last executing test programs: 2m36.48692538s ago: executing program 2 (id=29): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) 2m36.449799462s ago: executing program 2 (id=31): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x2aad, 0x10, 0x8009, 0x3, 0xf}) 2m36.399872544s ago: executing program 2 (id=33): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m36.359706935s ago: executing program 2 (id=35): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@orlov}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m36.146296415s ago: executing program 2 (id=42): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x45, 0x9, 0x0, 0x2}]}) 2m34.769168724s ago: executing program 2 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x60, r4, 0x1, 0x0, 0x80000000, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 2m34.726351695s ago: executing program 32 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x60, r4, 0x1, 0x0, 0x80000000, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) 2m33.70580653s ago: executing program 3 (id=122): close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m33.650513342s ago: executing program 3 (id=125): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 2m33.508443648s ago: executing program 3 (id=131): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x9, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 2m33.418021152s ago: executing program 3 (id=132): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x2, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='\x00', 0x89901) 2m33.333944426s ago: executing program 3 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x8000000000000001, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2m32.931856673s ago: executing program 3 (id=144): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x24, 0x0, 0x0) 2m32.912962694s ago: executing program 33 (id=144): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) io_uring_enter(r0, 0x47f6, 0x0, 0x24, 0x0, 0x0) 2m21.542014024s ago: executing program 6 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x6, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xaf) 2m21.257231086s ago: executing program 6 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r2, 0x0, 0x100000002}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m21.213992968s ago: executing program 6 (id=470): socket(0x9, 0x805, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setpgid(0x0, 0x0) 2m21.15437503s ago: executing program 6 (id=474): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000000020, 0x8005, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71efdd23dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwrite64(r0, &(0x7f0000000300)="ec", 0x1, 0x8000c61) 2m20.586682745s ago: executing program 6 (id=487): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x42, 0xfffffffa}, 0x10) sendmsg$tipc(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x845}, 0x10) 2m20.337478786s ago: executing program 6 (id=494): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) select(0x40, &(0x7f0000000280)={0x9, 0x38, 0x6, 0x9, 0xa2, 0x17, 0x1ff, 0x764}, &(0x7f00000002c0)={0x8, 0x7, 0x3, 0x4, 0x4, 0x4, 0x6, 0x1}, 0x0, 0x0) 2m20.320484686s ago: executing program 34 (id=494): socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) select(0x40, &(0x7f0000000280)={0x9, 0x38, 0x6, 0x9, 0xa2, 0x17, 0x1ff, 0x764}, &(0x7f00000002c0)={0x8, 0x7, 0x3, 0x4, 0x4, 0x4, 0x6, 0x1}, 0x0, 0x0) 1m55.201874778s ago: executing program 4 (id=1181): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x240, 0x38) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x8) 1m55.121652222s ago: executing program 4 (id=1186): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005"], 0x38}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m54.834177024s ago: executing program 4 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m54.796533236s ago: executing program 4 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m54.758406788s ago: executing program 4 (id=1191): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = syz_open_dev$vcsn(0x0, 0x1, 0x400000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, 0x0, 0x4040084) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m54.605315624s ago: executing program 4 (id=1195): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 1m39.581958981s ago: executing program 35 (id=1195): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) 1m6.586836762s ago: executing program 1 (id=2200): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r4, 0x6000000) copy_file_range(r4, 0x0, r4, &(0x7f00000004c0)=0x102, 0x9, 0x0) 1m6.474704397s ago: executing program 1 (id=2203): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r1, &(0x7f00000003c0), 0x4) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 1m6.42374145s ago: executing program 1 (id=2205): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000000000000009000000eea58c"], 0x50) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000240)={'macvtap0\x00', @ifru_ivalue=0x8}) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES64], 0x38}}, 0x20000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) 1m6.362738932s ago: executing program 1 (id=2207): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4056, &(0x7f00000003c0), 0x1, 0x466, &(0x7f0000000b00)="$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") recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x2201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x2, 0xff, 0xfe, 0x0, 0x5, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x1088, 0x5e8, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, 0x0, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @local, 0x6, 0x2, 0x0, 0x400, 0xb7, 0x2000213, r2}) 1m6.209554918s ago: executing program 1 (id=2210): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m5.365466565s ago: executing program 1 (id=2216): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x40, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xe827f1fa59d6c468, 0x0, 0x1000000, 0x1, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 1m5.365059255s ago: executing program 36 (id=2216): bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0xc, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9, 0x40, 0xd, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0xe827f1fa59d6c468, 0x0, 0x1000000, 0x1, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 4.983525116s ago: executing program 9 (id=2794): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0/file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000009270c7329d74a8987c83739d14a59ce4185aa0e9344ab1af7a9541b8366aabe60c6f48f8392ef277506238aedb5fe1dbec15ad3ce833d22041300de6dadcdbf66e462154dbabf7973909be1e057c349ee208a3d54b697cac595872135f5e4ebab9de2be2d28fad098f51cd46319a996c65839a46b543cb77", @ANYRES16=r1, @ANYBLOB="000200"/14], 0x14}}, 0x5815) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) r7 = socket(0x10, 0x3, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000040)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.728825686s ago: executing program 9 (id=2795): statx(0xffffffffffffff9c, 0x0, 0x400, 0x800, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) getrandom(0x0, 0x0, 0x2) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xc9, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) 4.724149057s ago: executing program 7 (id=2796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4}}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x4, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2b}, 0x0, @in6=@empty, 0x0, 0x5, 0x1}]}]}, 0x13c}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea3, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) creat(0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\x00\x00\b\x00') ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x40044591, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x800000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0xd, 0x4, 0x0, 0xfffffffc}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 4.603652492s ago: executing program 9 (id=2797): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) 4.164895471s ago: executing program 7 (id=2808): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)={0xc0, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_IE={0x24, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0x9}}, @mic={0x8c, 0x10, {0x40a, "c64cc3f7b8ba", @short="5984111a1f26396e"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_IE={0x49, 0x2a, [@random_vendor={0xdd, 0x43, "1ab6898c414adddef9db01dff3b8267b93c41960a51e0ab766252121d2fda717d33ce115410d378a4db3c64fae4d72b8818cf9282f3ccaf863a02994eedfac5fb45a58"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xff73}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="7da414e620d3"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4010}, 0x44000000) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c860}, 0x20044810) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x402, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0xfffffeed) read(r1, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0xffffffffffffffff, 0x0, 0x442e62fa, 0x1, 0xfffffffe}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) unshare(0x20000400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, &(0x7f00000000c0)) 4.107001074s ago: executing program 7 (id=2799): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='rss_stat\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x6168, 0x8, 0x6, 0x328}, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000040)={0x11080}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x3c, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_io_uring_setup(0x5c1, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r7 = gettid() kcmp(0x0, r7, 0x6, r4, r4) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) 3.643086923s ago: executing program 9 (id=2804): perf_event_open(&(0x7f0000000040)={0x2, 0xc5, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7d82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd1}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2004c810) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r7, &(0x7f0000000080)='./file0\x00', 0x4000cdd) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 3.206587222s ago: executing program 7 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r1, 0x0, 0x40008003}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x7d, 0x0, 0x3, 0x101, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) 3.173600924s ago: executing program 9 (id=2809): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RGETLOCK(r0, 0x0, 0xffffff6a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) truncate(0x0, 0x2000000001040023) pipe2(&(0x7f0000000040), 0x800) 3.03202292s ago: executing program 7 (id=2812): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000080000000800000000000000b63c620d6f2aa035f4fcd3cd14557b12d947a52955220e5ebccfdf851e268cf4d062b02f8271f0", @ANYRES32, @ANYBLOB="9b5800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f00000002c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(r6, 0x24, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd, r5}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES8=r2], 0x0) 2.999605851s ago: executing program 0 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x1}, 0x18) socket$inet6(0xa, 0x3, 0x3c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 2.988389902s ago: executing program 8 (id=2814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}]}, 0x3c}}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x6) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4004000) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x30, r5, 0x300, 0xfffffff8, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x7}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40c0}, 0x24000001) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x64000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r10 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, r6, 0x704, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x810) 2.863568527s ago: executing program 0 (id=2816): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x56bb, &(0x7f0000000040)={0x0, 0x36d, 0x1, 0xc, 0xa0002f5}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r2, 0x0, r2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000400000045"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0xfffffffffffffffe, 0x3}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 2.752649582s ago: executing program 0 (id=2817): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) 2.724025083s ago: executing program 8 (id=2818): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4004, 0x409}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000500)={'security\x00', 0x0, [0x5, 0x8, 0x20000004, 0x3, 0x4]}, &(0x7f0000000040)=0x54) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8084) 2.660459246s ago: executing program 0 (id=2819): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc80, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) 1.916800858s ago: executing program 8 (id=2822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000080006000b00000008000500f8ffffffd036187f7ba9657eb1678c3799677f18763780a7ccdfd996448085a10b56ea8995ce2c8e6af3dd86754908724a9b75a344b3a544542816e1c65612e491273aa150b6ef79f7edd2b7db72cb830fdfd5af87ee3e28ee203f02c332062a760f057919ddf8f8bf25b4dae28b34ec55245b305178641f7da758e2de82f8d58349dfc5dc136902b25a84c5253ae754b1512275b1c0961893945ee885c1de0f64d98975977c"], 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="6000000000020104000000000000000002000007240002801400018008000100000000000800020edc8f31010c000280050001000000000024000380140001800800010000000000080002e9ab1414000c000280050001003a004093040001"], 0x60}}, 0x4000000) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2800002, &(0x7f0000000040)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c636865636b41e7542d1cfb52b82c73657373696f6e3d3078303030303030303030303030303034622c636865636b3d7374726963742c6e6f636f6d70726573732c7569643d90332c04c8dc4af959b0179f73a6dc8144249bb6e60a4e8c77663419c6e59cd8a9be5c7749e16eaeb060a7083a6335b09a7c745f952c4d8dc6ae15aeae7f05c5fc71", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x40, 0x519, &(0x7f00000005c0)="$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") 1.896012239s ago: executing program 8 (id=2823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) read$ptp(r5, &(0x7f0000000500)=""/81, 0x51) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r6, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1.895150019s ago: executing program 5 (id=2833): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x597, &(0x7f0000000680)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) read$rfkill(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000000100)='./file2/file0\x00', 0x2000000001048023) r1 = getpid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0x40a85321, 0x0) syz_pidfd_open(r1, 0x0) 1.792923253s ago: executing program 5 (id=2824): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22"], 0xfdef) r4 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2}, 0x94) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={@remote, @mcast1, @mcast2, 0x4, 0x3ff, 0x2, 0x400, 0x8, 0x4, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000050000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r7, 0x100000000) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r9}]}]}, 0x28}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xfd, 0x909f}]}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 716.30687ms ago: executing program 8 (id=2829): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) 661.136722ms ago: executing program 8 (id=2830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='sched_switch\x00') fspick(r7, &(0x7f0000000000)='.\x00', 0x0) 490.364099ms ago: executing program 9 (id=2831): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) dup(r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000002240)={r5, 0x5, 0x10, 0xf1}, &(0x7f00000001c0)=0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 385.675444ms ago: executing program 5 (id=2832): perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1800000000000000}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x800000000183, 0x6}, 0x6025, 0x4005, 0x6, 0x0, 0x0, 0xfffffc01, 0xa, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1596d2c385964141, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0, 0x0, 0x68f}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) syz_pidfd_open(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdee) syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)) 380.395504ms ago: executing program 5 (id=2834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x9, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x1, @local, 0x4f1}}}, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, 0x0, &(0x7f00000008c0)=r5}, 0x20) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001000003000000000000000000000000004000"/264], 0x110) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000180)={0x4, {{0xa, 0x4e22, 0x1, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) syz_clone(0x40800300, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=2835): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x22000401) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x64, 0xcb, &(0x7f0000000400)="9d806a25707c572c6ffad7aea58c27197234cc7df32f4b7face4e6d6920bd5ef2e9742577bc3a089686f1de13c39164ba4fd1e87e8c8818a9530b41a3cf62c4a74d3749b5b346be76bb686e26c4b879fc1b2e84a11f03237e197b8f311a5d25356f45114", &(0x7f0000000540)=""/203, 0x3ff, 0x0, 0x7b, 0x1b, &(0x7f0000000640)="114ae7d2ac7d5a1b53c0b3c29d2586755304c16a35dd8f59affb4485bf547dbc76849290676480dbcba5fc6572eb3c663636d977c5ac3f2ecedb37b09517a984249d639163292322dacf77b78d81dbab4d94d89dd84a4fe97643a2621576b8b45a50a472e5a85eae4ba8b4a49e9205b5e9a14ab03dfec545b81d10", &(0x7f0000000040)="71a1aeceb7d5131354bd3120b3764effde15b76cc5efa5d89b8bca", 0x2, 0x0, 0x3}, 0x50) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet_mptcp(0x2, 0x1, 0x106) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='net/ip6_flowlabel\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x22000, 0x4, 0x2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) kernel console output (not intermixed with test programs): (loop7): This should not happen!! Data will be lost [ 126.216533][ T5465] [ 126.226220][ T5465] EXT4-fs (loop7): Total free blocks count 0 [ 126.232339][ T5465] EXT4-fs (loop7): Free/Dirty block details [ 126.238517][ T5465] EXT4-fs (loop7): free_blocks=68451041280 [ 126.244474][ T5465] EXT4-fs (loop7): dirty_blocks=16384 [ 126.249935][ T5465] EXT4-fs (loop7): Block reservation details [ 126.255941][ T5465] EXT4-fs (loop7): i_reserved_data_blocks=1024 [ 126.262362][T10309] tipc: Resetting bearer [ 126.270882][T10309] tipc: Disabling bearer [ 126.271028][ T5465] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 126.289504][ T5465] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.289504][ T5465] [ 126.353819][T10347] pim6reg1: entered promiscuous mode [ 126.359299][T10347] pim6reg1: entered allmulticast mode [ 126.379609][T10149] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.386751][T10149] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.394137][T10149] bridge_slave_0: entered allmulticast mode [ 126.401176][T10149] bridge_slave_0: entered promiscuous mode [ 126.415338][T10397] loop7: detected capacity change from 0 to 1024 [ 126.422112][T10149] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.422674][T10397] EXT4-fs: inline encryption not supported [ 126.429621][T10149] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.442925][T10149] bridge_slave_1: entered allmulticast mode [ 126.449722][T10149] bridge_slave_1: entered promiscuous mode [ 126.459268][T10397] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.2228: Allocating blocks 385-513 which overlap fs metadata [ 126.486919][T10397] EXT4-fs (loop7): pa ffff88810070d9a0: logic 16, phys. 129, len 24 [ 126.495086][T10397] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 126.505455][T10397] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 126.517998][T10397] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.517998][T10397] [ 126.527672][T10397] EXT4-fs (loop7): Total free blocks count 0 [ 126.533710][T10397] EXT4-fs (loop7): Free/Dirty block details [ 126.539682][T10397] EXT4-fs (loop7): free_blocks=128 [ 126.544825][T10397] EXT4-fs (loop7): dirty_blocks=0 [ 126.549996][T10397] EXT4-fs (loop7): Block reservation details [ 126.556265][T10397] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 126.558601][T10429] loop8: detected capacity change from 0 to 512 [ 126.578198][T10149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.590142][T10429] EXT4-fs: Ignoring removed bh option [ 126.596827][T10429] EXT4-fs error (device loop8): ext4_iget_extra_inode:5075: inode #15: comm syz.8.2233: corrupted in-inode xattr: invalid ea_ino [ 126.616856][T10429] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2233: couldn't read orphan inode 15 (err -117) [ 126.631501][T10149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.644393][T10441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.647460][T10429] netlink: 'syz.8.2233': attribute type 10 has an invalid length. [ 126.660883][T10429] __nla_validate_parse: 8 callbacks suppressed [ 126.660898][T10429] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2233'. [ 126.676573][T10441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.714530][T10149] team0: Port device team_slave_0 added [ 126.721286][T10439] syzkaller0: entered promiscuous mode [ 126.726806][T10439] syzkaller0: entered allmulticast mode [ 126.737468][T10149] team0: Port device team_slave_1 added [ 126.754341][T10471] syzkaller0: entered promiscuous mode [ 126.760061][T10471] syzkaller0: entered allmulticast mode [ 126.768834][ T5518] IPVS: stop unused estimator thread 0... [ 126.781574][T10149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.788678][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.814774][T10149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.827863][ T5559] page_pool_release_retry() stalled pool shutdown: id 57, 50 inflight 60 sec [ 126.837141][T10439] tipc: Enabled bearer , priority 0 [ 126.844497][T10436] tipc: Resetting bearer [ 126.853559][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2232'. [ 126.862675][T10427] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 126.863438][T10436] tipc: Disabling bearer [ 126.878388][T10149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.885350][T10149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.911532][T10149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.928707][T10505] tipc: Enabled bearer , priority 0 [ 126.936203][T10469] tipc: Resetting bearer [ 126.953246][T10469] tipc: Disabling bearer [ 126.976292][T10522] 9pnet_virtio: no channels available for device 127.0.0.1 [ 126.987314][T10149] hsr_slave_0: entered promiscuous mode [ 126.994078][T10149] hsr_slave_1: entered promiscuous mode [ 127.003913][T10149] debugfs: 'hsr0' already exists in 'hsr' [ 127.009701][T10149] Cannot create hsr debugfs directory [ 127.018997][T10522] tipc: Enabling of bearer rejected, already enabled [ 127.073744][T10557] syzkaller0: entered promiscuous mode [ 127.079335][T10557] syzkaller0: entered allmulticast mode [ 127.138110][T10149] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 127.146804][T10149] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 127.155728][T10149] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 127.165295][T10149] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 127.203571][T10149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.217330][T10149] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.227451][ T5518] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.234657][ T5518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.247674][ T5498] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.254800][ T5498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.270756][T10637] netlink: 3672 bytes leftover after parsing attributes in process `syz.0.2245'. [ 127.294313][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2244'. [ 127.303323][T10633] netlink: 'syz.5.2244': attribute type 30 has an invalid length. [ 127.315786][ T5518] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.327216][ T5518] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.336803][ T5518] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.355889][T10149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.370937][ T5518] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.415557][T10658] block device autoloading is deprecated and will be removed. [ 127.513470][T10149] veth0_vlan: entered promiscuous mode [ 127.521939][T10149] veth1_vlan: entered promiscuous mode [ 127.532890][ T5510] Bluetooth: hci0: Frame reassembly failed (-84) [ 127.537362][T10149] veth0_macvtap: entered promiscuous mode [ 127.547050][T10149] veth1_macvtap: entered promiscuous mode [ 127.571353][T10149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.582832][T10149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.596014][ T5518] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.610866][ T5518] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.620056][ T5518] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.630029][ T5518] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.784894][T10686] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 127.802641][T10698] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 127.832891][T10700] loop8: detected capacity change from 0 to 512 [ 127.841687][T10700] EXT4-fs: Ignoring removed oldalloc option [ 127.846648][T10705] loop9: detected capacity change from 0 to 164 [ 127.848117][T10700] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 127.867607][T10705] ISOFS: unable to read i-node block [ 127.873381][T10705] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 127.894003][T10700] EXT4-fs (loop8): 1 truncate cleaned up [ 127.900507][T10700] EXT4-fs mount: 14 callbacks suppressed [ 127.900542][T10700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.075015][T10715] loop5: detected capacity change from 0 to 512 [ 128.082383][T10715] EXT4-fs: Ignoring removed i_version option [ 128.088498][T10715] EXT4-fs: Ignoring removed bh option [ 128.105161][T10715] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.600134][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.607708][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.615175][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.622639][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.630081][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.637542][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.645100][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.652547][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.660010][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.667422][ T3424] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 128.743221][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.834090][ T3701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.865292][ T3424] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 129.103092][T10751] tipc: New replicast peer: 255.255.255.83 [ 129.109102][T10751] tipc: Enabled bearer , priority 10 [ 129.137009][T10731] loop7: detected capacity change from 0 to 32768 [ 129.177060][T10761] IPVS: Unknown mcast interface: hsr0 [ 129.182957][T10731] loop7: p1 p2 p3 < > [ 129.187118][T10731] loop7: p1 size 242222080 extends beyond EOD, truncated [ 129.195067][T10731] loop7: p2 start 4294967295 is beyond EOD, truncated [ 129.370910][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2269'. [ 129.389718][T10787] loop9: detected capacity change from 0 to 128 [ 129.391395][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2269'. [ 129.401021][T10787] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 129.412987][T10787] FAT-fs (loop9): Filesystem has been set read-only [ 129.419887][T10787] bio_check_eod: 32 callbacks suppressed [ 129.419902][T10787] syz.9.2270: attempt to access beyond end of device [ 129.419902][T10787] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 129.439942][T10787] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 129.447926][T10787] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 129.456810][T10787] syz.9.2270: attempt to access beyond end of device [ 129.456810][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.468505][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 129.468521][ T29] audit: type=1400 audit(385.446:2845): avc: denied { create } for pid=10792 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 129.471837][T10787] syz.9.2270: attempt to access beyond end of device [ 129.471837][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.485825][ T29] audit: type=1400 audit(385.456:2846): avc: denied { create } for pid=10792 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.495848][T10787] syz.9.2270: attempt to access beyond end of device [ 129.495848][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.542241][ T29] audit: type=1400 audit(385.486:2847): avc: denied { write } for pid=10792 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.542845][ T3654] Bluetooth: hci0: command 0x1003 tx timeout [ 129.562391][ T29] audit: type=1400 audit(385.486:2848): avc: denied { read } for pid=10792 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.568553][ T6907] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 129.569091][T10787] syz.9.2270: attempt to access beyond end of device [ 129.569091][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.588330][ T29] audit: type=1400 audit(385.486:2849): avc: denied { ioctl } for pid=10792 comm="syz.5.2271" path="socket:[28748]" dev="sockfs" ino=28748 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 129.594582][T10787] syz.9.2270: attempt to access beyond end of device [ 129.594582][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.608015][ T29] audit: type=1400 audit(385.486:2850): avc: denied { map_create } for pid=10792 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.633654][T10787] syz.9.2270: attempt to access beyond end of device [ 129.633654][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.646538][ T29] audit: type=1400 audit(385.486:2851): avc: denied { map_read map_write } for pid=10792 comm="syz.5.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 129.665232][T10787] syz.9.2270: attempt to access beyond end of device [ 129.665232][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.711457][T10787] syz.9.2270: attempt to access beyond end of device [ 129.711457][T10787] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 129.728306][T10791] syz.9.2270: attempt to access beyond end of device [ 129.728306][T10791] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 129.741626][T10791] buffer_io_error: 18 callbacks suppressed [ 129.741643][T10791] Buffer I/O error on dev loop9, logical block 2065, async page read [ 129.757843][T10791] Buffer I/O error on dev loop9, logical block 2066, async page read [ 129.766845][T10791] Buffer I/O error on dev loop9, logical block 2067, async page read [ 129.775708][T10791] Buffer I/O error on dev loop9, logical block 2068, async page read [ 129.778271][T10801] tipc: Enabled bearer , priority 0 [ 129.786570][T10791] Buffer I/O error on dev loop9, logical block 2069, async page read [ 129.797394][T10801] syzkaller0: entered promiscuous mode [ 129.804272][T10801] syzkaller0: entered allmulticast mode [ 129.813278][T10791] Buffer I/O error on dev loop9, logical block 2070, async page read [ 129.821868][T10791] Buffer I/O error on dev loop9, logical block 2071, async page read [ 129.830089][T10791] Buffer I/O error on dev loop9, logical block 2072, async page read [ 129.831617][T10801] tipc: Resetting bearer [ 129.838269][T10791] Buffer I/O error on dev loop9, logical block 2065, async page read [ 129.838334][T10791] Buffer I/O error on dev loop9, logical block 2066, async page read [ 129.861522][ T29] audit: type=1400 audit(385.816:2852): avc: denied { read write } for pid=10798 comm="syz.7.2273" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.885214][ T29] audit: type=1400 audit(385.816:2853): avc: denied { open } for pid=10798 comm="syz.7.2273" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.908995][ T29] audit: type=1400 audit(385.826:2854): avc: denied { ioctl } for pid=10798 comm="syz.7.2273" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 129.943817][T10805] vhci_hcd: invalid port number 96 [ 129.949034][T10805] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 129.963935][T10800] tipc: Resetting bearer [ 129.984906][T10800] tipc: Disabling bearer [ 130.032447][T10811] tipc: Enabled bearer , priority 0 [ 130.049509][T10811] syzkaller0: entered promiscuous mode [ 130.055062][T10811] syzkaller0: entered allmulticast mode [ 130.076925][T10811] tipc: Resetting bearer [ 130.095811][T10810] tipc: Resetting bearer [ 130.111881][T10810] tipc: Disabling bearer [ 130.121628][T10815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2278'. [ 130.137950][T10823] loop5: detected capacity change from 0 to 2048 [ 130.159720][T10823] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.238016][T10835] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2280: bg 0: block 345: padding at end of block bitmap is not set [ 130.258041][T10835] EXT4-fs (loop5): Remounting filesystem read-only [ 130.264639][ T5518] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 130.331776][T10840] lo: entered promiscuous mode [ 130.333046][T10839] loop0: detected capacity change from 0 to 512 [ 130.336616][T10840] lo: entered allmulticast mode [ 130.385826][T10839] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 130.404322][ T3701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.405523][T10840] tunl0: entered promiscuous mode [ 130.418651][T10840] tunl0: entered allmulticast mode [ 130.429355][T10840] gre0: entered promiscuous mode [ 130.433880][T10839] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec118, mo2=0002] [ 130.434414][T10840] gre0: entered allmulticast mode [ 130.436099][T10840] gretap0: entered promiscuous mode [ 130.447881][T10839] System zones: 1-12 [ 130.452742][T10840] gretap0: entered allmulticast mode [ 130.462065][T10839] EXT4-fs (loop0): 1 truncate cleaned up [ 130.473719][T10840] erspan0: entered promiscuous mode [ 130.479537][T10840] erspan0: entered allmulticast mode [ 130.480174][T10839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.490590][T10840] ip_vti0: entered promiscuous mode [ 130.502630][T10840] ip_vti0: entered allmulticast mode [ 130.511125][T10840] ip6_vti0: entered promiscuous mode [ 130.516508][T10840] ip6_vti0: entered allmulticast mode [ 130.524942][T10840] sit0: entered promiscuous mode [ 130.530066][T10840] sit0: entered allmulticast mode [ 130.536299][T10840] ip6tnl0: entered promiscuous mode [ 130.541608][T10840] ip6tnl0: entered allmulticast mode [ 130.564499][T10840] ip6gre0: entered promiscuous mode [ 130.569955][T10840] ip6gre0: entered allmulticast mode [ 130.588789][T10840] syz_tun: entered allmulticast mode [ 130.595469][T10840] ip6gretap0: entered allmulticast mode [ 130.602473][T10840] bridge0: entered promiscuous mode [ 130.607866][T10840] bridge0: entered allmulticast mode [ 130.614647][T10840] bond0: entered promiscuous mode [ 130.619750][T10840] bond0: entered allmulticast mode [ 130.629701][T10840] dummy0: entered promiscuous mode [ 130.634887][T10840] dummy0: entered allmulticast mode [ 130.641139][T10840] nlmon0: entered promiscuous mode [ 130.646316][T10840] nlmon0: entered allmulticast mode [ 130.653238][T10840] caif0: entered promiscuous mode [ 130.658534][T10840] caif0: entered allmulticast mode [ 130.663786][T10840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.683932][T10852] ip6erspan0: entered promiscuous mode [ 130.691440][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.830924][T10881] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2293'. [ 130.977446][ T3424] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 131.079989][ T5555] tipc: Node number set to 2403713723 [ 131.130606][T10897] loop8: detected capacity change from 0 to 32768 [ 131.178244][T10897] loop8: p1 p2 p3 < p5 p6 > [ 131.182958][T10897] loop8: p1 size 242222080 extends beyond EOD, truncated [ 131.191821][T10897] loop8: p2 start 4294967295 is beyond EOD, truncated [ 131.276125][T10920] loop8: detected capacity change from 0 to 1024 [ 131.282954][T10920] EXT4-fs: Ignoring removed bh option [ 131.288562][T10920] EXT4-fs: inline encryption not supported [ 131.294770][T10920] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.306797][T10920] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 131.315735][T10920] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.2300: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.330829][T10920] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2300: lblock 0 mapped to illegal pblock 48 (length 1) [ 131.346457][T10920] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2300: Failed to acquire dquot type 0 [ 131.359735][T10920] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 131.369439][T10920] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2300: mark_inode_dirty error [ 131.381329][T10920] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 131.391854][T10920] EXT4-fs (loop8): 1 orphan inode deleted [ 131.398091][T10920] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.410673][ T5489] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:33: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.434559][ T5489] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:33: Failed to release dquot type 0 [ 131.448449][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.458033][ T7569] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 131.471241][ T7569] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 131.480878][ T7569] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 131.527975][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2304'. [ 131.537288][T10931] bridge0: port 1(team0) entered disabled state [ 131.595791][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2305'. [ 131.610756][T10939] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=10939 comm=syz.9.2306 [ 131.652017][T10939] SELinux: failed to load policy [ 131.716575][T10954] tipc: Enabled bearer , priority 0 [ 131.738491][T10954] syzkaller0: entered promiscuous mode [ 131.744010][T10954] syzkaller0: entered allmulticast mode [ 131.774529][T10954] tipc: Resetting bearer [ 131.793353][T10952] tipc: Resetting bearer [ 131.802027][T10952] tipc: Disabling bearer [ 132.057510][T10970] __nla_validate_parse: 1 callbacks suppressed [ 132.057528][T10970] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2315'. [ 132.481852][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.497400][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.521083][T10979] netlink: 'syz.5.2317': attribute type 21 has an invalid length. [ 132.542120][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.591160][T10984] loop5: detected capacity change from 0 to 128 [ 132.604871][T10985] loop0: detected capacity change from 0 to 1024 [ 132.619865][T10985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.632356][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.644585][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2320'. [ 132.698566][T10991] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2320'. [ 132.850512][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.861966][T10997] blktrace: Concurrent blktraces are not allowed on loop4 [ 132.876909][T10997] hsr0: entered promiscuous mode [ 132.883643][T10997] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2321'. [ 132.892808][T10997] hsr_slave_0: left promiscuous mode [ 132.899110][T10997] hsr_slave_1: left promiscuous mode [ 132.909621][T10997] hsr0 (unregistering): left promiscuous mode [ 132.938583][T11005] loop0: detected capacity change from 0 to 512 [ 132.946055][T11005] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 133.050339][T11014] loop7: detected capacity change from 0 to 512 [ 133.059459][T11014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 133.068330][T11014] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.105899][T11014] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.2326: Allocating blocks 41-42 which overlap fs metadata [ 133.124164][T11024] tipc: Enabled bearer , priority 0 [ 133.131445][T11014] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4193: comm syz.7.2326: Allocating blocks 41-42 which overlap fs metadata [ 133.136502][T11024] syzkaller0: entered promiscuous mode [ 133.146017][T11014] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2326: Failed to acquire dquot type 1 [ 133.151420][T11024] syzkaller0: entered allmulticast mode [ 133.165037][T11014] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 133.183539][T11014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.2326: corrupted inode contents [ 133.205093][T11014] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #12: comm syz.7.2326: mark_inode_dirty error [ 133.217159][T11014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.2326: corrupted inode contents [ 133.231513][T11024] tipc: Resetting bearer [ 133.246745][T11023] tipc: Resetting bearer [ 133.254273][T11023] tipc: Disabling bearer [ 133.276385][T11014] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.2326: mark_inode_dirty error [ 133.288525][T11014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.2326: corrupted inode contents [ 133.300974][T11032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2330'. [ 133.301149][T11014] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 133.318855][T11014] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #12: comm syz.7.2326: corrupted inode contents [ 133.331127][T11014] EXT4-fs error (device loop7): ext4_truncate:4637: inode #12: comm syz.7.2326: mark_inode_dirty error [ 133.342508][T11014] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 133.352251][T11014] EXT4-fs (loop7): 1 truncate cleaned up [ 133.358923][T11014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.388551][T11041] ip6erspan0: entered promiscuous mode [ 133.419776][ T4838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.450511][T11053] loop7: detected capacity change from 0 to 2048 [ 133.485324][T11053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.560904][T11062] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2333: bg 0: block 345: padding at end of block bitmap is not set [ 133.575571][T11062] EXT4-fs (loop7): Remounting filesystem read-only [ 133.578388][T11047] loop5: detected capacity change from 0 to 512 [ 133.590515][ T5498] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 133.645363][T11047] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.659456][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 133.673394][T11063] team0: left allmulticast mode [ 133.678365][T11063] team_slave_0: left allmulticast mode [ 133.683864][T11063] team_slave_1: left allmulticast mode [ 133.689518][T11063] team0: left promiscuous mode [ 133.694400][T11063] team_slave_0: left promiscuous mode [ 133.700077][T11063] team_slave_1: left promiscuous mode [ 133.700311][T11063] bridge0: port 1(team0) entered disabled state [ 133.732680][ T4838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.753875][T11047] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 133.756695][T11047] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2332: bg 0: block 248: padding at end of block bitmap is not set [ 133.774985][T11047] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2332: Failed to acquire dquot type 1 [ 133.807423][T11047] EXT4-fs (loop5): 1 truncate cleaned up [ 133.868976][T11047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 133.911492][ T3701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 133.932883][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 134.217252][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2344'. [ 134.226338][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2344'. [ 134.412080][T11104] dummy0: entered promiscuous mode [ 134.443154][T11104] dummy0: left promiscuous mode [ 134.647686][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 134.647706][ T29] audit: type=1400 audit(390.596:3061): avc: denied { create } for pid=11115 comm="syz.7.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.673380][ T29] audit: type=1400 audit(390.596:3062): avc: denied { write } for pid=11115 comm="syz.7.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 134.692300][ T29] audit: type=1400 audit(390.606:3063): avc: denied { relabelfrom } for pid=11113 comm="syz.9.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.711747][ T29] audit: type=1400 audit(390.606:3064): avc: denied { relabelto } for pid=11113 comm="syz.9.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 134.758810][T11122] loop0: detected capacity change from 0 to 2048 [ 134.775957][ T29] audit: type=1400 audit(390.746:3065): avc: denied { read write } for pid=11123 comm="syz.7.2357" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 134.799760][ T29] audit: type=1400 audit(390.746:3066): avc: denied { open } for pid=11123 comm="syz.7.2357" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 134.826380][T11122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.950207][T11135] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2347: bg 0: block 345: padding at end of block bitmap is not set [ 134.968930][T11135] EXT4-fs (loop0): Remounting filesystem read-only [ 134.975646][ T5489] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 135.083104][T11141] syzkaller0: entered promiscuous mode [ 135.088676][T11141] syzkaller0: entered allmulticast mode [ 135.104252][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.107981][ T29] audit: type=1400 audit(391.076:3067): avc: denied { write } for pid=11140 comm="syz.7.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 135.113824][T11138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2348'. [ 135.145122][T11138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.152634][T11138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.169946][T11138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.177382][T11138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.184659][ T29] audit: type=1326 audit(391.146:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.5.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 135.207727][ T29] audit: type=1326 audit(391.146:3069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.5.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 135.230936][ T29] audit: type=1326 audit(391.146:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11139 comm="syz.5.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 135.450742][T11168] loop0: detected capacity change from 0 to 2048 [ 135.519509][T11168] loop0: p1 < > p4 [ 135.546299][T11168] loop0: p4 size 8388608 extends beyond EOD, truncated [ 135.587674][T11175] netlink: 'syz.9.2356': attribute type 30 has an invalid length. [ 135.599948][ T5498] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.611224][ T5498] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.631096][ T5498] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.663313][ T5498] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.132848][T11221] tipc: Enabled bearer , priority 0 [ 136.140454][T11221] syzkaller0: entered promiscuous mode [ 136.146018][T11221] syzkaller0: entered allmulticast mode [ 136.162880][T11221] tipc: Resetting bearer [ 136.170798][T11220] tipc: Resetting bearer [ 136.178364][T11220] tipc: Disabling bearer [ 136.378733][T11238] tipc: Enabled bearer , priority 0 [ 136.386094][T11238] syzkaller0: entered promiscuous mode [ 136.391752][T11238] syzkaller0: entered allmulticast mode [ 136.406362][T11238] tipc: Resetting bearer [ 136.415933][T11237] tipc: Resetting bearer [ 136.441296][T11237] tipc: Disabling bearer [ 137.076804][T11278] loop0: detected capacity change from 0 to 128 [ 137.145685][T11278] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 137.153693][T11278] FAT-fs (loop0): Filesystem has been set read-only [ 137.166621][T11278] bio_check_eod: 29159 callbacks suppressed [ 137.166638][T11278] syz.0.2376: attempt to access beyond end of device [ 137.166638][T11278] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 137.186812][T11278] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 137.194780][T11278] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 137.203340][T11278] syz.0.2376: attempt to access beyond end of device [ 137.203340][T11278] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 137.217193][T11278] syz.0.2376: attempt to access beyond end of device [ 137.217193][T11278] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 137.231060][T11283] syz.0.2376: attempt to access beyond end of device [ 137.231060][T11283] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 137.244841][T11283] buffer_io_error: 29150 callbacks suppressed [ 137.244887][T11283] Buffer I/O error on dev loop0, logical block 2065, async page read [ 137.259437][T11283] syz.0.2376: attempt to access beyond end of device [ 137.259437][T11283] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 137.272766][T11283] Buffer I/O error on dev loop0, logical block 2066, async page read [ 137.333258][T11283] syz.0.2376: attempt to access beyond end of device [ 137.333258][T11283] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 137.346700][T11283] Buffer I/O error on dev loop0, logical block 2067, async page read [ 137.371255][T11283] syz.0.2376: attempt to access beyond end of device [ 137.371255][T11283] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 137.384730][T11283] Buffer I/O error on dev loop0, logical block 2068, async page read [ 137.457869][T11283] syz.0.2376: attempt to access beyond end of device [ 137.457869][T11283] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 137.471195][T11283] Buffer I/O error on dev loop0, logical block 2069, async page read [ 137.481377][T11283] syz.0.2376: attempt to access beyond end of device [ 137.481377][T11283] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 137.494713][T11283] Buffer I/O error on dev loop0, logical block 2070, async page read [ 137.523030][T11283] syz.0.2376: attempt to access beyond end of device [ 137.523030][T11283] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 137.536447][T11283] Buffer I/O error on dev loop0, logical block 2071, async page read [ 137.550756][T11283] Buffer I/O error on dev loop0, logical block 2072, async page read [ 137.559264][T11278] Buffer I/O error on dev loop0, logical block 2065, async page read [ 137.567687][T11278] Buffer I/O error on dev loop0, logical block 2066, async page read [ 137.672922][T11295] __nla_validate_parse: 1 callbacks suppressed [ 137.672939][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2378'. [ 138.220882][T11311] tipc: Enabled bearer , priority 0 [ 138.228539][T11311] syzkaller0: entered promiscuous mode [ 138.234067][T11311] syzkaller0: entered allmulticast mode [ 138.263826][T11294] loop9: detected capacity change from 0 to 1024 [ 138.272507][T11315] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.282911][T11294] EXT4-fs (loop9): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 138.299891][T11311] tipc: Resetting bearer [ 138.308212][T11310] tipc: Resetting bearer [ 138.316289][T11310] tipc: Disabling bearer [ 138.321080][T11294] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.339530][T11323] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.354311][T11315] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.401129][T11323] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.419519][T11315] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.446465][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.470858][T11323] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.484834][T11342] netlink: 'syz.8.2390': attribute type 13 has an invalid length. [ 138.680732][T11315] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.695671][T11349] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 138.737100][T11323] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.780332][ T5465] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.816577][ T5465] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.853136][ T5465] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.886914][ T5465] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.982609][ T5465] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.076874][ T5465] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.104154][T11367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11367 comm=syz.8.2391 [ 139.116954][T11367] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11367 comm=syz.8.2391 [ 139.131583][ T5465] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.143532][ T5465] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.167865][ T5508] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.197823][ T5508] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.227954][ T5508] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.259700][ T5508] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.689678][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 139.689694][ T29] audit: type=1400 audit(395.656:3584): avc: denied { watch } for pid=11414 comm="syz.9.2400" path="/25/control" dev="tmpfs" ino=149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 139.718299][ T29] audit: type=1326 audit(395.666:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.9.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.741405][ T29] audit: type=1326 audit(395.666:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.9.2400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.816681][ T29] audit: type=1326 audit(395.786:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.839865][ T29] audit: type=1326 audit(395.786:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.862964][ T29] audit: type=1326 audit(395.786:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="syz.9.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.885997][ T29] audit: type=1326 audit(395.786:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.908690][ T29] audit: type=1326 audit(395.786:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.931125][ T29] audit: type=1326 audit(395.786:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.953658][ T29] audit: type=1326 audit(395.786:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11419 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86666af749 code=0x7ffc0000 [ 139.976727][T11418] loop8: detected capacity change from 0 to 8192 [ 141.172850][T11480] loop8: detected capacity change from 0 to 2048 [ 141.318378][T11480] loop8: p1 < > p4 [ 141.358582][T11480] loop8: p4 size 8388608 extends beyond EOD, truncated [ 142.030983][T11504] tipc: Enabled bearer , priority 0 [ 142.109179][T11508] netlink: 'syz.5.2410': attribute type 13 has an invalid length. [ 142.188812][T11510] lo speed is unknown, defaulting to 1000 [ 142.194691][ T5498] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.208051][T11510] lo speed is unknown, defaulting to 1000 [ 142.218022][ T5498] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.228267][T11510] lo speed is unknown, defaulting to 1000 [ 142.239924][ T5498] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.251494][T11510] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.269131][ T5498] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.280224][T11510] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 142.308035][T11510] lo speed is unknown, defaulting to 1000 [ 142.315842][T11510] lo speed is unknown, defaulting to 1000 [ 142.322168][T11510] lo speed is unknown, defaulting to 1000 [ 142.328576][T11510] lo speed is unknown, defaulting to 1000 [ 142.334871][T11510] lo speed is unknown, defaulting to 1000 [ 142.341963][T11510] lo speed is unknown, defaulting to 1000 [ 142.349803][T11510] lo speed is unknown, defaulting to 1000 [ 142.404456][T11512] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.476937][T11526] tipc: Started in network mode [ 142.482032][T11526] tipc: Node identity 36f402abfec7, cluster identity 4711 [ 142.489247][T11526] tipc: Enabled bearer , priority 0 [ 142.504234][T11526] syzkaller0: entered promiscuous mode [ 142.509828][T11526] syzkaller0: entered allmulticast mode [ 142.522320][T11526] tipc: Resetting bearer [ 142.537989][T11525] tipc: Resetting bearer [ 142.550843][T11525] tipc: Disabling bearer [ 142.739936][T11544] smc: net device bond0 applied user defined pnetid SYZ0 [ 143.474471][T11559] loop0: detected capacity change from 0 to 512 [ 143.481901][T11559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.499033][T11559] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2424: Invalid block bitmap block 0 in block_group 0 [ 143.518661][T11559] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 143.538035][T11559] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.2424: attempt to clear invalid blocks 983261 len 1 [ 143.607987][T11559] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2424: Invalid inode table block 0 in block_group 0 [ 143.628286][T11570] netlink: 'syz.8.2428': attribute type 21 has an invalid length. [ 143.658122][T11559] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 143.673459][T11559] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 143.688782][T11559] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2424: Invalid inode table block 0 in block_group 0 [ 143.702591][T11559] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 143.725281][T11559] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.2424: mark_inode_dirty error [ 143.744426][T11577] loop8: detected capacity change from 0 to 128 [ 143.764460][T11576] bond1 (unregistering): Released all slaves [ 143.775145][T11559] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 143.797006][T11582] lo speed is unknown, defaulting to 1000 [ 143.797483][T11559] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2424: Invalid inode table block 0 in block_group 0 [ 143.843895][T11559] EXT4-fs (loop0): 1 truncate cleaned up [ 143.850561][T11559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.877913][T11559] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 144.061243][T11582] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2430'. [ 144.169198][T11687] lo speed is unknown, defaulting to 1000 [ 144.425439][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.483831][ T5555] hid_parser_main: 26 callbacks suppressed [ 144.483914][ T5555] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 144.497520][ T5555] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 144.507605][ T5555] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 144.519450][ T5555] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 144.543867][T11716] lo speed is unknown, defaulting to 1000 [ 144.792497][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 144.792518][ T29] audit: type=1326 audit(400.686:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 144.841735][ T29] audit: type=1326 audit(400.816:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 144.864526][ T29] audit: type=1326 audit(400.816:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11715 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 144.911948][T11762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.926689][T11764] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 145.013196][T11762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.368029][ T29] audit: type=1326 audit(401.336:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 145.386444][T11783] loop9: detected capacity change from 0 to 512 [ 145.391239][ T29] audit: type=1326 audit(401.346:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 145.391266][ T29] audit: type=1326 audit(401.346:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 145.443797][ T29] audit: type=1326 audit(401.406:3693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 145.466902][ T29] audit: type=1326 audit(401.406:3694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 145.489877][ T29] audit: type=1326 audit(401.406:3695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 145.512890][ T29] audit: type=1326 audit(401.406:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11780 comm="syz.5.2440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 145.635548][T11791] loop9: detected capacity change from 0 to 764 [ 145.643340][T11791] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 145.684869][T11800] ip6t_srh: unknown srh match flags 4000 [ 145.730704][T11800] loop9: detected capacity change from 0 to 8192 [ 145.808057][T11800] loop9: p1 p2 p3 p4 [ 145.812338][T11800] loop9: p1 size 196608 extends beyond EOD, truncated [ 145.824883][T11800] loop9: p2 start 164919041 is beyond EOD, truncated [ 145.831888][T11800] loop9: p3 size 66846464 extends beyond EOD, truncated [ 145.880336][T11800] loop9: p4 size 37048832 extends beyond EOD, truncated [ 146.961703][T11829] netlink: 'syz.7.2452': attribute type 4 has an invalid length. [ 147.008759][T11834] bridge0: entered promiscuous mode [ 147.014148][T11834] macsec1: entered promiscuous mode [ 147.035082][T11834] bridge0: port 1(macsec1) entered blocking state [ 147.041666][T11834] bridge0: port 1(macsec1) entered disabled state [ 147.069210][T11834] macsec1: entered allmulticast mode [ 147.074551][T11834] bridge0: entered allmulticast mode [ 147.083512][T11834] macsec1: left allmulticast mode [ 147.088615][T11834] bridge0: left allmulticast mode [ 147.095912][T11834] bridge0: left promiscuous mode [ 147.107230][T11840] loop9: detected capacity change from 0 to 512 [ 147.121026][T11832] loop0: detected capacity change from 0 to 8192 [ 147.142534][T11840] EXT4-fs: Ignoring removed i_version option [ 147.148727][T11840] EXT4-fs: Ignoring removed bh option [ 147.165617][T11840] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.305195][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.329574][T11858] lo speed is unknown, defaulting to 1000 [ 148.290610][T11892] netlink: 'syz.9.2462': attribute type 13 has an invalid length. [ 148.590790][T11890] loop0: detected capacity change from 0 to 2048 [ 148.974708][T11892] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.981957][T11892] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.030297][T11890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.047091][T11903] loop8: detected capacity change from 0 to 1024 [ 149.074039][T11903] EXT4-fs: Ignoring removed bh option [ 149.127696][T11903] EXT4-fs: inline encryption not supported [ 149.199391][T11903] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.233207][T11909] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2461: bg 0: block 345: padding at end of block bitmap is not set [ 149.296060][T11909] EXT4-fs (loop0): Remounting filesystem read-only [ 149.309852][T11903] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 149.331990][ T5465] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 149.334192][T11903] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.2465: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.374232][T11903] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2465: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.393330][T11903] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2465: Failed to acquire dquot type 0 [ 149.405151][T11903] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 149.415364][T11903] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2465: mark_inode_dirty error [ 149.415997][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.427004][T11903] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 149.450073][T11903] EXT4-fs (loop8): 1 orphan inode deleted [ 149.456174][T11903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.470089][ T5518] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.484525][ T5558] lo speed is unknown, defaulting to 1000 [ 149.490552][ T5558] syz0: Port: 1 Link DOWN [ 149.503906][T11901] lo speed is unknown, defaulting to 1000 [ 149.613306][ T5518] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:59: Failed to release dquot type 0 [ 149.655386][ T5505] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.664437][ T5505] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.664841][T11903] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2465: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.680989][ T5505] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.696766][ T5505] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.832697][T11903] __quota_error: 201 callbacks suppressed [ 149.832719][T11903] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=-117 [ 149.887693][ T29] audit: type=1400 audit(405.856:3895): avc: denied { append } for pid=11948 comm="syz.5.2471" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 149.993636][T11951] SELinux: security_context_str_to_sid () failed with errno=-22 [ 150.104915][ T5505] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.113945][ T5505] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.122963][ T5505] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.131912][ T5505] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.153383][T11919] loop0: detected capacity change from 0 to 2048 [ 150.166854][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.177816][T11919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.225157][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.243363][T11960] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2473'. [ 150.252886][T11960] 0{X: renamed from gretap0 [ 150.259956][T11960] 0{X: left promiscuous mode [ 150.265871][T11960] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 150.290048][T11960] SELinux: policydb version 0 does not match my version range 15-35 [ 150.299013][T11960] SELinux: failed to load policy [ 150.467959][ T29] audit: type=1326 audit(406.426:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 150.490961][ T29] audit: type=1326 audit(406.426:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 150.514085][ T29] audit: type=1326 audit(406.426:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 150.537030][ T29] audit: type=1326 audit(406.426:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 150.559953][ T29] audit: type=1400 audit(406.426:3900): avc: denied { setattr } for pid=11965 comm="syz.0.2474" name="secretmem" dev="secretmem" ino=30310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 150.573939][T11978] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2478'. [ 150.582739][ T29] audit: type=1326 audit(406.426:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 150.614725][ T29] audit: type=1326 audit(406.426:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11965 comm="syz.0.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 150.637980][ T29] audit: type=1400 audit(406.436:3903): avc: denied { execute_no_trans } for pid=11973 comm="syz.9.2477" path="/44/file0" dev="tmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.664548][T11978] hsr_slave_0: left promiscuous mode [ 150.670736][T11978] hsr_slave_1: left promiscuous mode [ 150.840586][T11972] lo speed is unknown, defaulting to 1000 [ 150.929208][T12020] lo speed is unknown, defaulting to 1000 [ 151.196989][T12062] blktrace: Concurrent blktraces are not allowed on sg0 [ 151.442895][T12067] netlink: 'syz.8.2487': attribute type 4 has an invalid length. [ 151.451043][T12067] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2487'. [ 151.460908][T12067] .`: renamed from bond0 [ 151.676663][T12084] netlink: 'syz.9.2493': attribute type 13 has an invalid length. [ 151.729593][T12089] loop9: detected capacity change from 0 to 512 [ 151.736504][T12089] EXT4-fs: Ignoring removed i_version option [ 151.742903][T12089] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 151.762236][T12089] EXT4-fs (loop9): 1 truncate cleaned up [ 151.778894][T12089] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.845160][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.999768][T12105] loop9: detected capacity change from 0 to 2048 [ 152.030611][T12105] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.088951][T12091] 8021q: VLANs not supported on lo [ 152.134950][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.143705][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.220253][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2496'. [ 152.359730][T12113] netlink: 'syz.8.2497': attribute type 13 has an invalid length. [ 152.510324][T12119] 9p: Unknown access argument : -22 [ 152.573875][T12122] loop8: detected capacity change from 0 to 128 [ 152.596409][T12122] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.625406][T12126] SELinux: failed to load policy [ 152.635262][T12122] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.659180][T12131] loop5: detected capacity change from 0 to 512 [ 152.662889][T12126] loop7: detected capacity change from 0 to 2048 [ 152.684875][ T5518] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.686060][T12131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.715253][T12126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.748961][ T3701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.763593][T12129] loop0: detected capacity change from 0 to 512 [ 152.775244][T12129] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 152.804042][ T4838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.838711][T12129] EXT4-fs (loop0): 1 truncate cleaned up [ 152.869397][T12129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.884713][T12154] lo speed is unknown, defaulting to 1000 [ 152.950062][ T5518] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:59: bg 0: block 345: padding at end of block bitmap is not set [ 152.995176][ T5518] EXT4-fs (loop9): Remounting filesystem read-only [ 153.045031][T12183] bridge_slave_0: left allmulticast mode [ 153.050959][T12183] bridge_slave_0: left promiscuous mode [ 153.056723][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.158762][T12183] bridge_slave_1: left allmulticast mode [ 153.164623][T12183] bridge_slave_1: left promiscuous mode [ 153.170356][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.188750][T12183] bond0: (slave bond_slave_0): Releasing backup interface [ 153.213654][T12183] bond0: (slave bond_slave_1): Releasing backup interface [ 153.249833][T12183] team0: Port device team_slave_0 removed [ 153.259432][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.269191][T12183] team0: Port device team_slave_1 removed [ 153.273129][T12186] ip6t_srh: unknown srh match flags 4000 [ 153.281480][T12183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.289667][T12183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.298080][T12183] batadv1: left allmulticast mode [ 153.303252][T12183] batadv1: left promiscuous mode [ 153.308509][T12183] bridge0: port 3(batadv1) entered disabled state [ 153.334311][T12186] loop8: detected capacity change from 0 to 8192 [ 153.342305][T12183] batadv2: left allmulticast mode [ 153.347450][T12183] batadv2: left promiscuous mode [ 153.352869][T12183] bridge0: port 4(batadv2) entered disabled state [ 153.362386][T12183] batadv3: left allmulticast mode [ 153.367557][T12183] batadv3: left promiscuous mode [ 153.372774][T12183] bridge0: port 5(batadv3) entered disabled state [ 153.391766][T12184] ip6gre1: entered promiscuous mode [ 153.397044][T12184] ip6gre1: entered allmulticast mode [ 153.408035][T12186] loop8: p1 p2 p3 p4 [ 153.412126][T12186] loop8: p1 size 196608 extends beyond EOD, truncated [ 153.433202][T12186] loop8: p2 start 164919041 is beyond EOD, truncated [ 153.440050][T12186] loop8: p3 size 66846464 extends beyond EOD, truncated [ 153.468286][T12186] loop8: p4 size 37048832 extends beyond EOD, truncated [ 153.503946][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.513484][T12204] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 153.520123][T12204] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 153.527761][T12204] vhci_hcd vhci_hcd.0: Device attached [ 153.768076][ T3482] usb 19-1: new low-speed USB device number 2 using vhci_hcd [ 153.943334][T12236] loop0: detected capacity change from 0 to 512 [ 154.049928][T12236] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.2518: error while reading EA inode 32 err=-116 [ 154.062634][T12236] EXT4-fs (loop0): Remounting filesystem read-only [ 154.069204][T12236] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 154.079658][T12236] EXT4-fs (loop0): 1 orphan inode deleted [ 154.086258][T12236] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.100737][T12236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.227794][T12205] vhci_hcd: connection reset by peer [ 154.258978][ T5498] vhci_hcd: stop threads [ 154.263286][ T5498] vhci_hcd: release socket [ 154.267797][ T5498] vhci_hcd: disconnect device [ 154.439236][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2523'. [ 154.462651][T12256] 9pnet_fd: Insufficient options for proto=fd [ 154.499674][T12258] ip6t_srh: unknown srh match flags 4000 [ 154.499944][T12260] netlink: 'syz.8.2527': attribute type 4 has an invalid length. [ 154.513532][T12260] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2527'. [ 154.544514][T12258] loop7: detected capacity change from 0 to 8192 [ 154.588107][T12258] loop7: p1 p2 p3 p4 [ 154.592241][T12258] loop7: p1 size 196608 extends beyond EOD, truncated [ 154.599717][T12265] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 154.611273][T12258] loop7: p2 start 164919041 is beyond EOD, truncated [ 154.618028][T12258] loop7: p3 size 66846464 extends beyond EOD, truncated [ 154.625906][T12258] loop7: p4 size 37048832 extends beyond EOD, truncated [ 154.736091][T12288] ALSA: seq fatal error: cannot create timer (-19) [ 155.405219][T12314] veth0_vlan: left promiscuous mode [ 155.493923][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 155.493943][ T29] audit: type=1400 audit(411.466:4175): avc: denied { ioctl } for pid=12317 comm="syz.0.2538" path="socket:[30689]" dev="sockfs" ino=30689 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.538264][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2538'. [ 155.580567][T12318] team0: Port device team_slave_1 removed [ 155.691004][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2541'. [ 155.702043][ T29] audit: type=1400 audit(411.666:4176): avc: denied { ioctl } for pid=12330 comm="syz.9.2541" path="socket:[30711]" dev="sockfs" ino=30711 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 155.740480][ T29] audit: type=1326 audit(411.706:4177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 155.763685][ T29] audit: type=1326 audit(411.706:4178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 155.767317][T12335] ip6t_srh: unknown srh match flags 4000 [ 155.824357][T12337] loop8: detected capacity change from 0 to 1024 [ 155.851137][T12337] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.868827][ T29] audit: type=1326 audit(411.736:4179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 155.891951][ T29] audit: type=1326 audit(411.736:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 155.915294][ T29] audit: type=1326 audit(411.736:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 155.938363][ T29] audit: type=1326 audit(411.736:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 155.961287][ T29] audit: type=1326 audit(411.736:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 155.975466][T12337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.984288][ T29] audit: type=1326 audit(411.736:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12334 comm="syz.5.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 156.030003][T12350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2546'. [ 156.056766][T12337] loop8: detected capacity change from 0 to 512 [ 156.069628][T12337] EXT4-fs (loop8): too many log groups per flexible block group [ 156.079308][T12337] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 156.086171][T12337] EXT4-fs (loop8): mount failed [ 156.201078][T12366] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 156.217848][T12366] vhci_hcd: invalid port number 96 [ 156.223009][T12366] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 156.338049][ T10] page_pool_release_retry() stalled pool shutdown: id 75, 1 inflight 60 sec [ 157.360551][T12393] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2555'. [ 157.369834][T12393] 0{X: renamed from gretap0 [ 157.376945][T12393] 0{X: entered allmulticast mode [ 157.383870][T12393] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 157.633854][T12400] loop9: detected capacity change from 0 to 2048 [ 157.641620][T12403] ip6t_srh: unknown srh match flags 4000 [ 157.659788][T12400] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.732225][T12403] loop0: detected capacity change from 0 to 8192 [ 157.773784][T12409] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2567: bg 0: block 345: padding at end of block bitmap is not set [ 157.812119][T12403] loop0: p1 p2 p3 p4 [ 157.816208][T12409] EXT4-fs (loop9): Remounting filesystem read-only [ 157.823137][ T5518] EXT4-fs warning (device loop9): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 157.828010][T12418] 0{X: left allmulticast mode [ 157.847941][T12403] loop0: p1 size 196608 extends beyond EOD, truncated [ 157.875383][T12403] loop0: p2 start 164919041 is beyond EOD, truncated [ 157.882205][T12403] loop0: p3 size 66846464 extends beyond EOD, truncated [ 157.931381][T12418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.938096][T12403] loop0: p4 size 37048832 extends beyond EOD, truncated [ 157.947157][T12418] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.965785][T12418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.042368][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.055658][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 158.065243][T12432] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 158.147351][T12440] loop0: detected capacity change from 0 to 4096 [ 158.157249][T12440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.306248][T12449] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2568'. [ 158.490471][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.531625][T12481] loop0: detected capacity change from 0 to 512 [ 158.539351][T12481] EXT4-fs: Ignoring removed i_version option [ 158.545468][T12481] EXT4-fs: Ignoring removed bh option [ 158.559579][T12481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.603821][T12490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.612691][T12490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.637185][T12495] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2575'. [ 158.646525][T12495] hsr_slave_0: left promiscuous mode [ 158.652456][T12495] hsr_slave_1: left promiscuous mode [ 158.675871][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.704290][T12503] loop0: detected capacity change from 0 to 1024 [ 158.712209][T12503] EXT4-fs: Ignoring removed oldalloc option [ 158.718436][T12503] EXT4-fs: Ignoring removed bh option [ 158.740874][T12503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.817957][ T3482] usb 19-1: enqueue for inactive port 0 [ 158.850346][ T3482] usb 19-1: enqueue for inactive port 0 [ 158.953370][T12503] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.2576: Allocating blocks 1-17 which overlap fs metadata [ 158.978327][ T3482] vhci_hcd: vhci_device speed not set [ 159.009297][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.089994][T12520] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2579'. [ 159.142427][T12517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12517 comm=+}[@ [ 159.212277][T12517] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=12517 comm=+}[@ [ 159.336164][T12528] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 159.405145][T12537] loop8: detected capacity change from 0 to 512 [ 159.405555][T12530] lo speed is unknown, defaulting to 1000 [ 159.433066][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2584'. [ 159.445166][T12533] loop0: detected capacity change from 0 to 512 [ 159.452590][T12537] EXT4-fs (loop8): filesystem is read-only [ 159.484811][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2584'. [ 159.499718][T12533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.656466][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.683471][T12592] tipc: New replicast peer: 255.255.255.255 [ 159.689700][T12592] tipc: Enabled bearer , priority 10 [ 159.812854][T12602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12602 comm=syz.7.2592 [ 160.493282][T12624] loop8: detected capacity change from 0 to 256 [ 160.530568][T12624] hub 9-0:1.0: USB hub found [ 160.561346][T12624] hub 9-0:1.0: 8 ports detected [ 160.807791][ T10] tipc: Node number set to 3358786219 [ 160.814271][T12621] lo speed is unknown, defaulting to 1000 [ 160.964394][T12658] __nla_validate_parse: 2 callbacks suppressed [ 160.964415][T12658] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2601'. [ 161.101525][T12696] loop8: detected capacity change from 0 to 128 [ 161.118742][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 161.118758][ T29] audit: type=1326 audit(417.096:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.148807][ T29] audit: type=1326 audit(417.126:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.211541][ T29] audit: type=1326 audit(417.186:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46b887f783 code=0x7ffc0000 [ 161.234649][ T29] audit: type=1326 audit(417.186:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46b887f783 code=0x7ffc0000 [ 161.257768][ T29] audit: type=1326 audit(417.186:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.280777][ T29] audit: type=1326 audit(417.186:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.305165][ T29] audit: type=1326 audit(417.276:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.328250][ T29] audit: type=1326 audit(417.276:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.351333][ T29] audit: type=1326 audit(417.276:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.374113][ T29] audit: type=1326 audit(417.276:4619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12695 comm="syz.8.2602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 161.429019][T12701] loop9: detected capacity change from 0 to 2048 [ 161.446286][T12701] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 161.523806][T12701] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 161.539331][T12701] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1930 with error 28 [ 161.551843][T12701] EXT4-fs (loop9): This should not happen!! Data will be lost [ 161.551843][T12701] [ 161.561698][T12701] EXT4-fs (loop9): Total free blocks count 0 [ 161.567863][T12701] EXT4-fs (loop9): Free/Dirty block details [ 161.574114][T12701] EXT4-fs (loop9): free_blocks=2415919104 [ 161.579924][T12701] EXT4-fs (loop9): dirty_blocks=1936 [ 161.585446][T12701] EXT4-fs (loop9): Block reservation details [ 161.591559][T12701] EXT4-fs (loop9): i_reserved_data_blocks=121 [ 161.602235][T12709] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 161.614095][T12709] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 161.663111][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 161.693933][T12714] tipc: New replicast peer: 255.255.255.255 [ 161.700204][T12714] tipc: Enabled bearer , priority 10 [ 161.722716][T12720] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2608'. [ 161.769907][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2609'. [ 161.802137][T12731] loop9: detected capacity change from 0 to 7 [ 161.808559][T12731] buffer_io_error: 10686 callbacks suppressed [ 161.808586][T12731] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.822689][T12731] Buffer I/O error on dev loop9, logical block 0, async page read [ 161.830630][T12731] loop9: unable to read partition table [ 161.836572][T12731] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.836572][T12731] ) failed (rc=-5) [ 161.873663][T12731] 9pnet_fd: Insufficient options for proto=fd [ 161.912515][T12741] loop0: detected capacity change from 0 to 512 [ 161.923386][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2612'. [ 161.953734][T12741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.993819][T12786] loop8: detected capacity change from 0 to 1024 [ 162.004616][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.015718][T12786] EXT4-fs: Ignoring removed nobh option [ 162.024305][T12786] EXT4-fs: Ignoring removed orlov option [ 162.030213][T12786] EXT4-fs: Ignoring removed i_version option [ 162.067705][T12786] journal_path: Non-blockdev passed as './file1' [ 162.074425][T12786] EXT4-fs: error: could not find journal device path [ 162.089013][T12797] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 162.098999][T12797] syzkaller0: entered promiscuous mode [ 162.104539][T12797] syzkaller0: entered allmulticast mode [ 162.111882][T12802] tipc: New replicast peer: 255.255.255.255 [ 162.118231][T12802] tipc: Enabled bearer , priority 10 [ 162.156343][T12786] delete_channel: no stack [ 162.160376][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2629'. [ 162.160963][T12786] delete_channel: no stack [ 162.169739][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2629'. [ 162.209895][T12820] loop0: detected capacity change from 0 to 128 [ 162.253539][T12786] loop8: detected capacity change from 0 to 1024 [ 162.260684][T12786] EXT4-fs: Ignoring removed orlov option [ 162.280001][T12830] bio_check_eod: 10689 callbacks suppressed [ 162.280021][T12830] syz.0.2621: attempt to access beyond end of device [ 162.280021][T12830] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 162.285083][T12786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.286204][T12830] syz.0.2621: attempt to access beyond end of device [ 162.286204][T12830] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 162.327521][T12830] syz.0.2621: attempt to access beyond end of device [ 162.327521][T12830] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 162.344294][T12830] syz.0.2621: attempt to access beyond end of device [ 162.344294][T12830] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 162.362067][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.378097][T12830] syz.0.2621: attempt to access beyond end of device [ 162.378097][T12830] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 162.400524][T12830] syz.0.2621: attempt to access beyond end of device [ 162.400524][T12830] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 162.414164][T12830] syz.0.2621: attempt to access beyond end of device [ 162.414164][T12830] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 162.438071][T12830] syz.0.2621: attempt to access beyond end of device [ 162.438071][T12830] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 162.457876][T12830] syz.0.2621: attempt to access beyond end of device [ 162.457876][T12830] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 162.477824][T12830] syz.0.2621: attempt to access beyond end of device [ 162.477824][T12830] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 162.636348][T12838] lo speed is unknown, defaulting to 1000 [ 162.921493][T12871] loop0: detected capacity change from 0 to 256 [ 162.928497][T12871] vfat: Bad value for 'check' [ 163.218346][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2631'. [ 163.238494][T12879] lo speed is unknown, defaulting to 1000 [ 163.256105][T12883] can0: slcan on ttyS3. [ 163.261617][T12881] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 164.702380][T12926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=12926 comm=syz.0.2638 [ 164.729033][T12882] can0 (unregistered): slcan off ttyS3. [ 164.748585][T12938] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2643'. [ 165.098960][T12957] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 165.107405][T12957] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 165.427374][ T5558] kernel read not supported for file /nvram (pid: 5558 comm: kworker/1:12) [ 165.461055][T12961] lo speed is unknown, defaulting to 1000 [ 166.156289][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 166.156304][ T29] audit: type=1400 audit(422.126:4853): avc: denied { setcheckreqprot } for pid=12993 comm="syz.0.2654" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 166.263407][ T29] audit: type=1326 audit(422.166:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12993 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 166.286364][ T29] audit: type=1326 audit(422.166:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12993 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 166.309461][ T29] audit: type=1326 audit(422.166:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12993 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 166.332435][ T29] audit: type=1326 audit(422.166:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12993 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 166.367756][T12992] loop8: detected capacity change from 0 to 8192 [ 166.406389][T12998] loop9: detected capacity change from 0 to 512 [ 166.472444][T12992] loop8: p1 < > p2 p4 < p5 > [ 166.477173][T12992] loop8: partition table partially beyond EOD, truncated [ 166.506228][T12992] loop8: p1 start 134217728 is beyond EOD, truncated [ 166.513106][T12992] loop8: p2 size 591360 extends beyond EOD, truncated [ 166.528748][T12992] loop8: p5 size 591360 extends beyond EOD, truncated [ 166.602716][ T29] audit: type=1326 audit(422.516:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12993 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 166.625813][ T29] audit: type=1326 audit(422.516:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12993 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42d508f749 code=0x7ffc0000 [ 166.649031][ T29] audit: type=1326 audit(422.556:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 166.671910][ T29] audit: type=1326 audit(422.556:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 166.694804][ T29] audit: type=1326 audit(422.556:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12986 comm="syz.5.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 166.892328][T13018] loop0: detected capacity change from 0 to 764 [ 166.932948][T13018] rock: directory entry would overflow storage [ 166.939357][T13018] rock: sig=0x4f50, size=4, remaining=3 [ 166.944976][T13018] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 167.037487][T13029] hub 2-0:1.0: USB hub found [ 167.042282][T13029] hub 2-0:1.0: 8 ports detected [ 167.130829][T13018] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.302604][T13018] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.484157][T13018] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.750842][T13018] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.891895][T13044] loop9: detected capacity change from 0 to 1024 [ 167.909963][ T5459] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.922194][T13044] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.931111][ T5521] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.954556][T13069] syzkaller0: entered promiscuous mode [ 167.960203][T13069] syzkaller0: entered allmulticast mode [ 167.968680][ T5521] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.984348][ T5509] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.012413][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.050035][T13087] lo speed is unknown, defaulting to 1000 [ 168.056645][T13087] lo speed is unknown, defaulting to 1000 [ 168.063149][T13087] lo speed is unknown, defaulting to 1000 [ 168.112125][T13087] infiniband sz1: set down [ 168.116825][T13087] infiniband sz1: added lo [ 168.121579][ T5566] lo speed is unknown, defaulting to 1000 [ 168.134956][T13087] RDS/IB: sz1: added [ 168.139135][T13087] smc: adding ib device sz1 with port count 1 [ 168.145585][T13087] smc: ib device sz1 port 1 has no pnetid [ 168.151824][ T5566] lo speed is unknown, defaulting to 1000 [ 168.157935][T13087] lo speed is unknown, defaulting to 1000 [ 168.197544][T13087] lo speed is unknown, defaulting to 1000 [ 168.234499][T13087] lo speed is unknown, defaulting to 1000 [ 168.269338][T13087] lo speed is unknown, defaulting to 1000 [ 168.304486][T13087] lo speed is unknown, defaulting to 1000 [ 168.338416][T13087] lo speed is unknown, defaulting to 1000 [ 168.372732][T13087] lo speed is unknown, defaulting to 1000 [ 168.442051][T13103] sctp: [Deprecated]: syz.7.2669 (pid 13103) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.442051][T13103] Use struct sctp_sack_info instead [ 168.479431][T13105] loop0: detected capacity change from 0 to 2048 [ 168.499449][T13105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 168.575994][T13105] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.591880][T13105] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1930 with error 28 [ 168.604548][T13105] EXT4-fs (loop0): This should not happen!! Data will be lost [ 168.604548][T13105] [ 168.614256][T13105] EXT4-fs (loop0): Total free blocks count 0 [ 168.620320][T13105] EXT4-fs (loop0): Free/Dirty block details [ 168.626318][T13105] EXT4-fs (loop0): free_blocks=2415919104 [ 168.632209][T13105] EXT4-fs (loop0): dirty_blocks=1936 [ 168.638099][T13105] EXT4-fs (loop0): Block reservation details [ 168.640343][T13119] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2674'. [ 168.644100][T13105] EXT4-fs (loop0): i_reserved_data_blocks=121 [ 168.667473][T13119] team0: Port device team_slave_1 removed [ 168.702024][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2676'. [ 168.771385][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 168.978072][T13129] loop8: detected capacity change from 0 to 1024 [ 168.994980][T13129] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.109113][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.230831][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2684'. [ 169.232455][T13168] loop8: detected capacity change from 0 to 1024 [ 169.241462][T13156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2684'. [ 169.247384][T13168] EXT4-fs: Ignoring removed bh option [ 169.247479][T13168] EXT4-fs: inline encryption not supported [ 169.248141][T13168] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.284999][T13168] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 169.294444][T13168] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.2688: lblock 2 mapped to illegal pblock 2 (length 1) [ 169.309263][T13168] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2688: lblock 0 mapped to illegal pblock 48 (length 1) [ 169.324379][T13168] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2688: Failed to acquire dquot type 0 [ 169.336599][T13168] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 169.346704][T13168] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2688: mark_inode_dirty error [ 169.361934][T13168] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 169.372430][T13168] EXT4-fs (loop8): 1 orphan inode deleted [ 169.378753][T13168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.391568][ T5459] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 169.412493][ T5459] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:9: Failed to release dquot type 0 [ 169.507538][T13178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.534289][T13178] lo speed is unknown, defaulting to 1000 [ 169.540566][T13178] lo speed is unknown, defaulting to 1000 [ 170.143885][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.164723][ T7569] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 170.197272][T13222] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2697'. [ 170.198027][ T7569] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 170.216015][ T7569] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 170.459131][T13232] ip6t_srh: unknown srh match flags 4000 [ 171.199819][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 171.199846][ T29] audit: type=1400 audit(427.176:5342): avc: denied { mounton } for pid=13237 comm="syz.9.2702" path="/proc/235/cgroup" dev="proc" ino=33198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 171.248562][T13242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2703'. [ 171.302869][T13244] loop9: detected capacity change from 0 to 1024 [ 171.342553][T13246] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2707'. [ 171.350336][T13244] EXT4-fs: Ignoring removed orlov option [ 171.354105][T13246] 0: reclassify loop, rule prio 0, protocol 800 [ 171.398776][T13244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.468302][ T29] audit: type=1400 audit(427.446:5343): avc: denied { mount } for pid=13247 comm="syz.0.2706" name="/" dev="configfs" ino=1141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 171.623308][ T29] audit: type=1400 audit(427.596:5344): avc: denied { block_suspend } for pid=13262 comm="syz.8.2709" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.778611][T13263] loop8: detected capacity change from 0 to 2048 [ 171.861909][T13263] Alternate GPT is invalid, using primary GPT. [ 171.868420][T13263] loop8: p2 p3 p7 [ 171.889898][ T29] audit: type=1400 audit(427.856:5345): avc: denied { remove_name } for pid=13243 comm="syz.9.2705" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.912176][ T29] audit: type=1400 audit(427.856:5346): avc: denied { rename } for pid=13243 comm="syz.9.2705" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.933999][ T29] audit: type=1400 audit(427.856:5347): avc: denied { unlink } for pid=13243 comm="syz.9.2705" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 171.993747][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.013756][ T29] audit: type=1400 audit(427.986:5348): avc: denied { create } for pid=13282 comm="syz.8.2711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 172.336860][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2713'. [ 172.354187][T13294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2712'. [ 172.363506][ T29] audit: type=1400 audit(428.316:5349): avc: denied { create } for pid=13291 comm="syz.0.2712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.382986][ T29] audit: type=1400 audit(428.326:5350): avc: denied { ioctl } for pid=13291 comm="syz.0.2712" path="socket:[33971]" dev="sockfs" ino=33971 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.600131][ T29] audit: type=1400 audit(428.416:5351): avc: denied { connect } for pid=13292 comm="syz.7.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 172.653014][T13299] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2714'. [ 173.077527][T13309] syzkaller0: entered promiscuous mode [ 173.083383][T13309] syzkaller0: entered allmulticast mode [ 173.092637][T13309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.100950][T13309] tipc: Enabled bearer , priority 0 [ 173.109400][T13309] tipc: Resetting bearer [ 173.115170][T13309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.148067][T13308] tipc: Resetting bearer [ 173.154592][T13308] tipc: Disabling bearer [ 173.582180][T13325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.608485][T13325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.638255][T13330] loop0: detected capacity change from 0 to 1024 [ 173.657774][T13330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.679537][T13330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.771718][T13330] netlink: '': attribute type 30 has an invalid length. [ 174.054978][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.097967][ T3654] Bluetooth: hci0: command 0x1003 tx timeout [ 174.104084][ T6907] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 174.165057][T13348] syz.9.2727: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 174.179682][T13348] CPU: 0 UID: 0 PID: 13348 Comm: syz.9.2727 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.179715][T13348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.179728][T13348] Call Trace: [ 174.179735][T13348] [ 174.179742][T13348] __dump_stack+0x1d/0x30 [ 174.179835][T13348] dump_stack_lvl+0xe8/0x140 [ 174.179856][T13348] dump_stack+0x15/0x1b [ 174.179876][T13348] warn_alloc+0x12b/0x1a0 [ 174.179930][T13348] ? __rcu_read_unlock+0x4f/0x70 [ 174.180023][T13348] __vmalloc_node_range_noprof+0x9d/0xed0 [ 174.180056][T13348] ? __futex_wait+0x1fa/0x260 [ 174.180078][T13348] ? __pfx_futex_wake_mark+0x10/0x10 [ 174.180108][T13348] ? __rcu_read_unlock+0x4f/0x70 [ 174.180144][T13348] ? avc_has_perm_noaudit+0x1b1/0x200 [ 174.180163][T13348] ? should_fail_ex+0x30/0x280 [ 174.180181][T13348] ? xskq_create+0x36/0xe0 [ 174.180206][T13348] vmalloc_user_noprof+0x7d/0xb0 [ 174.180238][T13348] ? xskq_create+0x80/0xe0 [ 174.180275][T13348] xskq_create+0x80/0xe0 [ 174.180299][T13348] xsk_init_queue+0x95/0xf0 [ 174.180332][T13348] xsk_setsockopt+0x3f5/0x640 [ 174.180355][T13348] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.180434][T13348] __sys_setsockopt+0x184/0x200 [ 174.180465][T13348] __x64_sys_setsockopt+0x64/0x80 [ 174.180498][T13348] x64_sys_call+0x20ec/0x3000 [ 174.180591][T13348] do_syscall_64+0xd2/0x200 [ 174.180633][T13348] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.180662][T13348] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.180693][T13348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.180735][T13348] RIP: 0033:0x7f86666af749 [ 174.180752][T13348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.180771][T13348] RSP: 002b:00007f8665117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.180793][T13348] RAX: ffffffffffffffda RBX: 00007f8666905fa0 RCX: 00007f86666af749 [ 174.180856][T13348] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 174.180884][T13348] RBP: 00007f8666733f91 R08: 0000000000000004 R09: 0000000000000000 [ 174.180942][T13348] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.180966][T13348] R13: 00007f8666906038 R14: 00007f8666905fa0 R15: 00007ffd1386dfe8 [ 174.180985][T13348] [ 174.180992][T13348] Mem-Info: [ 174.410696][T13348] active_anon:38249 inactive_anon:8 isolated_anon:0 [ 174.410696][T13348] active_file:25221 inactive_file:2328 isolated_file:0 [ 174.410696][T13348] unevictable:0 dirty:314 writeback:0 [ 174.410696][T13348] slab_reclaimable:3862 slab_unreclaimable:107774 [ 174.410696][T13348] mapped:29170 shmem:33563 pagetables:1702 [ 174.410696][T13348] sec_pagetables:0 bounce:0 [ 174.410696][T13348] kernel_misc_reclaimable:0 [ 174.410696][T13348] free:1619578 free_pcp:13950 free_cma:0 [ 174.446195][T13354] lo speed is unknown, defaulting to 1000 [ 174.456338][T13348] Node 0 active_anon:152996kB inactive_anon:32kB active_file:100884kB inactive_file:9312kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116680kB dirty:1256kB writeback:0kB shmem:134252kB kernel_stack:5408kB pagetables:6808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.456393][T13348] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.513979][T13354] lo speed is unknown, defaulting to 1000 [ 174.519608][T13348] lowmem_reserve[]: 0 2881 7859 7859 [ 174.530743][T13348] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 174.562260][T13348] lowmem_reserve[]: 0 0 4978 4978 [ 174.567349][T13348] Node 0 Normal free:3516328kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152996kB inactive_anon:32kB active_file:100884kB inactive_file:9312kB unevictable:0kB writepending:1372kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:52076kB local_pcp:31436kB free_cma:0kB [ 174.601104][T13348] lowmem_reserve[]: 0 0 0 0 [ 174.605667][T13348] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.618936][T13348] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 174.635270][T13348] Node 0 Normal: 892*4kB (UM) 581*8kB (UME) 459*16kB (UM) 395*32kB (UME) 155*64kB (UME) 38*128kB (UME) 53*256kB (UME) 85*512kB (UME) 52*1024kB (UME) 24*2048kB (UM) 809*4096kB (UM) = 3516136kB [ 174.654513][T13348] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 174.663989][T13348] 61122 total pagecache pages [ 174.668696][T13348] 13 pages in swap cache [ 174.672947][T13348] Free swap = 124944kB [ 174.677200][T13348] Total swap = 124996kB [ 174.681408][T13348] 2097051 pages RAM [ 174.685221][T13348] 0 pages HighMem/MovableOnly [ 174.689923][T13348] 81087 pages reserved [ 174.714770][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2729'. [ 174.933649][T13383] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2732'. [ 174.992382][T13383] netlink: 'syz.5.2732': attribute type 10 has an invalid length. [ 175.000277][T13383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2732'. [ 175.054254][T13383] veth1_vlan: left promiscuous mode [ 175.073718][T13383] batman_adv: batadv0: Adding interface: veth1_vlan [ 175.080913][T13383] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1536) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1568. [ 175.145317][T13383] batman_adv: batadv0: Interface activated: veth1_vlan [ 175.694209][T13411] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2735'. [ 175.757871][T13411] netlink: 9 bytes leftover after parsing attributes in process `syz.9.2735'. [ 175.825738][T13414] loop8: detected capacity change from 0 to 128 [ 175.870122][T13414] EXT4-fs error (device loop8): __ext4_fill_super:5512: inode #2: comm syz.8.2734: iget: checksum invalid [ 175.929307][T13414] EXT4-fs (loop8): get root inode failed [ 175.935145][T13414] EXT4-fs (loop8): mount failed [ 176.209278][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 176.209297][ T29] audit: type=1326 audit(432.186:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08a8e065e7 code=0x7ffc0000 [ 176.238535][ T29] audit: type=1326 audit(432.186:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08a8dab829 code=0x7ffc0000 [ 176.261533][ T29] audit: type=1326 audit(432.186:5573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 176.299177][ T29] audit: type=1326 audit(432.196:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08a8e065e7 code=0x7ffc0000 [ 176.306946][ T2978] IPVS: starting estimator thread 0... [ 176.322421][ T29] audit: type=1326 audit(432.196:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08a8dab829 code=0x7ffc0000 [ 176.350937][ T29] audit: type=1326 audit(432.196:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 176.374081][ T29] audit: type=1326 audit(432.206:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08a8e065e7 code=0x7ffc0000 [ 176.397138][ T29] audit: type=1326 audit(432.206:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f08a8dab829 code=0x7ffc0000 [ 176.417842][T13434] IPVS: using max 2736 ests per chain, 136800 per kthread [ 176.420547][ T29] audit: type=1326 audit(432.206:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.5.2738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f08a8e0f749 code=0x7ffc0000 [ 176.450491][ T29] audit: type=1400 audit(432.216:5580): avc: denied { read write } for pid=10149 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 176.627963][T13442] smc: net device bond0 erased user defined pnetid SYZ0 [ 176.760737][T13449] loop9: detected capacity change from 0 to 256 [ 176.767991][T13449] vfat: Bad value for 'check' [ 177.530429][T13456] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.111622][T13468] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2747'. [ 178.162126][T13469] netlink: 'syz.0.2749': attribute type 8 has an invalid length. [ 178.321231][T13473] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.416296][T13477] loop9: detected capacity change from 0 to 1024 [ 178.443191][T13477] ext3: Unknown parameter 'obj_type' [ 178.498202][T13477] blktrace: Concurrent blktraces are not allowed on loop18 [ 178.533206][T13487] bond1: entered allmulticast mode [ 178.607761][T13487] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.638607][T13522] netlink: '': attribute type 4 has an invalid length. [ 178.640165][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2752'. [ 178.657573][T13479] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 178.664942][T13479] batman_adv: batadv0: Removing interface: veth1_vlan [ 178.688786][T13475] loop8: detected capacity change from 0 to 512 [ 178.715640][T13529] loop0: detected capacity change from 0 to 512 [ 178.723711][T13475] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 178.755336][T13529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.819576][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.881768][T13541] lo speed is unknown, defaulting to 1000 [ 178.889492][T13475] EXT4-fs (loop8): 1 truncate cleaned up [ 178.892240][T13546] loop0: detected capacity change from 0 to 128 [ 178.911676][T13541] lo speed is unknown, defaulting to 1000 [ 178.923539][T13475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.980761][T13546] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2759'. [ 179.005542][T13546] netlink: zone id is out of range [ 179.010751][T13546] netlink: zone id is out of range [ 179.028434][T13546] netlink: zone id is out of range [ 179.033817][T13546] netlink: zone id is out of range [ 179.050484][T13546] netlink: zone id is out of range [ 179.058606][T13546] netlink: zone id is out of range [ 179.063775][T13546] netlink: zone id is out of range [ 179.079223][T13546] netlink: zone id is out of range [ 179.084459][T13546] netlink: zone id is out of range [ 179.089632][T13546] netlink: zone id is out of range [ 179.246736][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.650507][T13592] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.680022][T13592] lo speed is unknown, defaulting to 1000 [ 179.686328][T13592] lo speed is unknown, defaulting to 1000 [ 180.203375][T13621] lo speed is unknown, defaulting to 1000 [ 180.210151][T13621] lo speed is unknown, defaulting to 1000 [ 180.258389][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2766'. [ 180.502520][T13654] netlink: 'syz.0.2767': attribute type 13 has an invalid length. [ 180.534968][T13654] gretap0: refused to change device tx_queue_len [ 180.674450][T13663] loop8: detected capacity change from 0 to 512 [ 180.698435][T13663] EXT4-fs (loop8): orphan cleanup on readonly fs [ 180.715431][T13663] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.2773: bad orphan inode 13 [ 180.747332][T13663] ext4_test_bit(bit=12, block=18) = 1 [ 180.752983][T13663] is_bad_inode(inode)=0 [ 180.757287][T13663] NEXT_ORPHAN(inode)=2130706432 [ 180.762171][T13663] max_ino=32 [ 180.765374][T13663] i_nlink=1 [ 180.810393][T13663] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 180.858977][T13663] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 180.898116][T13663] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 180.931135][T13663] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.2773: iget: bad i_size value: 360287970189639690 [ 180.988638][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.218618][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 181.218639][ T29] audit: type=1326 audit(437.186:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.282877][T13680] loop8: detected capacity change from 0 to 128 [ 181.323691][T13680] EXT4-fs: Ignoring removed nobh option [ 181.341958][ T29] audit: type=1400 audit(437.226:5934): avc: denied { kexec_image_load } for pid=13676 comm="syz.8.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 181.361510][ T29] audit: type=1326 audit(437.226:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.384690][ T29] audit: type=1326 audit(437.226:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.407640][ T29] audit: type=1326 audit(437.236:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.430635][ T29] audit: type=1326 audit(437.236:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.453646][ T29] audit: type=1326 audit(437.236:5939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.477389][ T29] audit: type=1326 audit(437.236:5940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.500390][ T29] audit: type=1326 audit(437.236:5941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.523322][ T29] audit: type=1326 audit(437.236:5942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.8.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46b887f749 code=0x7ffc0000 [ 181.771211][T13680] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 181.998920][T13690] lo speed is unknown, defaulting to 1000 [ 182.008134][T13690] lo speed is unknown, defaulting to 1000 [ 182.520052][T13713] lo speed is unknown, defaulting to 1000 [ 182.548623][T13713] lo speed is unknown, defaulting to 1000 [ 182.815593][ T7569] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.889730][T13775] loop8: detected capacity change from 0 to 512 [ 183.981638][T13775] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 183.999236][T13775] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.2787: inode has both inline data and extents flags [ 184.013172][T13775] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2787: couldn't read orphan inode 15 (err -117) [ 184.028225][T13775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.948575][T13787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2791'. [ 185.041391][T13788] tipc: Enabling of bearer rejected, already enabled [ 185.178739][T13795] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.199027][T13797] netlink: '': attribute type 4 has an invalid length. [ 185.672140][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.821168][T13809] loop8: detected capacity change from 0 to 512 [ 185.863228][T13809] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.917637][ T7569] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.941795][T13826] loop8: detected capacity change from 0 to 128 [ 186.074079][T13831] lo speed is unknown, defaulting to 1000 [ 186.103220][T13831] lo speed is unknown, defaulting to 1000 [ 186.253772][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 186.253794][ T29] audit: type=1400 audit(442.206:6079): avc: denied { write } for pid=13825 comm="syz.8.2801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 186.441522][ T29] audit: type=1400 audit(442.326:6080): avc: denied { create } for pid=13852 comm="syz.5.2803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 186.739538][T13880] netlink: 'syz.5.2810': attribute type 29 has an invalid length. [ 186.747522][T13880] netlink: 'syz.5.2810': attribute type 3 has an invalid length. [ 186.755491][T13880] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2810'. [ 186.788210][T13880] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2810'. [ 186.877567][ T29] audit: type=1400 audit(442.836:6081): avc: denied { read write } for pid=13885 comm="syz.0.2813" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 186.901402][ T29] audit: type=1400 audit(442.836:6082): avc: denied { open } for pid=13885 comm="syz.0.2813" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 186.927250][ T5558] page_pool_release_retry() stalled pool shutdown: id 57, 50 inflight 120 sec [ 186.954638][ T29] audit: type=1400 audit(442.926:6083): avc: denied { lock } for pid=13882 comm="syz.7.2812" path="socket:[34504]" dev="sockfs" ino=34504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 187.019591][T13897] netlink: 'syz.8.2814': attribute type 8 has an invalid length. [ 187.030274][ T29] audit: type=1400 audit(443.006:6084): avc: denied { read write } for pid=13893 comm="syz.0.2816" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.072318][ T29] audit: type=1400 audit(443.006:6085): avc: denied { open } for pid=13893 comm="syz.0.2816" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 187.168280][T13907] netlink: 'syz.8.2818': attribute type 10 has an invalid length. [ 187.176241][T13907] dummy0: left promiscuous mode [ 187.181187][T13907] dummy0: left allmulticast mode [ 187.204387][ T29] audit: type=1400 audit(443.176:6086): avc: denied { ioctl } for pid=13908 comm="syz.0.2819" path="socket:[35230]" dev="sockfs" ino=35230 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.228934][ T29] audit: type=1400 audit(443.176:6087): avc: denied { ioctl } for pid=13908 comm="syz.0.2819" path="socket:[35229]" dev="sockfs" ino=35229 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.279093][T13907] lo speed is unknown, defaulting to 1000 [ 187.286178][T13907] lo speed is unknown, defaulting to 1000 [ 187.307781][ T29] audit: type=1400 audit(443.276:6088): avc: denied { name_bind } for pid=13913 comm="syz.5.2820" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 187.353966][T13918] sctp: [Deprecated]: syz.5.2821 (pid 13918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.353966][T13918] Use struct sctp_sack_info instead [ 187.627388][T13941] bridge3: entered promiscuous mode [ 187.633041][T13941] bridge3: entered allmulticast mode [ 187.690839][T13907] netlink: 'syz.8.2818': attribute type 10 has an invalid length. [ 187.701986][T13907] dummy0: entered promiscuous mode [ 187.715393][T13907] dummy0: entered allmulticast mode [ 187.727562][T13907] .`: (slave dummy0): Enslaving as an active interface with an up link [ 187.928791][T13950] loop8: detected capacity change from 0 to 164 [ 187.939016][T13950] iso9660: Unknown parameter 'checkAT-R' [ 188.111226][T13961] netlink: 'syz.0.2825': attribute type 13 has an invalid length. [ 188.360723][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.370709][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.377288][T13983] loop9: detected capacity change from 0 to 1024 [ 189.384785][T13983] EXT4-fs: Ignoring removed orlov option [ 189.392990][T13983] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.685477][T13993] lo speed is unknown, defaulting to 1000 [ 189.691495][T13993] lo speed is unknown, defaulting to 1000 [ 190.110810][T13989] ================================================================== [ 190.118946][T13989] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 190.126080][T13989] [ 190.128438][T13989] write to 0xffff888119d28f94 of 4 bytes by task 13983 on cpu 0: [ 190.136174][T13989] xas_set_mark+0x12b/0x140 [ 190.140800][T13989] __folio_start_writeback+0x155/0x390 [ 190.146306][T13989] ext4_bio_write_folio+0x5ad/0x9f0 [ 190.151569][T13989] mpage_process_page_bufs+0x4a1/0x620 [ 190.157150][T13989] mpage_prepare_extent_to_map+0x786/0xc00 [ 190.163027][T13989] ext4_do_writepages+0xa05/0x2750 [ 190.168262][T13989] ext4_writepages+0x176/0x300 [ 190.173085][T13989] do_writepages+0x1c6/0x310 [ 190.177803][T13989] file_write_and_wait_range+0x156/0x2c0 [ 190.183474][T13989] generic_buffers_fsync_noflush+0x45/0x120 [ 190.189398][T13989] ext4_sync_file+0x1ab/0x690 [ 190.194369][T13989] vfs_fsync_range+0x10d/0x130 [ 190.199252][T13989] ext4_buffered_write_iter+0x34f/0x3c0 [ 190.204816][T13989] ext4_file_write_iter+0x387/0xf60 [ 190.210096][T13989] iter_file_splice_write+0x666/0xa60 [ 190.215513][T13989] direct_splice_actor+0x156/0x2a0 [ 190.220650][T13989] splice_direct_to_actor+0x312/0x680 [ 190.226053][T13989] do_splice_direct+0xda/0x150 [ 190.230863][T13989] do_sendfile+0x380/0x650 [ 190.235346][T13989] __x64_sys_sendfile64+0x105/0x150 [ 190.240584][T13989] x64_sys_call+0x2bb4/0x3000 [ 190.245281][T13989] do_syscall_64+0xd2/0x200 [ 190.249816][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.255755][T13989] [ 190.258096][T13989] read to 0xffff888119d28f94 of 4 bytes by task 13989 on cpu 1: [ 190.266184][T13989] xas_find_marked+0x5dc/0x620 [ 190.270971][T13989] find_get_entry+0x5d/0x380 [ 190.275601][T13989] filemap_get_folios_tag+0x92/0x210 [ 190.280964][T13989] mpage_prepare_extent_to_map+0x320/0xc00 [ 190.287011][T13989] ext4_do_writepages+0xa05/0x2750 [ 190.292236][T13989] ext4_writepages+0x176/0x300 [ 190.297029][T13989] do_writepages+0x1c6/0x310 [ 190.301650][T13989] file_write_and_wait_range+0x156/0x2c0 [ 190.307312][T13989] generic_buffers_fsync_noflush+0x45/0x120 [ 190.313230][T13989] ext4_sync_file+0x1ab/0x690 [ 190.317930][T13989] vfs_fsync_range+0x10d/0x130 [ 190.322707][T13989] ext4_buffered_write_iter+0x34f/0x3c0 [ 190.328280][T13989] ext4_file_write_iter+0x387/0xf60 [ 190.333584][T13989] iter_file_splice_write+0x666/0xa60 [ 190.338979][T13989] direct_splice_actor+0x156/0x2a0 [ 190.344185][T13989] splice_direct_to_actor+0x312/0x680 [ 190.349597][T13989] do_splice_direct+0xda/0x150 [ 190.354400][T13989] do_sendfile+0x380/0x650 [ 190.359053][T13989] __x64_sys_sendfile64+0x105/0x150 [ 190.364588][T13989] x64_sys_call+0x2bb4/0x3000 [ 190.369388][T13989] do_syscall_64+0xd2/0x200 [ 190.374035][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.380070][T13989] [ 190.382500][T13989] value changed: 0x0a000021 -> 0x04000021 [ 190.388241][T13989] [ 190.390600][T13989] Reported by Kernel Concurrency Sanitizer on: [ 190.396767][T13989] CPU: 1 UID: 0 PID: 13989 Comm: syz.9.2831 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.406685][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.416902][T13989] ================================================================== [ 190.485932][T10149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.