc: denied { connect } for pid=3972 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.751871][ T3975] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3975 comm=wÞ¡ÿ [ 55.772427][ T3980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.779955][ T3980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.793500][ T3975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=3975 comm=wÞ¡ÿ [ 55.813305][ T3980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.820837][ T3980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.823289][ T29] audit: type=1400 audit(55.661:1661): avc: denied { name_connect } for pid=3972 comm="syz.0.105" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 55.847563][ T29] audit: type=1400 audit(55.711:1662): avc: denied { map } for pid=3972 comm="syz.0.105" path="/proc/sys/net/ipv4/tcp_wmem" dev="proc" ino=5714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1 [ 55.870994][ T29] audit: type=1400 audit(55.751:1663): avc: denied { ioctl } for pid=3979 comm="syz.1.107" path="socket:[6765]" dev="sockfs" ino=6765 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.895818][ T29] audit: type=1400 audit(55.791:1664): avc: denied { listen } for pid=3958 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 55.898292][ T3981] loop1: detected capacity change from 0 to 164 [ 55.941847][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.960783][ T3984] program syz.2.108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.090931][ T29] audit: type=1400 audit(55.821:1665): avc: denied { tracepoint } for pid=3979 comm="syz.1.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 56.110067][ T29] audit: type=1400 audit(55.841:1666): avc: denied { accept } for pid=3958 comm="syz.2.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.133543][ T3989] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 56.228143][ T3996] loop4: detected capacity change from 0 to 128 [ 56.258664][ T3996] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.464868][ T4005] loop2: detected capacity change from 0 to 1024 [ 56.481763][ T4003] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4003 comm=syz.3.114 [ 56.518407][ T4005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.584693][ T4005] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.113: Allocating blocks 385-513 which overlap fs metadata [ 56.656857][ T4014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.665836][ T4014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.680512][ T4013] sch_fq: defrate 4294967295 ignored. [ 56.690620][ T4013] syz.1.116 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.018489][ T4007] Set syz1 is full, maxelem 65536 reached [ 57.103596][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.144997][ T4000] EXT4-fs (loop2): pa ffff888106ee9150: logic 16, phys. 129, len 24 [ 57.153158][ T4000] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 57.174055][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.199131][ T4023] loop2: detected capacity change from 0 to 1024 [ 57.219977][ T4025] loop4: detected capacity change from 0 to 2048 [ 57.228235][ T4023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.262540][ T4023] usb usb1: check_ctrlrecip: process 4023 (+}[@) requesting ep 01 but needs 81 [ 57.271627][ T4023] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 57.278144][ T4025] loop4: p2 p3 p7 [ 57.282646][ T4023] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm +}[@: lblock 1 mapped to illegal pblock 1 (length 15) [ 57.310228][ T4023] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 57.322702][ T4023] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.322702][ T4023] [ 57.361260][ T4029] loop3: detected capacity change from 0 to 512 [ 57.383165][ T4032] team0 (unregistering): Port device team_slave_0 removed [ 57.393248][ T4029] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.407154][ T4032] team0 (unregistering): Port device team_slave_1 removed [ 57.418867][ T3415] syz0: Port: 1 Link DOWN [ 57.490194][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.509425][ T4037] loop2: detected capacity change from 0 to 128 [ 57.517534][ T4037] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 57.523059][ T4039] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 57.525646][ T4037] System zones: 1-3, 19-19, 35-36 [ 57.538588][ T4037] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.646086][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.729071][ T4058] 9pnet_fd: p9_fd_create_tcp (4058): problem connecting socket to 127.0.0.1 [ 57.788396][ T4060] siw: device registration error -23 [ 58.035260][ T4065] __nla_validate_parse: 3 callbacks suppressed [ 58.041555][ T4065] netlink: 112 bytes leftover after parsing attributes in process `syz.1.128'. [ 58.147810][ T4065] loop1: detected capacity change from 0 to 8192 [ 58.180226][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.293007][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.130'. [ 58.402872][ T4088] loop1: detected capacity change from 0 to 128 [ 58.417185][ T4084] serio: Serial port ptm0 [ 58.457066][ T4092] loop1: detected capacity change from 0 to 1024 [ 58.474434][ T4092] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.580313][ T4092] netlink: 20 bytes leftover after parsing attributes in process `syz.1.134'. [ 58.592058][ T4101] netlink: 96 bytes leftover after parsing attributes in process `syz.2.135'. [ 58.636391][ T4092] bond1: entered promiscuous mode [ 58.641462][ T4092] bond1: entered allmulticast mode [ 58.667503][ T4112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.134'. [ 58.669544][ T4092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.702167][ T4092] bond1 (unregistering): Released all slaves [ 58.776450][ T4119] loop0: detected capacity change from 0 to 164 [ 58.789568][ T4127] netlink: 'syz.3.140': attribute type 4 has an invalid length. [ 58.805942][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.814987][ T4110] bio_check_eod: 21 callbacks suppressed [ 58.815074][ T4110] syz.0.137: attempt to access beyond end of device [ 58.815074][ T4110] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 58.843670][ T4130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.140'. [ 58.861960][ T4110] syz.0.137: attempt to access beyond end of device [ 58.861960][ T4110] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 58.988104][ T4148] serio: Serial port ptm0 [ 59.084372][ T4133] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 59.092205][ T4133] team0: Device dummy0 is up. Set it down before adding it as a team port [ 59.213794][ T4161] IPv6: Can't replace route, no match found [ 59.340415][ T4163] loop0: detected capacity change from 0 to 1764 [ 59.362213][ T4165] loop1: detected capacity change from 0 to 512 [ 59.376842][ T4165] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.392725][ T4165] EXT4-fs (loop1): 1 truncate cleaned up [ 59.400487][ T4165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.453776][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.555702][ T4168] Falling back ldisc for ttyS3. [ 59.560843][ T4170] loop1: detected capacity change from 0 to 1024 [ 59.588993][ T4170] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 59.629414][ T4174] loop2: detected capacity change from 0 to 1024 [ 59.649008][ T4174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.650405][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 59.742944][ T4174] siw: device registration error -23 [ 59.744298][ T4184] netlink: 3 bytes leftover after parsing attributes in process `syz.4.153'. [ 59.759432][ T4184] 0ªX¹¦À: renamed from caif0 [ 59.766362][ T4184] 0ªX¹¦À: entered allmulticast mode [ 59.771628][ T4184] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 59.829242][ T4172] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 59.861010][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.892776][ T4198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 59.987088][ T4205] netlink: 'syz.2.155': attribute type 1 has an invalid length. [ 60.006458][ T4200] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 60.015684][ T4205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.052620][ T4205] bond1: (slave geneve2): making interface the new active one [ 60.062068][ T4205] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 60.074613][ T4216] netlink: 'syz.4.157': attribute type 1 has an invalid length. [ 60.163684][ T4222] netlink: 'syz.2.158': attribute type 3 has an invalid length. [ 60.171637][ T4222] netlink: 'syz.2.158': attribute type 3 has an invalid length. [ 60.318733][ T4235] program syz.0.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.728951][ T29] kauditd_printk_skb: 1006 callbacks suppressed [ 60.728966][ T29] audit: type=1326 audit(60.711:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 60.758054][ T29] audit: type=1326 audit(60.711:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 60.832589][ T4243] loop2: detected capacity change from 0 to 256 [ 60.865157][ T4243] FAT-fs (loop2): bogus number of FAT sectors [ 60.871445][ T4243] FAT-fs (loop2): Can't find a valid FAT filesystem [ 60.923552][ T29] audit: type=1326 audit(60.711:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 60.946391][ T29] audit: type=1326 audit(60.711:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 60.969104][ T29] audit: type=1326 audit(60.711:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 60.991840][ T29] audit: type=1326 audit(60.711:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 61.014593][ T29] audit: type=1326 audit(60.711:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 61.037377][ T29] audit: type=1326 audit(60.711:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 61.060172][ T29] audit: type=1326 audit(60.711:2681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 61.082810][ T29] audit: type=1326 audit(60.711:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4242 comm="syz.2.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 61.283276][ T4259] sch_fq: defrate 4294967295 ignored. [ 61.367565][ T4240] lo speed is unknown, defaulting to 1000 [ 61.488541][ T4276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.497424][ T4276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.583764][ T4282] vlan2: entered promiscuous mode [ 61.588880][ T4282] veth1: entered promiscuous mode [ 61.665906][ T4285] loop2: detected capacity change from 0 to 512 [ 61.673680][ T4285] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.742809][ T4285] EXT4-fs error (device loop2): xattr_find_entry:333: inode #15: comm syz.2.171: corrupted xattr entries [ 61.765830][ T4285] EXT4-fs (loop2): 1 truncate cleaned up [ 61.780699][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.825064][ T4289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.880955][ T4289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.050989][ T4298] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4298 comm=syz.1.175 [ 62.266744][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.431925][ T4308] loop3: detected capacity change from 0 to 512 [ 62.451117][ T4308] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.462581][ T4308] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.176: bad orphan inode 13 [ 62.482884][ T4308] ext4_test_bit(bit=12, block=18) = 1 [ 62.488321][ T4308] is_bad_inode(inode)=0 [ 62.492484][ T4308] NEXT_ORPHAN(inode)=2130706432 [ 62.493823][ T4279] Set syz1 is full, maxelem 65536 reached [ 62.497390][ T4308] max_ino=32 [ 62.506417][ T4308] i_nlink=1 [ 62.512239][ T4308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.530485][ T4297] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.176: deleted inode referenced: 12 [ 62.539763][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.550354][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.825960][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.195640][ T4334] GUP no longer grows the stack in syz.0.187 (4334): 200000004000-20000000a000 (200000002000) [ 63.206082][ T4334] CPU: 0 UID: 0 PID: 4334 Comm: syz.0.187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.206114][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.206206][ T4334] Call Trace: [ 63.206215][ T4334] [ 63.206224][ T4334] __dump_stack+0x1d/0x30 [ 63.206261][ T4334] dump_stack_lvl+0xe8/0x140 [ 63.206287][ T4334] dump_stack+0x15/0x1b [ 63.206308][ T4334] __get_user_pages+0x198d/0x1fa0 [ 63.206389][ T4334] ? __rcu_read_unlock+0x4f/0x70 [ 63.206481][ T4334] get_user_pages_remote+0x1d5/0x6d0 [ 63.206632][ T4334] __access_remote_vm+0x15c/0x590 [ 63.206670][ T4334] access_remote_vm+0x32/0x40 [ 63.206738][ T4334] proc_pid_cmdline_read+0x32b/0x6c0 [ 63.206783][ T4334] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 63.206899][ T4334] vfs_readv+0x3fb/0x690 [ 63.206951][ T4334] __x64_sys_preadv+0xfd/0x1c0 [ 63.206981][ T4334] x64_sys_call+0x282a/0x2ff0 [ 63.207069][ T4334] do_syscall_64+0xd2/0x200 [ 63.207107][ T4334] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.207137][ T4334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.207190][ T4334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.207242][ T4334] RIP: 0033:0x7f66b067ebe9 [ 63.207270][ T4334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.207293][ T4334] RSP: 002b:00007f66af0df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 63.207322][ T4334] RAX: ffffffffffffffda RBX: 00007f66b08b5fa0 RCX: 00007f66b067ebe9 [ 63.207338][ T4334] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000006 [ 63.207353][ T4334] RBP: 00007f66b0701e19 R08: 0000000000000000 R09: 0000000000000000 [ 63.207419][ T4334] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 63.207436][ T4334] R13: 00007f66b08b6038 R14: 00007f66b08b5fa0 R15: 00007ffffe547ca8 [ 63.207460][ T4334] [ 63.214043][ T4334] netlink: 'syz.0.187': attribute type 21 has an invalid length. [ 63.222599][ T4339] __nla_validate_parse: 5 callbacks suppressed [ 63.222617][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 63.394404][ T4344] loop1: detected capacity change from 0 to 1024 [ 63.433199][ T4344] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.186: Failed to acquire dquot type 0 [ 63.446082][ T4344] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 63.463959][ T4344] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.186: corrupted inode contents [ 63.479577][ T4344] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.186: mark_inode_dirty error [ 63.491165][ T4344] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.186: corrupted inode contents [ 63.504182][ T4344] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.186: mark_inode_dirty error [ 63.516837][ T4344] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.186: corrupted inode contents [ 63.529874][ T4344] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 63.538839][ T4344] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.186: corrupted inode contents [ 63.545499][ T4334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.187'. [ 63.551762][ T4344] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.186: mark_inode_dirty error [ 63.559653][ T4334] netlink: 'syz.0.187': attribute type 1 has an invalid length. [ 63.594083][ T4339] bridge_slave_1: left allmulticast mode [ 63.599862][ T4339] bridge_slave_1: left promiscuous mode [ 63.605631][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.613551][ T4344] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 63.623318][ T4344] EXT4-fs (loop1): 1 truncate cleaned up [ 63.629678][ T4344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.644827][ T4339] bridge_slave_0: left allmulticast mode [ 63.650756][ T4339] bridge_slave_0: left promiscuous mode [ 63.656481][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.664519][ T4331] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.676748][ T4331] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.709752][ T4328] lo speed is unknown, defaulting to 1000 [ 63.753176][ T4350] syzkaller0: entered promiscuous mode [ 63.802937][ T4351] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 63.806879][ T4350] syzkaller0: entered allmulticast mode [ 63.833013][ T4342] lo speed is unknown, defaulting to 1000 [ 63.869827][ T4354] loop3: detected capacity change from 0 to 256 [ 63.922702][ T4354] netlink: 178020 bytes leftover after parsing attributes in process `syz.3.189'. [ 63.956696][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.965741][ T4354] netlink: zone id is out of range [ 63.967901][ T4356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 63.970865][ T4354] netlink: zone id is out of range [ 63.970876][ T4354] netlink: zone id is out of range [ 63.970883][ T4354] netlink: zone id is out of range [ 63.995218][ T4354] netlink: zone id is out of range [ 64.000354][ T4354] netlink: zone id is out of range [ 64.037359][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.190'. [ 64.064818][ T4364] loop1: detected capacity change from 0 to 128 [ 64.072330][ T4354] netlink: zone id is out of range [ 64.077975][ T4354] netlink: zone id is out of range [ 64.084236][ T4364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 64.092329][ T4364] System zones: 1-3, 19-19, 35-36 [ 64.099242][ T4364] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 64.186840][ T4370] SELinux: security_context_str_to_sid () failed with errno=-22 [ 64.342725][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.400848][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 64.411126][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'. [ 64.433748][ T4362] dummy0: entered allmulticast mode [ 64.441871][ T4361] dummy0: left allmulticast mode [ 64.535766][ T4407] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 64.547423][ T4404] IPVS: stopping master sync thread 4407 ... [ 64.572539][ T4404] loop3: detected capacity change from 0 to 2048 [ 64.602998][ T4404] loop3: p1 < > p4 [ 64.607673][ T4404] loop3: p4 size 8388608 extends beyond EOD, truncated [ 64.655847][ T4412] sch_fq: defrate 4294967295 ignored. [ 64.853247][ T4419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.201'. [ 64.901100][ T4424] serio: Serial port ptm0 [ 64.959612][ T4429] netlink: 'syz.2.204': attribute type 4 has an invalid length. [ 65.001943][ T4429] netlink: 14 bytes leftover after parsing attributes in process `syz.2.204'. [ 65.161462][ T4434] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.216'. [ 65.171040][ T4432] loop2: detected capacity change from 0 to 128 [ 65.209253][ T4437] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 65.670750][ T4468] loop3: detected capacity change from 0 to 512 [ 65.680297][ T4468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.680464][ T4467] tipc: Enabling of bearer rejected, failed to enable media [ 65.691853][ T4468] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.212: corrupted in-inode xattr: overlapping e_value [ 65.711816][ T4468] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.212: couldn't read orphan inode 15 (err -117) [ 65.712342][ T4468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.764068][ T29] kauditd_printk_skb: 987 callbacks suppressed [ 65.764090][ T29] audit: type=1326 audit(833.901:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.793283][ T29] audit: type=1326 audit(833.901:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.829916][ T4474] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 65.840731][ T29] audit: type=1326 audit(833.964:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.863545][ T29] audit: type=1326 audit(833.964:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.886368][ T29] audit: type=1326 audit(833.964:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.909384][ T29] audit: type=1326 audit(833.964:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.932175][ T29] audit: type=1326 audit(833.964:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.954582][ T4474] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.955015][ T29] audit: type=1326 audit(833.964:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 65.970381][ T4477] bond1: (slave geneve2): making interface the new active one [ 65.984296][ T29] audit: type=1326 audit(833.964:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9f2fad550 code=0x7ffc0000 [ 65.993529][ T4477] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 66.014551][ T29] audit: type=1326 audit(833.964:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4471 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f2faebe9 code=0x7ffc0000 [ 66.064946][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.125790][ T4482] loop3: detected capacity change from 0 to 8192 [ 66.253593][ T4495] loop2: detected capacity change from 0 to 2048 [ 66.316013][ T4495] loop2: p1 < > p4 [ 66.320610][ T4495] loop2: p4 size 8388608 extends beyond EOD, truncated [ 66.847613][ T4508] loop4: detected capacity change from 0 to 128 [ 67.092535][ T4510] loop3: detected capacity change from 0 to 764 [ 67.100018][ T4510] iso9660: Unknown parameter '' [ 67.111247][ T4510] lo speed is unknown, defaulting to 1000 [ 67.117654][ T4510] lo speed is unknown, defaulting to 1000 [ 67.123583][ T4510] lo speed is unknown, defaulting to 1000 [ 67.132698][ T4516] serio: Serial port ptm0 [ 67.144635][ T4514] vlan2: entered promiscuous mode [ 67.149870][ T4514] vlan2: entered allmulticast mode [ 67.155058][ T4514] hsr_slave_1: entered allmulticast mode [ 67.164370][ T4510] infiniband sz1: set down [ 67.169110][ T4510] infiniband sz1: added lo [ 67.173713][ T3536] lo speed is unknown, defaulting to 1000 [ 67.186896][ T4510] RDS/IB: sz1: added [ 67.191173][ T4510] smc: adding ib device sz1 with port count 1 [ 67.197816][ T4510] smc: ib device sz1 port 1 has pnetid [ 67.203956][ T3415] lo speed is unknown, defaulting to 1000 [ 67.210373][ T4510] lo speed is unknown, defaulting to 1000 [ 67.215226][ T4524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4524 comm=syz.4.228 [ 67.249474][ T4510] lo speed is unknown, defaulting to 1000 [ 67.286810][ T4510] lo speed is unknown, defaulting to 1000 [ 67.322288][ T4510] lo speed is unknown, defaulting to 1000 [ 67.357245][ T4510] lo speed is unknown, defaulting to 1000 [ 67.510108][ T4539] loop2: detected capacity change from 0 to 7 [ 68.370717][ T4562] lo speed is unknown, defaulting to 1000 [ 68.377008][ T4562] lo speed is unknown, defaulting to 1000 [ 68.406372][ T4564] netlink: 'syz.4.243': attribute type 1 has an invalid length. [ 68.414210][ T4564] __nla_validate_parse: 8 callbacks suppressed [ 68.414295][ T4564] netlink: 224 bytes leftover after parsing attributes in process `syz.4.243'. [ 68.596956][ T4571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.627631][ T4573] netlink: 'syz.4.245': attribute type 21 has an invalid length. [ 68.939094][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 68.958078][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.248'. [ 68.971827][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz.1.248'. [ 69.028951][ T4596] loop1: detected capacity change from 0 to 256 [ 69.049845][ T4596] netlink: 178020 bytes leftover after parsing attributes in process `syz.1.251'. [ 69.059884][ T4596] net_ratelimit: 104 callbacks suppressed [ 69.059902][ T4596] netlink: zone id is out of range [ 69.071279][ T4596] netlink: zone id is out of range [ 69.076408][ T4596] netlink: zone id is out of range [ 69.081750][ T4596] netlink: zone id is out of range [ 69.086891][ T4596] netlink: zone id is out of range [ 69.092057][ T4596] netlink: zone id is out of range [ 69.097186][ T4596] netlink: zone id is out of range [ 69.102746][ T4596] netlink: zone id is out of range [ 69.107943][ T4596] netlink: zone id is out of range [ 69.113063][ T4596] netlink: zone id is out of range [ 69.563886][ T4605] loop2: detected capacity change from 0 to 7 [ 69.608200][ T4592] 9pnet_fd: p9_fd_create_tcp (4592): problem connecting socket to 127.0.0.1 [ 69.622625][ T4608] siw: device registration error -23 [ 69.644064][ T4608] netlink: 'syz.0.255': attribute type 10 has an invalid length. [ 69.654117][ T4606] smc: net device bond0 applied user defined pnetid SYZ0 [ 69.671584][ T4608] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 69.713747][ T4613] loop4: detected capacity change from 0 to 512 [ 69.739665][ T4613] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.756900][ T4613] EXT4-fs (loop4): 1 truncate cleaned up [ 69.773717][ T4613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.812801][ T4602] dummy0: entered allmulticast mode [ 69.819886][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.831016][ T4601] dummy0: left allmulticast mode [ 69.902595][ T4618] loop1: detected capacity change from 0 to 2048 [ 69.963510][ T4618] loop1: p1 < > p4 [ 69.980828][ T4618] loop1: p4 size 8388608 extends beyond EOD, truncated [ 70.023967][ T4627] loop4: detected capacity change from 0 to 1024 [ 70.041972][ T4627] EXT4-fs: Ignoring removed bh option [ 70.061434][ T4627] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.094965][ T4627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 70.122221][ T4627] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.259: lblock 2 mapped to illegal pblock 2 (length 1) [ 70.150736][ T4627] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.259: lblock 0 mapped to illegal pblock 48 (length 1) [ 70.180489][ T4627] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.259: Failed to acquire dquot type 0 [ 70.217881][ T4627] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 70.235870][ T4696] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4696 comm=syz.0.261 [ 70.242309][ T4627] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.259: mark_inode_dirty error [ 70.280619][ T4627] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 70.307318][ T4627] EXT4-fs (loop4): 1 orphan inode deleted [ 70.317033][ T4635] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 70.321979][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.349911][ T4699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.264'. [ 70.385590][ T4635] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:18: Failed to release dquot type 0 [ 70.646002][ T29] kauditd_printk_skb: 1115 callbacks suppressed [ 70.646016][ T29] audit: type=1400 audit(839.035:4790): avc: denied { bind } for pid=4706 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 70.710081][ T4707] tmpfs: Unknown parameter 'usrjquota' [ 70.725786][ T29] audit: type=1400 audit(839.077:4791): avc: denied { create } for pid=4706 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 70.745096][ T29] audit: type=1400 audit(839.077:4792): avc: denied { sys_admin } for pid=4706 comm="syz.3.267" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 70.765500][ T29] audit: type=1400 audit(839.108:4793): avc: denied { remount } for pid=4706 comm="syz.3.267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.789083][ T4714] netlink: 36 bytes leftover after parsing attributes in process `syz.2.266'. [ 70.819327][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.832669][ T3306] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 70.847342][ T3306] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 70.857545][ T3306] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 70.871226][ T4719] loop3: detected capacity change from 0 to 1024 [ 70.880691][ T4719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.901179][ T4724] netlink: 24 bytes leftover after parsing attributes in process `syz.4.268'. [ 70.926472][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.268'. [ 70.997984][ T29] audit: type=1400 audit(839.402:4794): avc: denied { map_create } for pid=4726 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.019161][ T4729] program syz.3.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.072558][ T29] audit: type=1400 audit(839.423:4795): avc: denied { read } for pid=4718 comm="syz.3.269" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.095755][ T29] audit: type=1400 audit(839.423:4796): avc: denied { open } for pid=4718 comm="syz.3.269" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.102758][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 71.119420][ T29] audit: type=1400 audit(839.423:4797): avc: denied { prog_load } for pid=4726 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 71.146315][ T29] audit: type=1400 audit(839.423:4798): avc: denied { bpf } for pid=4726 comm="syz.0.270" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.166170][ T29] audit: type=1400 audit(839.423:4799): avc: denied { create } for pid=4726 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 71.252083][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.268944][ T4732] lo speed is unknown, defaulting to 1000 [ 71.275287][ T4732] lo speed is unknown, defaulting to 1000 [ 71.364699][ T4738] loop4: detected capacity change from 0 to 512 [ 71.385574][ T4738] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 71.397034][ T4738] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.274: invalid indirect mapped block 2683928664 (level 1) [ 71.416466][ T4738] EXT4-fs (loop4): 1 truncate cleaned up [ 71.424156][ T36] IPVS: starting estimator thread 0... [ 71.436485][ T4740] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 71.507753][ T4745] IPVS: using max 2400 ests per chain, 120000 per kthread [ 71.527793][ T4751] loop4: detected capacity change from 0 to 512 [ 71.535233][ T4751] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.568341][ T4751] EXT4-fs (loop4): 1 truncate cleaned up [ 71.584304][ T4751] EXT4-fs mount: 2 callbacks suppressed [ 71.584318][ T4751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.642074][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.690236][ T4759] 9pnet_fd: p9_fd_create_tcp (4759): problem connecting socket to 127.0.0.1 [ 71.764948][ T4759] loop3: detected capacity change from 0 to 8192 [ 71.778092][ T4765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4765 comm=syz.4.281 [ 71.823477][ T4759] loop3: p1 p2 < > p3 p4 < p5 > [ 71.828562][ T4759] loop3: partition table partially beyond EOD, truncated [ 71.835754][ T4759] loop3: p1 size 100663296 extends beyond EOD, truncated [ 71.844980][ T4759] loop3: p2 start 591104 is beyond EOD, truncated [ 71.851618][ T4759] loop3: p3 start 33572980 is beyond EOD, truncated [ 71.859315][ T4759] loop3: p5 size 100663296 extends beyond EOD, truncated [ 72.147316][ T4788] netlink: 'syz.0.286': attribute type 3 has an invalid length. [ 72.224561][ T4788] 8021q: VLANs not supported on wg2 [ 72.375778][ T4795] loop1: detected capacity change from 0 to 512 [ 72.383889][ T4795] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.395937][ T4795] EXT4-fs (loop1): 1 truncate cleaned up [ 72.402134][ T4795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.458624][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.483119][ T4805] loop1: detected capacity change from 0 to 1024 [ 72.500009][ T4805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.515132][ T4810] veth0: entered promiscuous mode [ 72.522074][ T4805] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.290: lblock 0 mapped to illegal pblock 0 (length 6) [ 72.535645][ T4807] loop4: detected capacity change from 0 to 512 [ 72.539040][ T4805] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.290: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 72.549677][ T4807] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 72.572082][ T4807] EXT4-fs (loop4): 1 truncate cleaned up [ 72.578387][ T4807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.605767][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.617579][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.695812][ T4818] loop4: detected capacity change from 0 to 1024 [ 72.702685][ T4818] EXT4-fs: Ignoring removed orlov option [ 72.711010][ T4818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.735851][ T4818] program syz.4.293 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.813500][ T4822] loop1: detected capacity change from 0 to 128 [ 72.822701][ T4822] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 72.849894][ T4822] System zones: 1-3, 19-19, 35-36 [ 72.867473][ T4822] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 72.918700][ T4822] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.962791][ T4822] rdma_rxe: rxe_newlink: failed to add syz_tun [ 72.997978][ T4828] loop3: detected capacity change from 0 to 2048 [ 73.017081][ T4828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 73.083348][ T4836] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:169: inode #12: comm syz.3.297: inline data xattr refers to an external xattr inode [ 73.174561][ T4836] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.231619][ T4836] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 600 with error 28 [ 73.244061][ T4836] EXT4-fs (loop3): This should not happen!! Data will be lost [ 73.244061][ T4836] [ 73.253785][ T4836] EXT4-fs (loop3): Total free blocks count 0 [ 73.259900][ T4836] EXT4-fs (loop3): Free/Dirty block details [ 73.265844][ T4836] EXT4-fs (loop3): free_blocks=2415919104 [ 73.271602][ T4836] EXT4-fs (loop3): dirty_blocks=608 [ 73.276827][ T4836] EXT4-fs (loop3): Block reservation details [ 73.282882][ T4836] EXT4-fs (loop3): i_reserved_data_blocks=38 [ 73.293079][ T4843] __nla_validate_parse: 12 callbacks suppressed [ 73.293104][ T4843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 73.308445][ T4843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.299'. [ 73.370004][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.395061][ T4639] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 73.421769][ T4848] netlink: 178020 bytes leftover after parsing attributes in process `syz.0.303'. [ 73.422836][ T4846] pim6reg1: entered promiscuous mode [ 73.495086][ T4853] SELinux: policydb version 0 does not match my version range 15-35 [ 73.508657][ T4853] SELinux: failed to load policy [ 73.571124][ T4851] lo speed is unknown, defaulting to 1000 [ 73.591262][ T4851] lo speed is unknown, defaulting to 1000 [ 73.613445][ T4857] vhci_hcd: invalid port number 96 [ 73.618608][ T4857] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 73.641027][ T4863] loop2: detected capacity change from 0 to 2048 [ 73.690337][ T4863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000700 r/w without journal. Quota mode: none. [ 73.967909][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000700. [ 74.024146][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.033297][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.043098][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.086063][ T4882] pim6reg: entered allmulticast mode [ 74.096895][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.106012][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.166593][ T4885] pim6reg: left allmulticast mode [ 74.175115][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.223675][ T4882] loop2: detected capacity change from 0 to 164 [ 74.242091][ T4882] iso9660: Unknown parameter '01777777777777777777777ÿ' [ 74.256194][ T4879] netlink: 36 bytes leftover after parsing attributes in process `syz.2.311'. [ 74.424532][ T4894] loop2: detected capacity change from 0 to 512 [ 74.431075][ T4891] loop1: detected capacity change from 0 to 2048 [ 74.434516][ T4895] loop4: detected capacity change from 0 to 2048 [ 74.446527][ T4894] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.462244][ T4894] EXT4-fs (loop2): 1 truncate cleaned up [ 74.468402][ T4894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.502248][ T4891] loop1: p1 < > p4 [ 74.508835][ T4891] loop1: p4 size 8388608 extends beyond EOD, truncated [ 74.530316][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.547151][ T4902] loop3: detected capacity change from 0 to 1024 [ 74.554224][ T4902] EXT4-fs: Ignoring removed orlov option [ 74.572049][ T4902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.599860][ T4897] program syz.3.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.460404][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.494747][ T4920] loop2: detected capacity change from 0 to 1024 [ 75.519018][ T4920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.583120][ T29] kauditd_printk_skb: 1233 callbacks suppressed [ 75.583138][ T29] audit: type=1400 audit(844.211:6033): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.690274][ T29] audit: type=1400 audit(844.337:6034): avc: denied { write } for pid=4924 comm="syz.3.318" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 75.726806][ T4927] loop1: detected capacity change from 0 to 2048 [ 75.743255][ T4926] siw: device registration error -23 [ 75.753870][ T29] audit: type=1326 audit(844.379:6035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.776700][ T29] audit: type=1326 audit(844.379:6036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.799496][ T29] audit: type=1326 audit(844.379:6037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.822287][ T29] audit: type=1326 audit(844.379:6038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.845069][ T29] audit: type=1326 audit(844.379:6039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.868006][ T29] audit: type=1326 audit(844.379:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.890739][ T29] audit: type=1326 audit(844.389:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.913524][ T29] audit: type=1326 audit(844.389:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4924 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 75.942381][ T4927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000700 r/w without journal. Quota mode: none. [ 76.079569][ T4931] loop3: detected capacity change from 0 to 1024 [ 76.135369][ T4935] loop4: detected capacity change from 0 to 1024 [ 76.148071][ T4931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.199749][ T4935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 76.246293][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.264323][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.276473][ T4935] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.322: lblock 0 mapped to illegal pblock 0 (length 6) [ 76.296574][ T4935] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.322: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 76.468969][ T4947] loop2: detected capacity change from 0 to 1024 [ 76.475876][ T4947] ext4: Unknown parameter 'uid<00000000000000000000' [ 76.581398][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000700. [ 76.592534][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.656765][ T4954] loop2: detected capacity change from 0 to 512 [ 76.665961][ T4959] loop1: detected capacity change from 0 to 164 [ 76.681333][ T4954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.696629][ T4954] EXT4-fs (loop2): 1 truncate cleaned up [ 76.703085][ T4959] syz.1.330: attempt to access beyond end of device [ 76.703085][ T4959] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 76.717736][ T4954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.724936][ T4959] syz.1.330: attempt to access beyond end of device [ 76.724936][ T4959] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 76.810816][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.967333][ T4982] gretap0: entered promiscuous mode [ 77.005063][ T4982] 0ªX¹¦D: renamed from gretap0 [ 77.024199][ T4982] 0ªX¹¦D: left promiscuous mode [ 77.029103][ T4982] 0ªX¹¦D: entered allmulticast mode [ 77.058932][ T4987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4987 comm=syz.3.335 [ 77.066145][ T4982] net_ratelimit: 216 callbacks suppressed [ 77.066235][ T4982] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 77.152957][ T4990] siw: device registration error -23 [ 77.289004][ T4993] loop4: detected capacity change from 0 to 2048 [ 77.337287][ T4993] loop4: p1 < > p4 [ 77.341852][ T4993] loop4: p4 size 8388608 extends beyond EOD, truncated [ 77.528961][ T5001] loop1: detected capacity change from 0 to 512 [ 77.544602][ T5001] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 77.560831][ T5001] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.341: invalid indirect mapped block 2683928664 (level 1) [ 77.592503][ T5001] EXT4-fs (loop1): 1 truncate cleaned up [ 77.606036][ T5001] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.643360][ T5001] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.770527][ T5011] loop1: detected capacity change from 0 to 512 [ 77.791845][ T5011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 77.815551][ T5011] EXT4-fs (loop1): 1 truncate cleaned up [ 77.828257][ T5011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.891635][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.304963][ T5025] __nla_validate_parse: 14 callbacks suppressed [ 78.304979][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 78.311007][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 78.320246][ T5027] loop3: detected capacity change from 0 to 164 [ 78.335378][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 78.368562][ T5027] ISOFS: unable to read i-node block [ 78.373975][ T5027] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 78.380535][ T5022] syzkaller0: entered promiscuous mode [ 78.388638][ T5022] syzkaller0: entered allmulticast mode [ 78.463012][ T5035] loop3: detected capacity change from 0 to 512 [ 78.483570][ T5035] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.501739][ T5035] EXT4-fs (loop3): 1 truncate cleaned up [ 78.507800][ T5035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.589682][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.628041][ T5043] netlink: 9 bytes leftover after parsing attributes in process `syz.0.352'. [ 78.652945][ T5043] gretap0: entered promiscuous mode [ 78.675414][ T5043] netlink: 5 bytes leftover after parsing attributes in process `syz.0.352'. [ 78.692609][ T5046] loop4: detected capacity change from 0 to 2048 [ 78.694725][ T5043] 0ªX¹¦D: renamed from gretap0 [ 78.712099][ T5043] 0ªX¹¦D: left promiscuous mode [ 78.717052][ T5043] 0ªX¹¦D: entered allmulticast mode [ 78.724366][ T5043] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 78.746099][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 78.746500][ T5043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5043 comm=syz.0.352 [ 78.768752][ T5046] loop4: p1 < > p4 [ 78.773213][ T5046] loop4: p4 size 8388608 extends beyond EOD, truncated [ 78.817084][ T5053] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 78.851357][ T5053] cgroup: Invalid name [ 78.917116][ T5054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 78.934160][ T5050] lo speed is unknown, defaulting to 1000 [ 78.936865][ T5057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.353'. [ 78.940908][ T5050] lo speed is unknown, defaulting to 1000 [ 78.968524][ T5060] loop1: detected capacity change from 0 to 1024 [ 78.979418][ T3415] IPVS: starting estimator thread 0... [ 79.005209][ T5060] EXT4-fs: Ignoring removed orlov option [ 79.039715][ T5060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.084032][ T5056] program syz.1.355 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.098607][ T5061] IPVS: using max 2400 ests per chain, 120000 per kthread [ 79.563608][ T5075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.640045][ T5080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.359'. [ 79.649051][ T5080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.359'. [ 79.671653][ T5083] loop4: detected capacity change from 0 to 1024 [ 79.678517][ T5083] /dev/loop4: Can't open blockdev [ 79.707928][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.780764][ T5089] loop1: detected capacity change from 0 to 512 [ 79.796032][ T5089] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.811687][ T5089] EXT4-fs (loop1): 1 truncate cleaned up [ 79.824771][ T5089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.872735][ T5094] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=5094 comm=syz.2.364 [ 79.904087][ T5082] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 79.924745][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.020857][ T5096] loop1: detected capacity change from 0 to 512 [ 80.039620][ T5096] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.271098][ T5110] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 80.344135][ T5092] loop4: detected capacity change from 0 to 512 [ 80.404538][ T5092] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.415967][ T5092] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.363: bad orphan inode 13 [ 80.459880][ T5092] ext4_test_bit(bit=12, block=18) = 1 [ 80.465473][ T5092] is_bad_inode(inode)=0 [ 80.469646][ T5092] NEXT_ORPHAN(inode)=2130706432 [ 80.474608][ T5092] max_ino=32 [ 80.477819][ T5092] i_nlink=1 [ 80.481473][ T5121] loop3: detected capacity change from 0 to 2048 [ 80.482014][ T5092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.503961][ T5092] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.363: deleted inode referenced: 12 [ 80.518352][ T5121] loop3: p1 < > p4 [ 80.524279][ T5121] loop3: p4 size 8388608 extends beyond EOD, truncated [ 80.719922][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.054552][ T29] kauditd_printk_skb: 1424 callbacks suppressed [ 81.054570][ T29] audit: type=1326 audit(849.964:7467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5128 comm="syz.2.373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x0 [ 81.094474][ T5131] pim6reg: entered allmulticast mode [ 81.110823][ T5131] pim6reg: left allmulticast mode [ 81.155517][ T29] audit: type=1326 audit(850.006:7468): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.178740][ T29] audit: type=1326 audit(850.006:7469): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.201817][ T29] audit: type=1326 audit(850.006:7470): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.224825][ T29] audit: type=1326 audit(850.006:7471): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.248016][ T29] audit: type=1326 audit(850.006:7472): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.271218][ T29] audit: type=1326 audit(850.006:7473): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.294412][ T29] audit: type=1400 audit(850.006:7474): avc: denied { setopt } for pid=5126 comm="syz.1.372" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.314205][ T29] audit: type=1326 audit(850.027:7475): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.337454][ T29] audit: type=1326 audit(850.027:7476): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5126 comm="syz.1.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 81.362261][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.383158][ T5133] loop1: detected capacity change from 0 to 164 [ 81.391422][ T5133] iso9660: Unknown parameter '01777777777777777777777ÿ' [ 81.491307][ T5139] ipvlan2: entered promiscuous mode [ 81.503489][ T5141] netlink: 'syz.3.376': attribute type 8 has an invalid length. [ 81.511221][ T5141] netem: change failed [ 81.536849][ T5143] loop1: detected capacity change from 0 to 512 [ 81.545260][ T5143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 81.549964][ T5139] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 81.549964][ T5139] program syz.0.374 not setting count and/or reply_len properly [ 81.576958][ T5143] EXT4-fs (loop1): 1 truncate cleaned up [ 81.583123][ T5143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.619254][ T5149] block device autoloading is deprecated and will be removed. [ 81.642676][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.061791][ T5168] syz.1.383 (5168) used greatest stack depth: 8720 bytes left [ 82.263845][ T5174] siw: device registration error -23 [ 82.782668][ T5210] loop4: detected capacity change from 0 to 8192 [ 83.074480][ T5222] __nla_validate_parse: 32 callbacks suppressed [ 83.074500][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.396'. [ 83.091562][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.099016][ T5222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.106819][ T5222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.114436][ T5222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.259280][ T5235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.299709][ T5231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.399'. [ 83.333479][ T5236] loop1: detected capacity change from 0 to 1024 [ 83.349861][ T5238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.361013][ T5236] EXT4-fs: Ignoring removed bh option [ 83.389384][ T5236] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.425598][ T5236] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 83.431390][ T5235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.451427][ T5236] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.401: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.482752][ T5236] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.401: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.546345][ T5235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.600470][ T5236] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.401: Failed to acquire dquot type 0 [ 83.615279][ T5236] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 83.636485][ T5236] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.401: mark_inode_dirty error [ 83.668073][ T5236] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 83.678967][ T5235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.712390][ T5236] EXT4-fs (loop1): 1 orphan inode deleted [ 83.720528][ T5236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.728882][ T5251] rdma_rxe: rxe_newlink: failed to add syz_tun [ 83.733525][ T4648] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:30: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.787185][ T4648] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:30: Failed to release dquot type 0 [ 83.835630][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.877305][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.905710][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.925545][ T5257] loop4: detected capacity change from 0 to 128 [ 83.932078][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.028360][ T5257] syz.4.407: attempt to access beyond end of device [ 84.028360][ T5257] loop4: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 84.042412][ T5257] syz.4.407: attempt to access beyond end of device [ 84.042412][ T5257] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 84.057659][ T5257] syz.4.407: attempt to access beyond end of device [ 84.057659][ T5257] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 84.072677][ T5257] syz.4.407: attempt to access beyond end of device [ 84.072677][ T5257] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 84.098415][ T5257] syz.4.407: attempt to access beyond end of device [ 84.098415][ T5257] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 84.112974][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.115533][ T5257] syz.4.407: attempt to access beyond end of device [ 84.115533][ T5257] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 84.123542][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.136770][ T5257] syz.4.407: attempt to access beyond end of device [ 84.136770][ T5257] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 84.150064][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 84.171392][ T5257] syz.4.407: attempt to access beyond end of device [ 84.171392][ T5257] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 84.186473][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 84.215940][ T5257] syz.4.407: attempt to access beyond end of device [ 84.215940][ T5257] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 84.239636][ T5268] loop3: detected capacity change from 0 to 1024 [ 84.240821][ T5257] syz.4.407: attempt to access beyond end of device [ 84.240821][ T5257] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 84.241349][ T5268] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 84.248533][ T5268] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.305943][ T5268] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.318338][ T5268] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 84.333036][ T5268] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 84.342567][ T5268] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.407878][ T5268] EXT4-fs (loop3): Remounting filesystem read-only [ 84.455097][ T5268] EXT4-fs (loop3): 1 orphan inode deleted [ 84.468978][ T5268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.490353][ T5264] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 84.515719][ T5277] loop4: detected capacity change from 0 to 1024 [ 84.524046][ T5264] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 84.534482][ T5275] loop1: detected capacity change from 0 to 8192 [ 84.540016][ T5264] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 84.552203][ T5277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.590503][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.615835][ T5277] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.413: Allocating blocks 449-513 which overlap fs metadata [ 84.650614][ T5284] SELinux: Context @ is not valid (left unmapped). [ 84.658373][ T5284] EXT4-fs (loop4): pa ffff888106ee9230: logic 48, phys. 177, len 21 [ 84.666607][ T5284] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 84.710863][ T5286] netlink: 9 bytes leftover after parsing attributes in process `syz.2.417'. [ 84.726386][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.743638][ T5286] gretap0: entered promiscuous mode [ 84.759515][ T5288] loop1: detected capacity change from 0 to 8192 [ 84.767061][ T5295] netlink: 5 bytes leftover after parsing attributes in process `syz.2.417'. [ 84.781448][ T5296] openvswitch: netlink: Message has 6 unknown bytes. [ 84.788710][ T5295] 0ªX¹¦D: renamed from gretap0 [ 84.799349][ T5295] 0ªX¹¦D: left promiscuous mode [ 84.804314][ T5295] 0ªX¹¦D: entered allmulticast mode [ 84.811125][ T5295] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 84.864916][ T5293] bridge_slave_0: left allmulticast mode [ 84.870658][ T5293] bridge_slave_0: left promiscuous mode [ 84.876373][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.885124][ T5295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5295 comm=syz.2.417 [ 84.904375][ T5298] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 84.910159][ T5293] bridge_slave_1: left allmulticast mode [ 84.919667][ T5293] bridge_slave_1: left promiscuous mode [ 84.925402][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.935774][ T5293] bond0: (slave bond_slave_0): Releasing backup interface [ 84.947788][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.417'. [ 84.957395][ T5293] bond0: (slave bond_slave_1): Releasing backup interface [ 85.175038][ T5307] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.236274][ T5311] loop4: detected capacity change from 0 to 256 [ 85.934771][ T5317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.426'. [ 85.943841][ T5317] netlink: 36 bytes leftover after parsing attributes in process `syz.3.426'. [ 85.947706][ T29] kauditd_printk_skb: 1596 callbacks suppressed [ 85.947742][ T29] audit: type=1326 audit(855.098:9070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5319 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b067ebe9 code=0x7ffc0000 [ 85.981977][ T29] audit: type=1326 audit(855.098:9071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5319 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b067ebe9 code=0x7ffc0000 [ 86.012041][ T29] audit: type=1326 audit(855.109:9072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5319 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f66b067ebe9 code=0x7ffc0000 [ 86.034781][ T29] audit: type=1326 audit(855.109:9073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5319 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b067ebe9 code=0x7ffc0000 [ 86.057594][ T29] audit: type=1326 audit(855.109:9074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5319 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66b067ebe9 code=0x7ffc0000 [ 86.080359][ T29] audit: type=1326 audit(855.109:9075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5319 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f66b067ebe9 code=0x7ffc0000 [ 86.102945][ T29] audit: type=1326 audit(855.161:9076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5316 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 86.123576][ T5321] ip6gretap0: entered promiscuous mode [ 86.125670][ T29] audit: type=1326 audit(855.161:9077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5316 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 86.153838][ T29] audit: type=1326 audit(855.161:9078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5316 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 86.176505][ T29] audit: type=1326 audit(855.161:9079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5316 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 86.199774][ T5321] ip6gretap0: left promiscuous mode [ 86.230786][ T5317] pim6reg: entered allmulticast mode [ 86.237215][ T5330] sctp: [Deprecated]: syz.2.434 (pid 5330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.237215][ T5330] Use struct sctp_sack_info instead [ 86.266933][ T5317] pim6reg: left allmulticast mode [ 86.315850][ T5322] loop3: detected capacity change from 0 to 164 [ 86.317890][ T5336] 0ªî{X¹¦: renamed from 30ªX¹¦D (while UP) [ 86.328987][ T5322] iso9660: Unknown parameter '01777777777777777777777ÿ' [ 86.330597][ T5336] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 86.407811][ T5337] vlan2: entered allmulticast mode [ 86.413009][ T5337] bridge_slave_0: entered allmulticast mode [ 86.427884][ T5320] dummy0: entered allmulticast mode [ 86.435079][ T5319] dummy0: left allmulticast mode [ 86.455167][ T5345] loop3: detected capacity change from 0 to 512 [ 86.463646][ T5345] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.498183][ T5345] EXT4-fs (loop3): 1 truncate cleaned up [ 86.507224][ T5345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.545204][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.601934][ T5354] vlan2: entered allmulticast mode [ 86.619030][ T5354] dummy0: entered allmulticast mode [ 86.645636][ T5359] loop1: detected capacity change from 0 to 2048 [ 86.663352][ T5359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 86.792019][ T5359] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.808191][ T5359] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1580 with error 28 [ 86.820790][ T5359] EXT4-fs (loop1): This should not happen!! Data will be lost [ 86.820790][ T5359] [ 86.830480][ T5359] EXT4-fs (loop1): Total free blocks count 0 [ 86.836493][ T5359] EXT4-fs (loop1): Free/Dirty block details [ 86.842433][ T5359] EXT4-fs (loop1): free_blocks=2415919104 [ 86.848348][ T5359] EXT4-fs (loop1): dirty_blocks=1584 [ 86.853673][ T5359] EXT4-fs (loop1): Block reservation details [ 86.859645][ T5359] EXT4-fs (loop1): i_reserved_data_blocks=99 [ 87.151359][ T5376] SELinux: policydb magic number 0x46e8f9da does not match expected magic number 0xf97cff8c [ 87.161746][ T5376] SELinux: failed to load policy [ 87.238921][ T5378] sctp: [Deprecated]: syz.4.440 (pid 5378) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.238921][ T5378] Use struct sctp_sack_info instead [ 87.430514][ T1670] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 87.438227][ T5386] loop3: detected capacity change from 0 to 2048 [ 87.452990][ T5387] loop4: detected capacity change from 0 to 512 [ 87.465299][ T5386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000700 r/w without journal. Quota mode: none. [ 87.479146][ T5387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.510976][ T5392] loop1: detected capacity change from 0 to 1024 [ 87.518036][ T5392] EXT4-fs: Ignoring removed mblk_io_submit option [ 87.524643][ T5392] EXT4-fs: Ignoring removed bh option [ 87.530293][ T5392] ext3: Unknown parameter 'subj_type' [ 87.649368][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.825675][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000700. [ 87.878301][ T5410] pim6reg: tun_chr_ioctl cmd 35108 [ 87.911549][ T5411] netlink: 'syz.1.447': attribute type 4 has an invalid length. [ 87.921508][ T5411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=5411 comm=syz.1.447 [ 88.165704][ T5417] loop3: detected capacity change from 0 to 1024 [ 88.186127][ T5416] netlink: 'syz.0.459': attribute type 30 has an invalid length. [ 88.202132][ T5417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.247076][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.291171][ T5422] loop3: detected capacity change from 0 to 1024 [ 88.300617][ T5422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.312546][ T5422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.336128][ T5425] __nla_validate_parse: 12 callbacks suppressed [ 88.336186][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.452'. [ 88.629872][ T5442] SELinux: security policydb version 17 (MLS) not backwards compatible [ 88.651038][ T5442] SELinux: failed to load policy [ 88.823279][ T5446] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 88.831044][ T5446] netlink: 224 bytes leftover after parsing attributes in process `syz.0.457'. [ 88.875952][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 88.884897][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 88.894167][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 88.913502][ T5452] loop1: detected capacity change from 0 to 2048 [ 88.925660][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 88.934572][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 88.944826][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 88.945993][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.964186][ T5452] loop1: p1 < > p4 [ 88.974706][ T5452] loop1: p4 size 8388608 extends beyond EOD, truncated [ 89.001736][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 89.010705][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 89.030361][ T5459] loop3: detected capacity change from 0 to 512 [ 89.436313][ T5470] loop4: detected capacity change from 0 to 512 [ 89.462801][ T5470] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.498106][ T5470] EXT4-fs (loop4): 1 truncate cleaned up [ 89.591105][ T5473] ip6gretap1: entered promiscuous mode [ 89.596717][ T5473] ip6gretap1: entered allmulticast mode [ 89.613874][ T5475] loop4: detected capacity change from 0 to 2048 [ 89.689450][ T5480] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.464: inline data xattr refers to an external xattr inode [ 89.782384][ T5480] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 89.804697][ T5480] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 560 with error 28 [ 89.817206][ T5480] EXT4-fs (loop4): This should not happen!! Data will be lost [ 89.817206][ T5480] [ 89.826891][ T5480] EXT4-fs (loop4): Total free blocks count 0 [ 89.832942][ T5480] EXT4-fs (loop4): Free/Dirty block details [ 89.838844][ T5480] EXT4-fs (loop4): free_blocks=2415919104 [ 89.841678][ T5484] netlink: zone id is out of range [ 89.844602][ T5480] EXT4-fs (loop4): dirty_blocks=576 [ 89.854984][ T5480] EXT4-fs (loop4): Block reservation details [ 89.860984][ T5480] EXT4-fs (loop4): i_reserved_data_blocks=36 [ 89.885392][ T5484] netlink: zone id is out of range [ 89.890675][ T5484] netlink: zone id is out of range [ 89.914854][ T5484] netlink: zone id is out of range [ 89.920077][ T5484] netlink: zone id is out of range [ 89.925974][ T5484] netlink: zone id is out of range [ 89.931170][ T5484] netlink: zone id is out of range [ 89.990211][ T1670] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 90.002753][ T1670] EXT4-fs (loop4): This should not happen!! Data will be lost [ 90.002753][ T1670] [ 90.132008][ T5493] netlink: 'syz.1.470': attribute type 8 has an invalid length. [ 90.139762][ T5493] netem: change failed [ 90.676164][ T5500] loop3: detected capacity change from 0 to 256 [ 90.711407][ T29] kauditd_printk_skb: 1247 callbacks suppressed [ 90.711427][ T29] audit: type=1326 audit(860.107:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb7be25ba7 code=0x7ffc0000 [ 90.765597][ T5503] pim6reg: tun_chr_ioctl cmd 35108 [ 90.770948][ T29] audit: type=1326 audit(860.138:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb7bdcadb9 code=0x7ffc0000 [ 90.793822][ T29] audit: type=1326 audit(860.138:10329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb7be25ba7 code=0x7ffc0000 [ 90.816640][ T29] audit: type=1326 audit(860.138:10330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb7bdcadb9 code=0x7ffc0000 [ 90.839404][ T29] audit: type=1326 audit(860.138:10331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 90.862236][ T29] audit: type=1326 audit(860.149:10332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb7be25ba7 code=0x7ffc0000 [ 90.885095][ T29] audit: type=1326 audit(860.149:10333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb7bdcadb9 code=0x7ffc0000 [ 90.907875][ T29] audit: type=1326 audit(860.149:10334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7ffb7be2ebe9 code=0x7ffc0000 [ 90.930738][ T29] audit: type=1326 audit(860.159:10335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ffb7be25ba7 code=0x7ffc0000 [ 90.953568][ T29] audit: type=1326 audit(860.159:10336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5492 comm="syz.1.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffb7bdcadb9 code=0x7ffc0000 [ 91.025786][ T5465] syz.2.461 (5465) used greatest stack depth: 6408 bytes left [ 91.041064][ T5505] ref_ctr_offset mismatch. inode: 0x223 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 91.100086][ T5511] loop4: detected capacity change from 0 to 512 [ 91.107357][ T5511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 91.120945][ T5511] EXT4-fs (loop4): 1 truncate cleaned up [ 91.810727][ T5526] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.597763][ T5549] loop4: detected capacity change from 0 to 8192 [ 92.656154][ T5551] netlink: 'syz.1.486': attribute type 3 has an invalid length. [ 92.679543][ T5551] loop1: detected capacity change from 0 to 1024 [ 92.706232][ T5551] vhci_hcd: invalid port number 28 [ 92.711525][ T5551] vhci_hcd: default hub control req: 0303 v0009 i001c l53 [ 92.727749][ T5551] usb usb1: check_ctrlrecip: process 5551 (syz.1.486) requesting ep 01 but needs 81 [ 92.745756][ T5551] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 92.762405][ T5559] loop4: detected capacity change from 0 to 2364 [ 92.768487][ T5551] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 1: comm syz.1.486: lblock 1 mapped to illegal pblock 1 (length 15) [ 92.784274][ T5553] C: renamed from team_slave_0 (while UP) [ 92.788019][ T5551] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 92.791155][ T5559] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 92.802538][ T5551] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.802538][ T5551] [ 92.808918][ T5559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.809172][ T5559] vhci_hcd vhci_hcd.0: Device attached [ 92.828276][ T5553] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 92.841367][ T5553] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 92.852865][ T5559] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 92.863106][ T5559] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.870787][ T5559] vhci_hcd vhci_hcd.0: Device attached [ 92.887100][ T5554] can0: slcan on ttyS3. [ 92.890593][ T5559] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 92.897910][ T5559] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 92.905735][ T5559] vhci_hcd vhci_hcd.0: Device attached [ 92.912844][ T5559] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 92.924106][ T5559] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(16) [ 92.930758][ T5559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.938532][ T5559] vhci_hcd vhci_hcd.0: Device attached [ 92.949575][ T5559] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(18) [ 92.956219][ T5559] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 92.963864][ T5559] vhci_hcd vhci_hcd.0: Device attached [ 92.972512][ T5553] netlink: 'syz.0.487': attribute type 1 has an invalid length. [ 92.982116][ T5574] vhci_hcd: connection closed [ 92.982257][ T4638] vhci_hcd: stop threads [ 92.982333][ T5572] vhci_hcd: connection closed [ 92.987098][ T4638] vhci_hcd: release socket [ 92.992121][ T5567] vhci_hcd: connection closed [ 92.996208][ T4638] vhci_hcd: disconnect device [ 93.010943][ T5569] can0 (unregistered): slcan off ttyS3. [ 93.014377][ T4638] vhci_hcd: stop threads [ 93.016967][ T5570] vhci_hcd: connection closed [ 93.020871][ T4638] vhci_hcd: release socket [ 93.030511][ T4638] vhci_hcd: disconnect device [ 93.031078][ T5564] vhci_hcd: connection closed [ 93.036894][ T4638] vhci_hcd: stop threads [ 93.045903][ T4638] vhci_hcd: release socket [ 93.050337][ T4638] vhci_hcd: disconnect device [ 93.057649][ T4638] vhci_hcd: stop threads [ 93.061959][ T4638] vhci_hcd: release socket [ 93.066396][ T4638] vhci_hcd: disconnect device [ 93.071493][ T10] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 93.079011][ T5565] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 93.082586][ T5577] bond0: (slave bond_slave_0): Releasing backup interface [ 93.095270][ T4638] vhci_hcd: stop threads [ 93.097367][ T5579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 93.099544][ T4638] vhci_hcd: release socket [ 93.099562][ T4638] vhci_hcd: disconnect device [ 93.142799][ T5577] bond0: (slave bond_slave_1): Releasing backup interface [ 93.156309][ T5577] team0: Port device team_slave_0 removed [ 93.166783][ T5577] team0: Port device team_slave_1 removed [ 93.174605][ T5582] usb usb1: check_ctrlrecip: process 5582 (+}[@) requesting ep 01 but needs 81 [ 93.184301][ T5582] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 93.249296][ T5588] loop1: detected capacity change from 0 to 512 [ 93.260977][ T5588] ext2: Unknown parameter 'nouser_xattr' [ 93.472398][ T5606] siw: device registration error -23 [ 93.478735][ T5606] smc: removing ib device syz0 [ 93.966946][ T5611] ref_ctr_offset mismatch. inode: 0x235 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 94.056844][ T5618] netlink: 'syz.0.499': attribute type 8 has an invalid length. [ 94.064656][ T5618] netem: change failed [ 94.101634][ T5617] netlink: 'syz.3.500': attribute type 1 has an invalid length. [ 94.109311][ T5617] __nla_validate_parse: 10 callbacks suppressed [ 94.109386][ T5617] netlink: 224 bytes leftover after parsing attributes in process `syz.3.500'. [ 94.468010][ T5625] lo speed is unknown, defaulting to 1000 [ 94.474649][ T5625] lo speed is unknown, defaulting to 1000 [ 94.926385][ T5630] loop3: detected capacity change from 0 to 1024 [ 94.964291][ T5630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.082466][ T5630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 95.177634][ T5630] EXT4-fs: Ignoring removed orlov option [ 95.218049][ T5630] EXT4-fs (loop3): can't enable nombcache during remount [ 95.294792][ T5648] netlink: 388 bytes leftover after parsing attributes in process `syz.4.507'. [ 95.319459][ T5650] netlink: 'syz.1.508': attribute type 3 has an invalid length. [ 95.348315][ T5648] netlink: 'syz.4.507': attribute type 6 has an invalid length. [ 95.482382][ T29] kauditd_printk_skb: 837 callbacks suppressed [ 95.482399][ T29] audit: type=1400 audit(865.115:11174): avc: denied { create } for pid=5656 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.511215][ T29] audit: type=1400 audit(865.136:11175): avc: denied { create } for pid=5655 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.530205][ T29] audit: type=1400 audit(865.136:11176): avc: denied { setopt } for pid=5656 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.549171][ T29] audit: type=1400 audit(865.136:11178): avc: denied { connect } for pid=5656 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.568176][ T29] audit: type=1400 audit(865.146:11179): avc: denied { name_connect } for pid=5656 comm="syz.1.511" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 95.590959][ T5659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 95.626413][ T29] audit: type=1400 audit(865.136:11177): avc: denied { setopt } for pid=5655 comm="syz.4.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.655892][ T29] audit: type=1400 audit(865.283:11180): avc: denied { bind } for pid=5656 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.675813][ T29] audit: type=1400 audit(865.283:11181): avc: denied { setopt } for pid=5656 comm="syz.1.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.764702][ T29] audit: type=1326 audit(865.388:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 95.788221][ T29] audit: type=1326 audit(865.398:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5665 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 95.816146][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 95.827062][ T5657] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 95.833722][ T5671] openvswitch: netlink: Message has 6 unknown bytes. [ 95.852378][ T5657] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 95.866065][ T5659] loop1: detected capacity change from 0 to 1024 [ 95.877811][ T5657] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 95.900499][ T5659] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 95.910839][ T5659] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 96.010168][ T5677] hub 6-0:1.0: USB hub found [ 96.015741][ T5677] hub 6-0:1.0: 8 ports detected [ 96.051627][ T5680] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 96.079655][ T5680] lo speed is unknown, defaulting to 1000 [ 96.087200][ T5680] lo speed is unknown, defaulting to 1000 [ 96.091321][ T5683] loop3: detected capacity change from 0 to 512 [ 96.101744][ T5683] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.108495][ T5683] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.518: Failed to acquire dquot type 1 [ 96.120414][ T5683] EXT4-fs (loop3): 1 truncate cleaned up [ 96.140526][ T5683] SELinux: security_context_str_to_sid (iì¶îlÔw6›wÖŽ¼) failed with errno=-22 [ 96.155683][ T5683] netlink: 'syz.3.518': attribute type 4 has an invalid length. [ 96.288479][ T5688] netlink: 24 bytes leftover after parsing attributes in process `syz.3.519'. [ 96.298607][ T5688] random: crng reseeded on system resumption [ 96.585594][ T5693] loop1: detected capacity change from 0 to 1024 [ 96.593423][ T5693] EXT4-fs: Ignoring removed oldalloc option [ 96.599442][ T5693] EXT4-fs: Ignoring removed bh option [ 96.655490][ T5696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.520'. [ 96.763328][ T5703] ip6gretap1: entered promiscuous mode [ 96.768970][ T5703] ip6gretap1: entered allmulticast mode [ 96.876149][ T5715] loop4: detected capacity change from 0 to 512 [ 96.885730][ T5715] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 96.908417][ T5718] netlink: 'syz.1.526': attribute type 1 has an invalid length. [ 96.949906][ T5722] loop4: detected capacity change from 0 to 512 [ 97.034082][ T5730] loop3: detected capacity change from 0 to 512 [ 97.041605][ T5730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 97.066363][ T5730] EXT4-fs (loop3): 1 truncate cleaned up [ 97.158519][ T5741] netlink: 'syz.4.533': attribute type 8 has an invalid length. [ 97.166256][ T5741] netem: change failed [ 97.190403][ T5742] loop3: detected capacity change from 0 to 1024 [ 97.220791][ T5742] EXT4-fs: Ignoring removed oldalloc option [ 97.226952][ T5742] EXT4-fs: Ignoring removed bh option [ 97.259794][ T5739] bridge_slave_0: left allmulticast mode [ 97.265717][ T5739] bridge_slave_0: left promiscuous mode [ 97.271790][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.285697][ T5739] bridge_slave_1: left allmulticast mode [ 97.291916][ T5739] bridge_slave_1: left promiscuous mode [ 97.297694][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.305435][ T5746] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.317911][ T5739] bond0: (slave bond_slave_0): Releasing backup interface [ 97.329664][ T5739] bond0: (slave bond_slave_1): Releasing backup interface [ 97.342527][ T5739] team0: Port device C removed [ 97.350653][ T5739] team0: Port device team_slave_1 removed [ 97.371867][ T5739] bond1: (slave geneve2): Releasing active interface [ 97.405767][ T5748] usb usb8: usbfs: process 5748 (syz.2.535) did not claim interface 0 before use [ 97.466579][ T5753] loop3: detected capacity change from 0 to 1024 [ 97.477345][ T5753] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.536: Failed to acquire dquot type 0 [ 97.490111][ T5753] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 97.505854][ T5753] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.536: corrupted inode contents [ 97.518256][ T5753] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.536: mark_inode_dirty error [ 97.531834][ T5753] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.536: corrupted inode contents [ 97.544000][ T5753] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.536: mark_inode_dirty error [ 97.555784][ T5753] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.536: corrupted inode contents [ 97.559154][ T5755] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 97.568976][ T5753] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 97.574119][ T5755] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.583136][ T5753] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.536: corrupted inode contents [ 97.590183][ T5755] vhci_hcd vhci_hcd.0: Device attached [ 97.604201][ T5753] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.536: mark_inode_dirty error [ 97.610814][ T5763] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 97.619451][ T5753] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 97.625123][ T5763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.625245][ T5763] vhci_hcd vhci_hcd.0: Device attached [ 97.635969][ T5753] EXT4-fs (loop3): 1 truncate cleaned up [ 97.660180][ T5753] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 97.666989][ T5755] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 97.675079][ T5755] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.682925][ T5755] vhci_hcd vhci_hcd.0: Device attached [ 97.689798][ T5755] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.699093][ T5755] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 97.705742][ T5755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.713381][ T5755] vhci_hcd vhci_hcd.0: Device attached [ 97.721019][ T5755] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(18) [ 97.727728][ T5755] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.735391][ T5755] vhci_hcd vhci_hcd.0: Device attached [ 97.745534][ T5768] vhci_hcd: connection closed [ 97.745792][ T5770] vhci_hcd: connection closed [ 97.745848][ T4638] vhci_hcd: stop threads [ 97.751505][ T5766] vhci_hcd: connection closed [ 97.755292][ T4638] vhci_hcd: release socket [ 97.755311][ T4638] vhci_hcd: disconnect device [ 97.770617][ T5761] vhci_hcd: connection closed [ 97.774231][ T5764] vhci_hcd: connection closed [ 97.780725][ T4638] vhci_hcd: stop threads [ 97.789944][ T4638] vhci_hcd: release socket [ 97.794385][ T4638] vhci_hcd: disconnect device [ 97.799478][ T4638] vhci_hcd: stop threads [ 97.803740][ T4638] vhci_hcd: release socket [ 97.808238][ T4638] vhci_hcd: disconnect device [ 97.813331][ T4638] vhci_hcd: stop threads [ 97.817709][ T4638] vhci_hcd: release socket [ 97.822204][ T4638] vhci_hcd: disconnect device [ 97.829547][ T4638] vhci_hcd: stop threads [ 97.833447][ T3381] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 97.833895][ T4638] vhci_hcd: release socket [ 97.841170][ T3381] usb 5-1: enqueue for inactive port 0 [ 97.851061][ T4638] vhci_hcd: disconnect device [ 97.852201][ T3381] usb 5-1: enqueue for inactive port 0 [ 97.861675][ T3381] usb 5-1: enqueue for inactive port 0 [ 97.900640][ T10] usb 9-1: enqueue for inactive port 0 [ 97.906686][ T10] usb 9-1: enqueue for inactive port 0 [ 97.928640][ T3381] vhci_hcd: vhci_device speed not set [ 97.976294][ T10] vhci_hcd: vhci_device speed not set [ 98.066340][ T5779] loop4: detected capacity change from 0 to 512 [ 98.311376][ T5789] tipc: Started in network mode [ 98.316322][ T5789] tipc: Node identity 4, cluster identity 4711 [ 98.322701][ T5789] tipc: Node number set to 4 [ 98.469646][ T5798] loop4: detected capacity change from 0 to 1024 [ 98.476960][ T5798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.829015][ T5807] loop4: detected capacity change from 0 to 1024 [ 98.836207][ T5807] EXT4-fs: Ignoring removed oldalloc option [ 98.842139][ T5807] EXT4-fs: Ignoring removed bh option [ 98.918153][ T5812] __nla_validate_parse: 7 callbacks suppressed [ 98.918172][ T5812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.549'. [ 98.981329][ T5818] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.025870][ T5818] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.045647][ T5821] loop4: detected capacity change from 0 to 512 [ 99.054987][ T5821] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 99.063701][ T5821] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.550: invalid indirect mapped block 8 (level 2) [ 99.078573][ T5821] EXT4-fs (loop4): Remounting filesystem read-only [ 99.079607][ T5818] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.088079][ T5821] EXT4-fs (loop4): 1 truncate cleaned up [ 99.123178][ T5821] EXT4-fs: Cannot specify journal on remount [ 99.143149][ T5818] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.212494][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.224098][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.236840][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.259756][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.489153][ T5850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'. [ 99.510703][ T5852] sd 0:0:1:0: device reset [ 99.551109][ T5849] ref_ctr_offset mismatch. inode: 0x2a2 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 99.629837][ T5858] loop3: detected capacity change from 0 to 2048 [ 99.642071][ T5859] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5859 comm=syz.1.563 [ 99.707842][ T5859] netlink: 120 bytes leftover after parsing attributes in process `syz.1.563'. [ 100.130443][ T5872] lo speed is unknown, defaulting to 1000 [ 100.137078][ T5872] lo speed is unknown, defaulting to 1000 [ 100.359006][ T29] kauditd_printk_skb: 1260 callbacks suppressed [ 100.359025][ T29] audit: type=1400 audit(870.238:12440): avc: denied { mounton } for pid=5876 comm="syz.4.567" path="/107/file2" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 100.392397][ T5880] 9pnet_fd: Insufficient options for proto=fd [ 100.481238][ T5880] loop4: detected capacity change from 0 to 512 [ 100.636293][ T29] audit: type=1400 audit(870.480:12441): avc: denied { setopt } for pid=5876 comm="syz.4.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 100.705480][ T29] audit: type=1400 audit(870.595:12442): avc: denied { name_connect } for pid=5882 comm="syz.1.568" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 100.746813][ T5884] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 100.754689][ T5884] netlink: 224 bytes leftover after parsing attributes in process `syz.1.568'. [ 100.797969][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 100.807069][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 100.844265][ T29] audit: type=1326 audit(870.742:12443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 100.877147][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 100.877902][ T5888] loop3: detected capacity change from 0 to 512 [ 100.929270][ T29] audit: type=1326 audit(870.774:12444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 100.953704][ T29] audit: type=1326 audit(870.774:12445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 100.976745][ T29] audit: type=1326 audit(870.774:12446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 100.987298][ T5888] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 100.999774][ T29] audit: type=1326 audit(870.774:12447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 101.014702][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 101.032466][ T29] audit: type=1326 audit(870.774:12448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 101.032510][ T29] audit: type=1326 audit(870.774:12449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5887 comm="syz.3.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8136abebe9 code=0x7ffc0000 [ 101.041298][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 101.092398][ T5888] EXT4-fs (loop3): 1 truncate cleaned up [ 101.133276][ T5888] EXT4-fs mount: 34 callbacks suppressed [ 101.133300][ T5888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.157638][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 101.314046][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.451653][ T5903] loop3: detected capacity change from 0 to 256 [ 101.497925][ T5905] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.561237][ T5905] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.641667][ T5905] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.740099][ T5905] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.207771][ T5920] SELinux: failed to load policy [ 102.320372][ T5924] loop3: detected capacity change from 0 to 164 [ 102.336728][ T5924] bio_check_eod: 66 callbacks suppressed [ 102.336744][ T5924] syz.3.580: attempt to access beyond end of device [ 102.336744][ T5924] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 102.377145][ T5924] syz.3.580: attempt to access beyond end of device [ 102.377145][ T5924] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 102.619762][ T5937] netlink: 'syz.0.585': attribute type 1 has an invalid length. [ 102.763527][ T1670] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.811667][ T5945] loop1: detected capacity change from 0 to 128 [ 102.819058][ T5945] vfat: Unknown parameter 'utf8½1' [ 102.881940][ T1670] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.890254][ T1670] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.910985][ T1670] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.007635][ T5954] siw: device registration error -23 [ 103.165028][ T5958] loop4: detected capacity change from 0 to 1024 [ 103.193699][ T5958] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 103.204763][ T5958] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 103.277459][ T5958] JBD2: no valid journal superblock found [ 103.283318][ T5958] EXT4-fs (loop4): Could not load journal inode [ 103.522661][ T5958] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 103.541549][ T5963] loop3: detected capacity change from 0 to 512 [ 103.559615][ T5963] EXT4-fs: Ignoring removed nobh option [ 103.612849][ T5963] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.594: corrupted inode contents [ 103.627625][ T5963] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.594: mark_inode_dirty error [ 103.646613][ T5963] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.594: corrupted inode contents [ 103.662016][ T5963] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.594: mark_inode_dirty error [ 103.678618][ T5963] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.594: Failed to acquire dquot type 0 [ 103.684877][ T5963] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.594: corrupted inode contents [ 103.704134][ T5963] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.594: mark_inode_dirty error [ 103.705283][ T5963] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.594: corrupted inode contents [ 103.739004][ T5963] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.594: mark_inode_dirty error [ 103.758333][ T5963] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.594: corrupted inode contents [ 103.787703][ T5963] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 103.789754][ T5976] syzkaller1: entered promiscuous mode [ 103.802149][ T5976] syzkaller1: entered allmulticast mode [ 103.809430][ T5963] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.594: corrupted inode contents [ 103.835697][ T5963] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.594: mark_inode_dirty error [ 103.862557][ T5963] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 103.896014][ T5963] EXT4-fs (loop3): 1 truncate cleaned up [ 103.920250][ T5963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.120654][ T5985] netlink: 'syz.0.597': attribute type 4 has an invalid length. [ 104.139487][ T5985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=5985 comm=syz.0.597 [ 104.157889][ T5988] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 104.164473][ T5988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.172208][ T5988] vhci_hcd vhci_hcd.0: Device attached [ 104.239603][ T5991] __nla_validate_parse: 9 callbacks suppressed [ 104.239618][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 104.256035][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.266105][ T5991] hsr_slave_0: left promiscuous mode [ 104.276238][ T5991] hsr_slave_1: left promiscuous mode [ 104.415047][ T3388] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 104.463800][ T5989] vhci_hcd: connection reset by peer [ 104.469564][ T12] vhci_hcd: stop threads [ 104.473924][ T12] vhci_hcd: release socket [ 104.478365][ T12] vhci_hcd: disconnect device [ 104.554007][ T5998] netlink: zone id is out of range [ 104.562093][ T5998] netlink: zone id is out of range [ 104.567271][ T5998] netlink: zone id is out of range [ 104.572614][ T5998] netlink: zone id is out of range [ 104.577789][ T5998] netlink: zone id is out of range [ 104.583414][ T5998] netlink: zone id is out of range [ 104.588572][ T5998] netlink: zone id is out of range [ 105.034683][ T6004] SELinux: policydb magic number 0x46e8f9da does not match expected magic number 0xf97cff8c [ 105.045017][ T6004] SELinux: failed to load policy [ 105.078012][ T6010] vlan2: entered allmulticast mode [ 105.083774][ T6010] dummy0: entered allmulticast mode [ 105.120116][ T6015] lo speed is unknown, defaulting to 1000 [ 105.125954][ T6015] lo speed is unknown, defaulting to 1000 [ 105.139458][ T6015] lo speed is unknown, defaulting to 1000 [ 105.149354][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 105.149372][ T29] audit: type=1326 audit(875.267:13142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.178798][ T29] audit: type=1326 audit(875.267:13143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.180165][ T6015] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 105.211203][ T29] audit: type=1326 audit(875.330:13144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.234472][ T29] audit: type=1326 audit(875.330:13145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.257150][ T6010] SELinux: Context system_u:object_r:ld_so_t:s0 is not valid (left unmapped). [ 105.257508][ T29] audit: type=1326 audit(875.330:13146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.297403][ T29] audit: type=1400 audit(875.330:13147): avc: denied { write } for pid=6020 comm="syz.3.610" name="vlan0" dev="proc" ino=4026533229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 105.300432][ T6022] loop3: detected capacity change from 0 to 2048 [ 105.319805][ T29] audit: type=1326 audit(875.372:13148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.349164][ T29] audit: type=1326 audit(875.372:13149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.372003][ T29] audit: type=1326 audit(875.372:13150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.394898][ T29] audit: type=1326 audit(875.372:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6009 comm="syz.2.607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f664566ebe9 code=0x7ffc0000 [ 105.434844][ T6015] lo speed is unknown, defaulting to 1000 [ 105.441730][ T6015] lo speed is unknown, defaulting to 1000 [ 105.450883][ T6015] lo speed is unknown, defaulting to 1000 [ 105.457443][ T6015] lo speed is unknown, defaulting to 1000 [ 105.466325][ T6022] Alternate GPT is invalid, using primary GPT. [ 105.472686][ T6022] loop3: p1 p2 p3 [ 105.493729][ T6015] lo speed is unknown, defaulting to 1000 [ 105.570795][ T6034] loop1: detected capacity change from 0 to 2048 [ 105.599603][ T6034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.194692][ T6052] lo speed is unknown, defaulting to 1000 [ 106.201016][ T6052] lo speed is unknown, defaulting to 1000 [ 106.258726][ T6052] lo speed is unknown, defaulting to 1000 [ 106.867121][ T6064] netlink: 'syz.3.617': attribute type 4 has an invalid length. [ 106.882894][ T6064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1017 sclass=netlink_route_socket pid=6064 comm=syz.3.617 [ 106.970177][ T4638] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 107.000913][ T4638] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 107.013362][ T4638] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.013362][ T4638] [ 107.023137][ T4638] EXT4-fs (loop1): Total free blocks count 0 [ 107.029212][ T4638] EXT4-fs (loop1): Free/Dirty block details [ 107.035168][ T4638] EXT4-fs (loop1): free_blocks=2415919504 [ 107.040910][ T4638] EXT4-fs (loop1): dirty_blocks=6384 [ 107.046433][ T4638] EXT4-fs (loop1): Block reservation details [ 107.052440][ T4638] EXT4-fs (loop1): i_reserved_data_blocks=399 [ 107.062921][ T4638] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 107.099582][ T6056] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 107.164727][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.620'. [ 107.460277][ T6085] loop4: detected capacity change from 0 to 512 [ 107.486682][ T6085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 107.531597][ T6086] loop1: detected capacity change from 0 to 8192 [ 107.608261][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.625'. [ 107.769759][ T6094] ref_ctr_offset mismatch. inode: 0x2d4 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 107.847609][ T6102] loop1: detected capacity change from 0 to 128 [ 107.921874][ T6091] ================================================================== [ 107.930015][ T6091] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 107.939262][ T6091] [ 107.941622][ T6091] write to 0xffff888106f76008 of 4 bytes by task 6085 on cpu 0: [ 107.949281][ T6091] writeback_single_inode+0x14a/0x3e0 [ 107.954690][ T6091] sync_inode_metadata+0x5b/0x90 [ 107.959680][ T6091] generic_buffers_fsync_noflush+0xd9/0x120 [ 107.965690][ T6091] ext4_sync_file+0x1ab/0x690 [ 107.970428][ T6091] vfs_fsync_range+0x10d/0x130 [ 107.975223][ T6091] ext4_buffered_write_iter+0x34f/0x3c0 [ 107.980819][ T6091] ext4_file_write_iter+0x383/0xf00 [ 107.986081][ T6091] iter_file_splice_write+0x663/0xa60 [ 107.991491][ T6091] direct_splice_actor+0x153/0x2a0 [ 107.996632][ T6091] splice_direct_to_actor+0x30f/0x680 [ 108.002038][ T6091] do_splice_direct+0xda/0x150 [ 108.006816][ T6091] do_sendfile+0x380/0x650 [ 108.011282][ T6091] __x64_sys_sendfile64+0x105/0x150 [ 108.016514][ T6091] x64_sys_call+0x2bb0/0x2ff0 [ 108.021316][ T6091] do_syscall_64+0xd2/0x200 [ 108.025868][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.031798][ T6091] [ 108.034154][ T6091] read to 0xffff888106f76008 of 4 bytes by task 6091 on cpu 1: [ 108.041888][ T6091] generic_buffers_fsync_noflush+0x80/0x120 [ 108.047992][ T6091] ext4_sync_file+0x1ab/0x690 [ 108.052722][ T6091] vfs_fsync_range+0x10d/0x130 [ 108.057517][ T6091] ext4_buffered_write_iter+0x34f/0x3c0 [ 108.063096][ T6091] ext4_file_write_iter+0x383/0xf00 [ 108.068339][ T6091] iter_file_splice_write+0x663/0xa60 [ 108.073742][ T6091] direct_splice_actor+0x153/0x2a0 [ 108.078881][ T6091] splice_direct_to_actor+0x30f/0x680 [ 108.084286][ T6091] do_splice_direct+0xda/0x150 [ 108.089101][ T6091] do_sendfile+0x380/0x650 [ 108.093566][ T6091] __x64_sys_sendfile64+0x105/0x150 [ 108.098804][ T6091] x64_sys_call+0x2bb0/0x2ff0 [ 108.103523][ T6091] do_syscall_64+0xd2/0x200 [ 108.108075][ T6091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.113996][ T6091] [ 108.116334][ T6091] value changed: 0x00000020 -> 0x00000002 [ 108.122079][ T6091] [ 108.124417][ T6091] Reported by Kernel Concurrency Sanitizer on: [ 108.130578][ T6091] CPU: 1 UID: 0 PID: 6091 Comm: syz.4.623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.140227][ T6091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.150492][ T6091] ================================================================== [ 108.168416][ T6102] syz.1.629: attempt to access beyond end of device [ 108.168416][ T6102] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 108.182130][ T6102] syz.1.629: attempt to access beyond end of device [ 108.182130][ T6102] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 108.196725][ T6102] syz.1.629: attempt to access beyond end of device [ 108.196725][ T6102] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 108.210518][ T6102] syz.1.629: attempt to access beyond end of device [ 108.210518][ T6102] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 108.227341][ T6102] syz.1.629: attempt to access beyond end of device [ 108.227341][ T6102] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 108.241148][ T6102] syz.1.629: attempt to access beyond end of device [ 108.241148][ T6102] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 108.254748][ T6102] syz.1.629: attempt to access beyond end of device [ 108.254748][ T6102] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 108.278796][ T6102] syz.1.629: attempt to access beyond end of device [ 108.278796][ T6102] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 108.299225][ T6102] syz.1.629: attempt to access beyond end of device [ 108.299225][ T6102] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 108.312971][ T6102] syz.1.629: attempt to access beyond end of device [ 108.312971][ T6102] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 108.327764][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 109.253704][ T3388] usb 5-1: enqueue for inactive port 0 [ 109.259214][ T3388] usb 5-1: enqueue for inactive port 0 [ 109.329896][ T3388] vhci_hcd: vhci_device speed not set