last executing test programs: 4.196968996s ago: executing program 1 (id=498): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) dup(r0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_uring_setup(0x4896, &(0x7f0000000340)={0x0, 0xfcd3, 0x3, 0x2, 0xfffffffb}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r9}, &(0x7f0000000240), &(0x7f00000003c0)=r12}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) 4.134422316s ago: executing program 1 (id=499): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)={0x34, r1, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c61"], 0x3}}, 0x0) ioctl$VT_RELDISP(r6, 0x5605) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) splice(r4, 0x0, r6, 0x0, 0x4ffe2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00'}, 0x18) mlockall(0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 3.059892974s ago: executing program 1 (id=506): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x3eae, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/109, 0x6d, 0x0, &(0x7f0000001640)=""/4096, 0x1000}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x18, 0x1401, 0x1, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x845}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYRESDEC=r5, @ANYRESHEX=r1, @ANYRESOCT=r0], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="37acf8b926f1ace4fbec50488712f953e6529e47e0c47c989da22887da67d96cbe9fa3f6c165f1ed8fe015d2dfd2c0d062ebe521871f69111469128cf747599913f2a2e0fd0eab5db317dae07bd0c96446f48e69ce1f76cc2186b30f5b4d2e89030f797de7b5570db850c52c03c9f45970cea7d3e180f2df67e399e4a014080449e23640749bc5ca200cd56e543379"], 0x50) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r6, r6, 0x2) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000040)='\b', 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmmsg(r7, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000240)="10", 0x34000}], 0x1}}], 0x1, 0x4008040) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 3.010012644s ago: executing program 1 (id=507): r0 = socket$igmp6(0xa, 0x3, 0x2) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x1100, 0x5dd8, 0x3, 0x5, 0xfffffffffffffffc, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)='5', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f00)=']', 0x1}], 0x1}}], 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1, &(0x7f0000000740)=""/222, 0xde}, 0xd0}], 0x1, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021300011800b0001"], 0xb4}}, 0x20040804) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100"], 0x18}}, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x6c8, 0xf0, 0x508, 0xffffffff, 0xf0, 0x298, 0x5f8, 0x5f8, 0xffffffff, 0x5f8, 0x5f8, 0x5, &(0x7f0000000080), {[{{@ipv6={@private2, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff000000, 0xabf9f14e0f96734, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], 'bridge_slave_1\x00', 'pim6reg0\x00', {0xff}, {}, 0x2b, 0x3, 0x4, 0xa}, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv4=@empty, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @port=0x4e23, @gre_key=0x8}}}, {{@ipv6={@local, @loopback, [0x0, 0xffffffff, 0xff000000], [0xff000000, 0xff000000, 0xff000000, 0xffffffff], 'pimreg1\x00', 'rose0\x00', {0xff}, {0xff}, 0x2b, 0xfc, 0x6, 0x3}, 0x0, 0x160, 0x1a8, 0x0, {}, [@common=@icmp6={{0x28}, {0x8, "9f23"}}, @common=@srh1={{0x90}, {0x2e, 0xf, 0x7, 0x4, 0x4, @mcast2, @mcast2, @private1, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0xff000000, 0xff000000, 0xff, 0xffffffff], 0x1000, 0x2092}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xd, @ipv6=@private2, @ipv4=@empty, @icmp_id=0x68, @icmp_id=0x66}}}, {{@ipv6={@private1, @private0, [0xff, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xff000000], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0xc, 0x2, 0x4, 0xd14f65ad4f327211}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x3], 0x8, 0x4}}, @common=@inet=@hashlimit2={{0x150}, {'bridge_slave_0\x00', {0x4, 0x2, 0x40, 0x8, 0xca, 0x1, 0x42, 0x78, 0x8}, {0x2}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x1e, @ipv4=@rand_addr=0x64010100, @ipv4=@local, @port=0x4e23, @gre_key=0x8000}}}, {{@ipv6={@local, @loopback, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xff], 'veth0\x00', 'dvmrp0\x00', {}, {0xff}, 0x0, 0x4, 0x0, 0x41}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@private0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @gre_key=0x9, @gre_key=0x400}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x728) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r7 = memfd_secret(0x0) syz_io_uring_setup(0x8, &(0x7f0000000540)={0x0, 0x1721, 0x200c, 0x2, 0x3a7, 0x0, r7}, &(0x7f00000004c0), &(0x7f00000005c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x4, 0x81, 0x0, 0x9, 0x0, 0x70bd28, 0x25dfdbff, [@sadb_key={0x6, 0x8, 0x128, 0x0, "26c2dbb4380583c34965ede97a7fb2c8ef6c29ca3eb494c31def93c10ecd06d27d0adf269d"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}]}, 0x48}}, 0x0) 2.742985934s ago: executing program 3 (id=510): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = syz_open_dev$sg(0x0, 0x80, 0x10000) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) r5 = eventfd2(0x0, 0x80801) io_submit(r4, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r5, &(0x7f0000000180)="d1e8624a6b0e53c3", 0x8}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x6, r5, 0x0, 0x0, 0xffffffffffffff03, 0x0, 0x1, r5}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)='system_u:object_r:dhcp_state_t:s0\x00', 0xffffffffffffffbf, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) syz_open_procfs(0x0, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) setns(r10, 0x66020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) write$rfkill(r7, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1, 0x1}, 0x8) 2.610974974s ago: executing program 3 (id=511): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b0000000000000000001801000020"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000ec0), 0x22) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004084) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)='{', 0x1}], 0x1}, 0x4008094) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000350001fffd0000000000000003"], 0x28}}, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x83e00, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='9p_client_req\x00', r3, 0x0, 0xfffffffffffffffd}, 0xfe85) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0x2}, 0x18) setrlimit(0xf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd70000000000001000000080007000000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="68e52a50", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf25040000000c001000040000000000000005000d000100000005002200010000001400200000000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000181e000079b590e5ced6eb58b4057137a85376eba415d62ed89366c9f96e4225a70036b488fb38b8eea809880521e022846850473a5b881579caee27f17187824cbda9249606253cb33c115dfa6f9ceb1f358ec7dd2a3c085f071a8b965225c963f6df4863837b8d25908fd83e18fb115592e6774c93e3c7e4a77e916d15ea2662f8665b7405a4e78fe562d94e18ce318d2776dc884f5fa2ec3a5f415f76eaf21bb2097157bf2b2eaaba790bd57402a69b8a2b95990cb1dd", @ANYBLOB="66953b564e24af7afd98a4c561eda0517befddb3e063a2401897f27d57b6c501857a8c14c441fcfcd6b26e46180b50731e6966fe1bd63e43e84ba10c92c409452af6be507164d7c5575eef2ddb520cf2b57f009b4eb82dec22f4d57b23345b8ddea7d114051529ad97168f7ed9f7158ec1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setitimer(0x2, 0x0, 0x0) 2.510464193s ago: executing program 3 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020600) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r4, 0x6}, 0x8) lchown(&(0x7f0000000400)='./file0/bus\x00', 0xee00, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x8001) sendfile(r5, r6, 0x0, 0x1000000000008) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="001000fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r9}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 2.108952573s ago: executing program 1 (id=515): msgctl$IPC_STAT(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="0000000000000700000014000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) fallocate(r0, 0x0, 0x400000000000000, 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x5, 0xff, 0x4460, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0xffffffff, 0x200009, 0x1, 0x6, 0x0, "ada957589145432df700edfdff0500"}) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x50007a2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x0, 0x0, 0x4, 0xf, 0x1}) msgsnd(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r2], 0x0, 0x0) 2.070839433s ago: executing program 2 (id=516): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000007dac"], 0x48) fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000001000"/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001811000057aeb545f16d7ef24e90d10dddc0db24f7c2fa5632489edeb0d9c27819ae971eef0faa030540415ed4", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000180000000000000b3d70000180100002020782500000000bbba864b7b5af8ff00000000bfa100000000000007010300004a0000008500000006000000181a00"/84, @ANYRES32=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0xfff, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_getoverrun(r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r9}, 0x10) cachestat(r9, &(0x7f0000000040)={0x2, 0x80}, &(0x7f0000000080), 0x0) 1.584107213s ago: executing program 0 (id=519): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd3, 0x3, 0x0, 0x245}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0xf, 0x4, 0x6f93cf79, 0x6, 0x599, 0x9, 0x401}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8205, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x992}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}, {@jqfmt_vfsv0}]}, 0x1, 0x618, &(0x7f0000000640)="$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") 1.550514072s ago: executing program 0 (id=520): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa6134ee22d70000fe08060001080006040001aaaaaaaaaa30ac1414bbaaaaaaaaaa00ac1414bb"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) fcntl$setstatus(r0, 0x4, 0xc6400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d00000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000007d00000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000080000000800000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000900000000000000000000001f020000000000000000000000008740045f2780678508756377e52582f58ad69f53468c627a818716f896120800000079b3e8fdc8d1e0f0000000edc10c77be93abd3"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setxattr$security_selinux(&(0x7f0000000040)='./cgroup/pids.max\x00', &(0x7f0000000440), &(0x7f0000000140)='system_u:object_r:hald_log_t:s0\x00', 0x20, 0x1) recvmsg(r4, &(0x7f0000000940)={&(0x7f0000000500)=@can, 0x80, &(0x7f0000000880)=[{&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/168, 0xa8}, {&(0x7f00000006c0)=""/7, 0x7}, {&(0x7f0000000700)=""/153, 0x99}, {&(0x7f00000007c0)=""/185, 0xb9}], 0x6, &(0x7f0000000900)=""/9, 0x9}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91101e000000800095480a1f4b67b8b54d6bbfb4eab2382a110b62e6440c2deffcb823936fa0871af9e48c6e58c0c408c1f6205635197a72a306ccd89c17d8677a076c090d97640c133964867c30658d7c1ec4b9fc86b77f56bd81b52512e627fc4874eba1c7d3efa2ee512ae5ba566af2bb99da5d21f5995598a95fba1b39c4b23ad1d6f0172f54529ecd1ebb49a5e9dadfde777650c1799d730a51281584d682bc6a2c9ce0474fce349c5dc7bc573924ebf643a8c107"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.525312032s ago: executing program 0 (id=521): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x2, 0x0, @remote, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x1b, 0x5b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x1, [{@remote, 0x8}, {@loopback, 0x2c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}]}, @ra={0x94, 0x4}, @generic={0x0, 0xa, "83dc61b1ce570743"}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x7, "82ee46f3c3"}, {0x0, 0xa, "5056f7e467350191"}]}]}}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21081e, &(0x7f0000000880)={[], [{@measure}, {@seclabel}, {@dont_hash}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}]}, 0xfd, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) sendmmsg$unix(r4, &(0x7f0000000240)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x12, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) 1.370068412s ago: executing program 3 (id=512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) unshare(0x22020600) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r4, 0x6}, 0x8) lchown(&(0x7f0000000400)='./file0/bus\x00', 0xee00, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r6, 0x0, 0x0, 0x8001) sendfile(r5, r6, 0x0, 0x1000000000008) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="001000fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r9}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1.255570582s ago: executing program 1 (id=522): syz_usb_connect(0x5, 0x0, &(0x7f0000000200)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) 1.254636482s ago: executing program 3 (id=523): mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x40024, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) 1.251276102s ago: executing program 0 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b0000000000000000001801000020"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000ec0), 0x22) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004084) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)='{', 0x1}], 0x1}, 0x4008094) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000350001fffd0000000000000003"], 0x28}}, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x83e00, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='9p_client_req\x00', r3, 0x0, 0xfffffffffffffffd}, 0xfe85) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sys_enter\x00', r5, 0x0, 0x2}, 0x18) setrlimit(0xf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032bbd70000000000001000000080007000000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="68e52a50", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf25040000000c001000040000000000000005000d000100000005002200010000001400200000000000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000181e000079b590e5ced6eb58b4057137a85376eba415d62ed89366c9f96e4225a70036b488fb38b8eea809880521e022846850473a5b881579caee27f17187824cbda9249606253cb33c115dfa6f9ceb1f358ec7dd2a3c085f071a8b965225c963f6df4863837b8d25908fd83e18fb115592e6774c93e3c7e4a77e916d15ea2662f8665b7405a4e78fe562d94e18ce318d2776dc884f5fa2ec3a5f415f76eaf21bb2097157bf2b2eaaba790bd57402a69b8a2b95990cb1dd", @ANYBLOB="66953b564e24af7afd98a4c561eda0517befddb3e063a2401897f27d57b6c501857a8c14c441fcfcd6b26e46180b50731e6966fe1bd63e43e84ba10c92c409452af6be507164d7c5575eef2ddb520cf2b57f009b4eb82dec22f4d57b23345b8ddea7d114051529ad97168f7ed9f7158ec1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setitimer(0x2, 0x0, 0x0) 1.219394872s ago: executing program 2 (id=525): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES8=r0], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x40010) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative'}}}]}) write$binfmt_aout(r3, &(0x7f00000003c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r4, 0xa, 0x13) fcntl$setlease(r4, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) rt_sigsuspend(&(0x7f0000000300)={[0x7]}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r5, &(0x7f0000004740)='\x00', &(0x7f0000000840)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) sendto$inet(r5, &(0x7f0000001cc0)="68511470eaffdec0c848c4212d5829097618d1e67569c4a77a8b20da2461858a52019e2339ddc39b03ac0169db054ea7ed947f9706f16f1008ceb2d2fb8dadb82749d10983b9885db4b1802bdc1f379f3d2fc6e1ff2ebba5cc489aa906fc0a24a80bf7b4627fb1b224c42c23d746d03897685cb0211953bcfd6e593f75dc53d1f61e2181bf87c2d0821432e7adcf2b6ba13b5f7a49761943bc5892e018b0bd22a822a73867d0439e1aaf99f7a68510199339b6d0205338caec5256aa8507047688b4acc3ec9741074c1482", 0xcb, 0x40000, &(0x7f0000000780)={0x2, 0x4e23, @multicast1}, 0x10) truncate(&(0x7f0000000040)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000740)='./file0\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 726.277061ms ago: executing program 4 (id=528): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='!', 0x1}], 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) lremovexattr(0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r8, 0xffffffffffffffff, 0x0) 607.071831ms ago: executing program 4 (id=529): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd3, 0x3, 0x0, 0x245}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0xf, 0x4, 0x6f93cf79, 0x6, 0x599, 0x9, 0x401}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8205, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x992}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}, {@jqfmt_vfsv0}]}, 0x1, 0x618, &(0x7f0000000640)="$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") 555.163081ms ago: executing program 4 (id=530): r0 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 508.11262ms ago: executing program 4 (id=531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd3, 0x3, 0x0, 0x245}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0xf, 0x4, 0x6f93cf79, 0x6, 0x599, 0x9, 0x401}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8205, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x992}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}, {@jqfmt_vfsv0}]}, 0x1, 0x618, &(0x7f0000000640)="$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") 482.813791ms ago: executing program 4 (id=532): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x8}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f00000000c0)=0xfff) syz_emit_ethernet(0x9a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x65, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x2, 0x0, @remote, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x13}, {[@lsrr={0x83, 0x1b, 0x5b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local, @dev={0xac, 0x14, 0x14, 0x25}, @loopback]}, @timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x1, [{@remote, 0x8}, {@loopback, 0x2c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}]}, @ra={0x94, 0x4}, @generic={0x0, 0xa, "83dc61b1ce570743"}, @cipso={0x86, 0x17, 0x0, [{0x0, 0x7, "82ee46f3c3"}, {0x0, 0xa, "5056f7e467350191"}]}]}}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000031c0), 0x12) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21081e, &(0x7f0000000880)={[], [{@measure}, {@seclabel}, {@dont_hash}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@appraise_type}]}, 0xfd, 0x4fa, &(0x7f0000000ac0)="$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") socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r5) sendmmsg$unix(r4, &(0x7f0000000240)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x12, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x48}}, 0x0) 353.167751ms ago: executing program 3 (id=533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x800, 0x3ff) preadv(r5, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000000)=""/124, 0x7c}, {&(0x7f0000000180)=""/121, 0x79}, {&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f00000005c0)=""/115, 0x73}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/152, 0x98}], 0x9, 0x5, 0xc) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f00000008c0)="7be236cb86e1bbdc46d4b11d8af1b5663e64d6ebcbb50c254c7c8f39b9405d4b0031b25590db5969d734b4424c44e2559003bc85a4ec17c20dce5840c5efb0ce6bb3a9fb2f763e716689212e7a47b346b565edd614fac8ead42f279e242a3a2ebfe5bf2b863a087644a25acd96f05ff31a3285592cc6f372a3d00533f93026356448af98fbf16f1f59e66234555a7ac30f314881", 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x42, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5d2}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5, 0x100}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 351.87953ms ago: executing program 4 (id=534): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000010000000900000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc2e70880, &(0x7f0000000380)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@resgid={'resgid', 0x3d, 0xee00}}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x40000003}}, {@journal_async_commit}, {}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") syz_usb_connect(0x3, 0x24, &(0x7f0000000ec0)={{0x12, 0x1, 0x200, 0xa7, 0xe1, 0x5b, 0x8, 0x9c0, 0x203, 0x9b50, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x81, 0x28, 0x6, [{{0x9, 0x4, 0xa5, 0x4, 0x0, 0x93, 0x1b, 0x6a, 0x2, [@uac_as]}}]}}]}}, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) r5 = creat(&(0x7f0000000080)='./file0\x00', 0x7) cachestat(r5, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, &(0x7f0000002640), 0x0) r6 = accept$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'pimreg\x00'}) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc0080, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) membarrier(0x1, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0209"], 0x10}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180600000000000000000000000000001830000000000000000000000000000895"], &(0x7f0000000000)='GPL\x00', 0x3, 0x8a, &(0x7f0000000100)=""/138, 0x41000, 0x45, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 345.7895ms ago: executing program 2 (id=535): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000100)={0x11, 0x4}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xf7) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fddbdf256a00000008000300", @ANYRES32=r7, @ANYBLOB="0c009500706e3d455600008d48a7d7bcb61d970000010000"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000340), 0x3, 0x2000c0) ioctl$SG_GET_KEEP_ORPHAN(r9, 0x2288, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'dummy0\x00'}) sendmsg$nl_route_sched(r8, 0x0, 0x0) mkdirat(r4, 0x0, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r4, &(0x7f0000000400)='./file0/file0\x00', 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 341.69757ms ago: executing program 0 (id=536): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) close(r1) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000), 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000001540)=""/4086, 0xff6}, {&(0x7f0000001300)=""/235, 0xeb}, {&(0x7f0000000300)=""/171, 0xab}], 0x3) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001400)={{0x1, 0x1, 0x18, r2, {0x401, 0x6}}, './file0\x00'}) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) setns(0xffffffffffffffff, 0x80) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x2c040000) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) 214.49721ms ago: executing program 0 (id=537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'wg1\x00', 0x40001}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r6}, 0x10) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x40}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") socketpair(0x1f, 0x1, 0x2, &(0x7f0000000280)) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r8}, 0x18) getcwd(&(0x7f0000000040)=""/152, 0x98) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) pwritev2(r7, 0x0, 0x0, 0x1200, 0x0, 0x3) 48.52958ms ago: executing program 2 (id=538): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) 32.12551ms ago: executing program 2 (id=539): r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000400)='!', 0x1}], 0x3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) lremovexattr(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(r7, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r0}, 0x10) r1 = io_uring_setup(0x4896, &(0x7f00000004c0)={0x0, 0xbcd3, 0x3, 0x0, 0x245}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='kmem_cache_free\x00', r7}, 0x18) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) getrlimit(0xe, &(0x7f0000000280)) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000240)=@req3={0xf, 0x4, 0x6f93cf79, 0x6, 0x599, 0x9, 0x401}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8205, &(0x7f0000000300)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x992}}, {@data_err_abort}, {@minixdf}, {@errors_remount}, {@abort}, {@noblock_validity}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}, {@jqfmt_vfsv0}]}, 0x1, 0x618, &(0x7f0000000640)="$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") kernel console output (not intermixed with test programs): eth1_vlan: entered promiscuous mode [ 30.567328][ T3298] veth1_vlan: entered promiscuous mode [ 30.576266][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.587354][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.598039][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.608618][ T3297] veth0_macvtap: entered promiscuous mode [ 30.616013][ T3297] veth1_macvtap: entered promiscuous mode [ 30.630734][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.641224][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.651114][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.661568][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.672270][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.681527][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.690312][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.699200][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.708304][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.722309][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.732936][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.742843][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.753306][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.764413][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.780085][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.789066][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.797794][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.806678][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.817107][ T3307] veth0_macvtap: entered promiscuous mode [ 30.824280][ T3307] veth1_macvtap: entered promiscuous mode [ 30.847431][ T3298] veth0_macvtap: entered promiscuous mode [ 30.865939][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.876713][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.886673][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.897126][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.906980][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.917439][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.920984][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.929181][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.952643][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.963232][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.973222][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.983665][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.993630][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.004239][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.014822][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.026645][ T3298] veth1_macvtap: entered promiscuous mode [ 31.044152][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.054741][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.064612][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.075194][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.085048][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.095494][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.105459][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.116015][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.127973][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.151807][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.162400][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.172312][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.183050][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.192975][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.196137][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 31.196150][ T29] audit: type=1326 audit(1737242363.285:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.203476][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.229485][ T3445] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.232737][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.247270][ T29] audit: type=1326 audit(1737242363.325:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.254266][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.264711][ T29] audit: type=1326 audit(1737242363.325:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.298618][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.321169][ T29] audit: type=1400 audit(1737242363.325:197): avc: denied { create } for pid=3444 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.329739][ T3307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.356706][ T3307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.365399][ T3307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.374130][ T3307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.394776][ T29] audit: type=1326 audit(1737242363.385:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.417973][ T29] audit: type=1326 audit(1737242363.385:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.441103][ T29] audit: type=1326 audit(1737242363.385:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.464186][ T29] audit: type=1326 audit(1737242363.385:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fec77705d63 code=0x7ffc0000 [ 31.466073][ T3446] ebt_among: src integrity fail: 100 [ 31.487082][ T29] audit: type=1326 audit(1737242363.385:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.515508][ T29] audit: type=1326 audit(1737242363.385:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 31.577460][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.586278][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.595143][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.603866][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.684486][ T3450] loop1: detected capacity change from 0 to 512 [ 31.691297][ T3450] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 31.974900][ T3456] batman_adv: batadv0: Adding interface: dummy0 [ 31.981317][ T3456] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.027052][ T3456] batman_adv: batadv0: Interface activated: dummy0 [ 32.047127][ T3456] loop2: detected capacity change from 0 to 128 [ 32.053875][ T3456] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 32.074687][ T3458] bridge0: entered promiscuous mode [ 32.080422][ T3456] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.093484][ T3458] macvlan2: entered promiscuous mode [ 32.109821][ T3458] bridge0: port 3(macvlan2) entered blocking state [ 32.116627][ T3458] bridge0: port 3(macvlan2) entered disabled state [ 32.124945][ T3461] capability: warning: `syz.1.9' uses deprecated v2 capabilities in a way that may be insecure [ 32.137403][ T3458] macvlan2: entered allmulticast mode [ 32.142809][ T3458] bridge0: entered allmulticast mode [ 32.153559][ T3461] loop1: detected capacity change from 0 to 1024 [ 32.172127][ T3458] macvlan2: left allmulticast mode [ 32.176191][ T3461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.177310][ T3458] bridge0: left allmulticast mode [ 32.206899][ T50] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 32.229762][ T3458] bridge0: left promiscuous mode [ 32.293244][ T3471] xt_recent: Unsupported userspace flags (000000da) [ 32.383127][ T3473] loop2: detected capacity change from 0 to 512 [ 32.412537][ T3473] EXT4-fs: dax option not supported [ 32.532030][ T3478] vlan2: entered promiscuous mode [ 32.563498][ T3478] bond0: entered promiscuous mode [ 32.568698][ T3478] bond_slave_0: entered promiscuous mode [ 32.574431][ T3478] bond_slave_1: entered promiscuous mode [ 32.631891][ T3478] bond0: left promiscuous mode [ 32.637816][ T3478] bond_slave_0: left promiscuous mode [ 32.644056][ T3478] bond_slave_1: left promiscuous mode [ 32.861025][ T3483] loop4: detected capacity change from 0 to 764 [ 32.894740][ T3483] rock: directory entry would overflow storage [ 32.901195][ T3483] rock: sig=0x4f50, size=4, remaining=3 [ 32.906872][ T3483] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 32.916096][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 32.942965][ T3485] loop2: detected capacity change from 0 to 256 [ 32.955802][ T3483] Symlink component flag not implemented [ 32.971725][ T3483] Symlink component flag not implemented (129) [ 32.979712][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.979772][ T3483] rock: directory entry would overflow storage [ 32.995150][ T3483] rock: sig=0x4f50, size=4, remaining=3 [ 33.000975][ T3483] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 33.027311][ T3487] rock: directory entry would overflow storage [ 33.033612][ T3487] rock: sig=0x4f50, size=4, remaining=3 [ 33.039730][ T3487] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 33.152315][ T3490] loop4: detected capacity change from 0 to 512 [ 33.167163][ T3490] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 33.181038][ T3490] EXT4-fs (loop4): orphan cleanup on readonly fs [ 33.187755][ T3490] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 33.203985][ T3490] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 33.213280][ T3490] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.16: bg 0: block 40: padding at end of block bitmap is not set [ 33.229124][ T3490] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 33.238431][ T3490] EXT4-fs (loop4): 1 truncate cleaned up [ 33.244737][ T3490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.312005][ T8] kernel read not supported for file [fscontext] (pid: 8 comm: kworker/0:0) [ 33.393924][ T3490] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #16: comm syz.4.16: corrupted xattr block 31: invalid header [ 33.448298][ T3490] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=16 [ 33.497227][ T8] IPVS: starting estimator thread 0... [ 33.599480][ T3502] 9pnet_virtio: no channels available for device 127.0.0.1 [ 33.608069][ T3499] IPVS: using max 2880 ests per chain, 144000 per kthread [ 33.672689][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.964073][ T3508] loop2: detected capacity change from 0 to 128 [ 33.973818][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.981350][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.988891][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.996347][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.003957][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.011355][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.018880][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.026572][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.034176][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.041762][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.049322][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.049597][ T3508] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.056825][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.056850][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.070765][ T3508] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.076399][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.085302][ T3506] netlink: 'syz.4.19': attribute type 7 has an invalid length. [ 34.094294][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.116949][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.124509][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.131991][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.139474][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.145475][ T3506] loop4: detected capacity change from 0 to 128 [ 34.146883][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.146952][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.153543][ T3506] ======================================================= [ 34.153543][ T3506] WARNING: The mand mount option has been deprecated and [ 34.153543][ T3506] and is ignored by this kernel. Remove the mand [ 34.153543][ T3506] option from the mount to silence this warning. [ 34.153543][ T3506] ======================================================= [ 34.160667][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.210367][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.217778][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.225165][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.232680][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.240289][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.247709][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.255134][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.262566][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.270007][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.277416][ T3435] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.288178][ T3506] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.304846][ T3506] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.307536][ T3510] netlink: 104 bytes leftover after parsing attributes in process `syz.1.20'. [ 34.316323][ T3435] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 34.398573][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.449113][ T3509] loop1: detected capacity change from 0 to 1024 [ 34.488602][ T3509] EXT4-fs: Ignoring removed orlov option [ 34.501966][ T3521] SELinux: security_context_str_to_sid (ñ•) failed with errno=-22 [ 34.516382][ T3509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.550198][ T3509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.638869][ T3534] netlink: 'syz.4.22': attribute type 21 has an invalid length. [ 34.680119][ T3534] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22'. [ 34.726188][ T3534] loop4: detected capacity change from 0 to 512 [ 34.735168][ T3534] EXT4-fs: inline encryption not supported [ 34.790753][ T3534] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.803873][ T3534] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.873534][ T3534] EXT4-fs (loop4): 1 truncate cleaned up [ 34.883066][ T3534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.918735][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.051541][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.319846][ T3576] loop1: detected capacity change from 0 to 512 [ 35.330829][ T3576] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 35.526311][ T3582] loop3: detected capacity change from 0 to 8192 [ 35.589185][ T3584] loop4: detected capacity change from 0 to 128 [ 35.596664][ T3582] loop3: p1 p3 [ 35.600347][ T3582] loop3: p1 start 51379968 is beyond EOD, truncated [ 35.607286][ T3582] loop3: p3 size 100663552 extends beyond EOD, truncated [ 36.444074][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 36.444089][ T29] audit: type=1326 audit(1737242597.586:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.492924][ T3594] netlink: 'syz.0.33': attribute type 29 has an invalid length. [ 36.563545][ T3600] netlink: 'syz.1.35': attribute type 4 has an invalid length. [ 36.565258][ T3596] loop3: detected capacity change from 0 to 1024 [ 36.579251][ T29] audit: type=1326 audit(1737242597.626:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.602752][ T29] audit: type=1326 audit(1737242597.626:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.626047][ T29] audit: type=1326 audit(1737242597.626:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.649284][ T29] audit: type=1326 audit(1737242597.626:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.672955][ T29] audit: type=1326 audit(1737242597.626:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.697676][ T29] audit: type=1326 audit(1737242597.626:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.721498][ T29] audit: type=1326 audit(1737242597.626:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.744764][ T29] audit: type=1326 audit(1737242597.626:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.768140][ T29] audit: type=1326 audit(1737242597.626:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3593 comm="syz.0.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6487935d29 code=0x7ffc0000 [ 36.851734][ T3605] loop1: detected capacity change from 0 to 512 [ 36.862934][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.864649][ T3596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.904977][ T3605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.918798][ T3605] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.425952][ T3619] loop2: detected capacity change from 0 to 1024 [ 37.433272][ T3619] EXT4-fs: Invalid want_extra_isize 7 [ 38.221318][ T3622] pim6reg: entered allmulticast mode [ 38.240352][ T3622] pim6reg: left allmulticast mode [ 38.318088][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.748556][ T3630] tipc: Can't bind to reserved service type 1 [ 38.850616][ T3638] macvlan0: entered allmulticast mode [ 38.856185][ T3638] veth1_vlan: entered allmulticast mode [ 38.906481][ T3639] macvlan0: left allmulticast mode [ 38.911676][ T3639] veth1_vlan: left allmulticast mode [ 39.088416][ T3596] netlink: 'syz.3.34': attribute type 6 has an invalid length. [ 39.190537][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.312874][ T3647] netlink: 120 bytes leftover after parsing attributes in process `syz.3.46'. [ 39.333731][ T3647] capability: warning: `syz.3.46' uses 32-bit capabilities (legacy support in use) [ 39.484295][ T3653] loop3: detected capacity change from 0 to 736 [ 39.576394][ T3655] loop2: detected capacity change from 0 to 512 [ 39.582956][ T3655] EXT4-fs: Ignoring removed i_version option [ 39.588994][ T3655] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.598173][ T3656] netlink: 'syz.3.47': attribute type 4 has an invalid length. [ 39.605823][ T3656] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.47'. [ 39.646031][ T3655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.713942][ T3655] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.735399][ T3655] EXT4-fs (loop2): 1 truncate cleaned up [ 39.749386][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.765394][ T3655] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 39.868572][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.907236][ T3676] 9pnet_fd: Insufficient options for proto=fd [ 39.930190][ T3678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.55'. [ 40.041012][ T3686] loop2: detected capacity change from 0 to 512 [ 40.096124][ T3686] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.148340][ T3686] EXT4-fs (loop2): 1 truncate cleaned up [ 40.162698][ T3686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.214385][ T3678] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.55: corrupted in-inode xattr: overlapping e_value [ 40.286299][ T3678] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.55: unable to update i_inline_off [ 40.312515][ T3678] EXT4-fs error (device loop2): ext4_xattr_ibody_get:653: inode #15: comm syz.2.55: corrupted in-inode xattr: overlapping e_value [ 40.328906][ T3695] loop4: detected capacity change from 0 to 512 [ 40.347258][ T3695] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.355788][ T3695] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 40.363806][ T3695] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.371339][ T3695] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 40.381955][ T3695] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 40.385782][ C0] hrtimer: interrupt took 37781 ns [ 40.392679][ T3695] EXT4-fs (loop4): 1 truncate cleaned up [ 40.403651][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.494271][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.569462][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.740898][ T3711] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'. [ 40.827550][ T3721] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 40.834141][ T3721] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 40.842003][ T3721] vhci_hcd vhci_hcd.0: Device attached [ 40.853023][ T3726] syz.0.66 uses obsolete (PF_INET,SOCK_PACKET) [ 40.863096][ T3725] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.879240][ T3721] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.902714][ T3722] vhci_hcd: connection closed [ 40.903093][ T11] vhci_hcd: stop threads [ 40.912349][ T11] vhci_hcd: release socket [ 40.917066][ T11] vhci_hcd: disconnect device [ 40.923030][ T3737] loop3: detected capacity change from 0 to 512 [ 40.930172][ T3737] EXT4-fs: Ignoring removed i_version option [ 40.945702][ T3725] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.968546][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.003563][ T3737] ext4 filesystem being mounted at /10/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.019654][ T3747] loop1: detected capacity change from 0 to 1024 [ 41.028031][ T3737] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 41.046011][ T3747] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.059127][ T3725] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.085100][ T3747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.100019][ T3747] syz.1.68[3747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.100071][ T3747] syz.1.68[3747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.112308][ T3725] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.118956][ T3747] syz.1.68[3747] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.161536][ T3725] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.184734][ T3725] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.198925][ T3725] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.199095][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.210167][ T3725] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.238965][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.246475][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.255621][ T3776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.263590][ T3776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.307988][ T3784] Zero length message leads to an empty skb [ 41.317141][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.417398][ T3805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 41.458668][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 41.458682][ T29] audit: type=1400 audit(1737242602.606:991): avc: denied { append } for pid=3809 comm="syz.2.72" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 41.494241][ T29] audit: type=1400 audit(1737242602.646:992): avc: denied { create } for pid=3812 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.535838][ T3820] netlink: 120 bytes leftover after parsing attributes in process `syz.3.74'. [ 41.544832][ T3820] netlink: 120 bytes leftover after parsing attributes in process `syz.3.74'. [ 41.549496][ T29] audit: type=1400 audit(1737242602.656:993): avc: denied { write } for pid=3812 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 41.591967][ T29] audit: type=1326 audit(1737242602.736:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 41.615463][ T29] audit: type=1326 audit(1737242602.736:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 41.639002][ T29] audit: type=1326 audit(1737242602.736:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 41.662477][ T29] audit: type=1326 audit(1737242602.736:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 41.685810][ T29] audit: type=1326 audit(1737242602.736:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 41.709484][ T29] audit: type=1326 audit(1737242602.816:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 41.733278][ T29] audit: type=1326 audit(1737242602.816:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.3.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 41.790403][ T3846] loop4: detected capacity change from 0 to 1024 [ 41.807299][ T3846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.873577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.897200][ T3829] loop2: detected capacity change from 0 to 1024 [ 41.912492][ T3829] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.922200][ T3829] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.938330][ T3829] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 41.946844][ T3829] EXT4-fs (loop2): orphan cleanup on readonly fs [ 41.954876][ T3829] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 41.965086][ T3829] EXT4-fs (loop2): Remounting filesystem read-only [ 41.980124][ T3829] EXT4-fs (loop2): 1 orphan inode deleted [ 41.987467][ T3829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 42.008798][ T3829] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 42.027018][ T3829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.061093][ T3829] syz.2.75 (3829) used greatest stack depth: 9640 bytes left [ 42.096881][ T3883] hub 9-0:1.0: USB hub found [ 42.101742][ T3883] hub 9-0:1.0: 8 ports detected [ 42.269528][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 42.314580][ T3907] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.462757][ T3945] xt_bpf: check failed: parse error [ 42.511769][ T3951] netlink: 256 bytes leftover after parsing attributes in process `syz.2.83'. [ 42.543631][ T3956] syz.2.84[3956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.543756][ T3956] syz.2.84[3956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.555169][ T3956] syz.2.84[3956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.559064][ T3957] 9pnet_fd: Insufficient options for proto=fd [ 42.626173][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.780198][ T3963] loop3: detected capacity change from 0 to 512 [ 42.804419][ T3963] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.812431][ T3963] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 42.820673][ T3963] System zones: 0-1, 15-15, 18-18, 34-34 [ 42.826793][ T3963] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.833343][ T3963] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 42.848560][ T3963] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 42.855386][ T3963] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.87: bad orphan inode 16 [ 42.865334][ T3963] ext4_test_bit(bit=15, block=18) = 1 [ 42.870715][ T3963] is_bad_inode(inode)=0 [ 42.874926][ T3963] NEXT_ORPHAN(inode)=0 [ 42.879005][ T3963] max_ino=32 [ 42.882335][ T3963] i_nlink=2 [ 42.885905][ T3963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.914214][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.968440][ T3965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.978248][ T3965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.206216][ T3975] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 43.308756][ T3980] tun0: tun_chr_ioctl cmd 2147767511 [ 43.620032][ T3986] netlink: '+}[@': attribute type 10 has an invalid length. [ 43.631357][ T3986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.641571][ T3986] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 43.685014][ T3988] netlink: 96 bytes leftover after parsing attributes in process `syz.1.93'. [ 43.854125][ T3992] loop4: detected capacity change from 0 to 512 [ 43.861743][ T3992] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.045254][ T3992] EXT4-fs (loop4): 1 truncate cleaned up [ 44.052064][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.745991][ T4004] loop3: detected capacity change from 0 to 512 [ 44.823441][ T3999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 44.863587][ T4004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.97: bg 0: block 288: padding at end of block bitmap is not set [ 44.933819][ T4004] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 44.944132][ T4004] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.97: attempt to clear invalid blocks 1024 len 1 [ 44.985336][ T4004] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.97: invalid indirect mapped block 1819239214 (level 0) [ 45.000304][ T4004] EXT4-fs (loop3): 1 truncate cleaned up [ 45.021798][ T4004] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.064136][ T4018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.103'. [ 45.110468][ T4021] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.123739][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.143905][ T4018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.103'. [ 45.155333][ T4021] block device autoloading is deprecated and will be removed. [ 45.185495][ T4028] netlink: 52 bytes leftover after parsing attributes in process `syz.1.105'. [ 45.202257][ T4021] netlink: 'syz.0.104': attribute type 10 has an invalid length. [ 45.204457][ T4023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.105'. [ 45.262427][ T4021] geneve1: entered promiscuous mode [ 45.271705][ T4021] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 45.297540][ T4037] loop3: detected capacity change from 0 to 1024 [ 45.312653][ T4037] EXT4-fs: Ignoring removed orlov option [ 45.318566][ T4037] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.344983][ T4040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 45.353978][ T4040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.109'. [ 45.374745][ T4037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.412009][ T4042] netlink: 44 bytes leftover after parsing attributes in process `syz.2.111'. [ 45.496578][ T4049] ref_ctr increment failed for inode: 0x80 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881194f24c0 [ 45.534064][ T4049] random: crng reseeded on system resumption [ 45.675479][ T4037] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 45.693315][ T4048] uprobe: syz.1.113:4048 failed to unregister, leaking uprobe [ 45.721788][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.016536][ T4069] netlink: 'syz.0.119': attribute type 10 has an invalid length. [ 46.037219][ T4069] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 46.203591][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 46.212727][ T4075] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 46.244876][ T4062] loop1: detected capacity change from 0 to 512 [ 46.266558][ T4062] /dev/loop1: Can't open blockdev [ 46.354664][ T3992] syz.4.96 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 46.368674][ T3992] CPU: 0 UID: 0 PID: 3992 Comm: syz.4.96 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 46.379197][ T3992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.389318][ T3992] Call Trace: [ 46.392606][ T3992] [ 46.395535][ T3992] dump_stack_lvl+0xf2/0x150 [ 46.400165][ T3992] dump_stack+0x15/0x1a [ 46.404388][ T3992] dump_header+0x83/0x2d0 [ 46.408813][ T3992] oom_kill_process+0x341/0x4c0 [ 46.413661][ T3992] out_of_memory+0x9af/0xbe0 [ 46.418260][ T3992] mem_cgroup_out_of_memory+0x13e/0x190 [ 46.423826][ T3992] try_charge_memcg+0x508/0x7f0 [ 46.428706][ T3992] obj_cgroup_charge_pages+0xbd/0x1a0 [ 46.434239][ T3992] __memcg_kmem_charge_page+0x9d/0x170 [ 46.439702][ T3992] __alloc_pages_noprof+0x1bc/0x340 [ 46.444974][ T3992] alloc_pages_mpol_noprof+0xb8/0x260 [ 46.450401][ T3992] alloc_pages_noprof+0xe1/0x100 [ 46.455338][ T3992] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 46.461220][ T3992] __kvmalloc_node_noprof+0x121/0x170 [ 46.466674][ T3992] ? ip_set_alloc+0x1f/0x30 [ 46.471185][ T3992] ip_set_alloc+0x1f/0x30 [ 46.475529][ T3992] hash_netiface_create+0x273/0x730 [ 46.480738][ T3992] ? __nla_parse+0x40/0x60 [ 46.485266][ T3992] ? __pfx_hash_netiface_create+0x10/0x10 [ 46.491057][ T3992] ip_set_create+0x359/0x8a0 [ 46.495656][ T3992] ? strnstr+0xe1/0x100 [ 46.499852][ T3992] ? __nla_parse+0x40/0x60 [ 46.504281][ T3992] nfnetlink_rcv_msg+0x4a9/0x570 [ 46.509353][ T3992] netlink_rcv_skb+0x12c/0x230 [ 46.514166][ T3992] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 46.519637][ T3992] nfnetlink_rcv+0x16c/0x15d0 [ 46.524353][ T3992] ? kmem_cache_free+0xdc/0x2d0 [ 46.529230][ T3992] ? nlmon_xmit+0x51/0x60 [ 46.533889][ T3992] ? __kfree_skb+0x102/0x150 [ 46.538579][ T3992] ? consume_skb+0x49/0x160 [ 46.543079][ T3992] ? nlmon_xmit+0x51/0x60 [ 46.547472][ T3992] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 46.547999][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 46.548012][ T29] audit: type=1400 audit(1737242607.476:1307): avc: denied { connect } for pid=4073 comm="syz.0.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.552785][ T3992] ? __dev_queue_xmit+0xb6e/0x2090 [ 46.584156][ T3992] ? ref_tracker_free+0x3a5/0x410 [ 46.589195][ T3992] ? __dev_queue_xmit+0x186/0x2090 [ 46.594315][ T3992] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 46.599772][ T3992] netlink_unicast+0x599/0x670 [ 46.604709][ T3992] netlink_sendmsg+0x5cc/0x6e0 [ 46.609475][ T3992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.614753][ T3992] __sock_sendmsg+0x140/0x180 [ 46.619507][ T3992] ____sys_sendmsg+0x312/0x410 [ 46.624313][ T3992] __sys_sendmsg+0x19d/0x230 [ 46.628974][ T3992] __x64_sys_sendmsg+0x46/0x50 [ 46.633729][ T3992] x64_sys_call+0x2734/0x2dc0 [ 46.638410][ T3992] do_syscall_64+0xc9/0x1c0 [ 46.642983][ T3992] ? clear_bhb_loop+0x55/0xb0 [ 46.647652][ T3992] ? clear_bhb_loop+0x55/0xb0 [ 46.652364][ T3992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.658268][ T3992] RIP: 0033:0x7f8a4b4f5d29 [ 46.662672][ T3992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.682486][ T3992] RSP: 002b:00007f8a49b67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.690888][ T3992] RAX: ffffffffffffffda RBX: 00007f8a4b6e5fa0 RCX: 00007f8a4b4f5d29 [ 46.698854][ T3992] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 46.706902][ T3992] RBP: 00007f8a4b571b08 R08: 0000000000000000 R09: 0000000000000000 [ 46.714914][ T3992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.722939][ T3992] R13: 0000000000000000 R14: 00007f8a4b6e5fa0 R15: 00007fff69fa4948 [ 46.730989][ T3992] [ 46.734050][ T3992] memory: usage 307200kB, limit 307200kB, failcnt 260 [ 46.741115][ T3992] memory+swap: usage 307656kB, limit 9007199254740988kB, failcnt 0 [ 46.749044][ T3992] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 46.756404][ T3992] Memory cgroup stats for /syz4: [ 46.756586][ T3992] cache 16384 [ 46.764887][ T3992] rss 4096 [ 46.767978][ T3992] shmem 0 [ 46.770918][ T3992] mapped_file 4096 [ 46.774950][ T3992] dirty 0 [ 46.777944][ T3992] writeback 4096 [ 46.781959][ T3992] workingset_refault_anon 91 [ 46.786613][ T3992] workingset_refault_file 9 [ 46.791156][ T3992] swap 466944 [ 46.794466][ T3992] swapcached 4096 [ 46.798140][ T3992] pgpgin 19038 [ 46.801511][ T3992] pgpgout 19032 [ 46.804987][ T3992] pgfault 25110 [ 46.807292][ T4083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.122'. [ 46.808517][ T3992] pgmajfault 47 [ 46.808525][ T3992] inactive_anon 0 [ 46.808532][ T3992] active_anon 4096 [ 46.817431][ T4083] tipc: Started in network mode [ 46.820828][ T3992] inactive_file 4096 [ 46.820838][ T3992] active_file 16384 [ 46.824490][ T4083] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 46.828169][ T3992] unevictable 0 [ 46.828178][ T3992] hierarchical_memory_limit 314572800 [ 46.837702][ T4083] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 46.840700][ T3992] hierarchical_memsw_limit 9223372036854771712 [ 46.840711][ T3992] total_cache 16384 [ 46.840717][ T3992] total_rss 4096 [ 46.840772][ T3992] total_shmem 0 [ 46.840779][ T3992] total_mapped_file 4096 [ 46.840785][ T3992] total_dirty 0 [ 46.840791][ T3992] total_writeback 4096 [ 46.840799][ T3992] total_workingset_refault_anon 91 [ 46.840807][ T3992] total_workingset_refault_file 9 [ 46.840815][ T3992] total_swap 466944 [ 46.840868][ T3992] total_swapcached 4096 [ 46.840876][ T3992] total_pgpgin 19038 [ 46.840883][ T3992] total_pgpgout 19032 [ 46.840889][ T3992] total_pgfault 25110 [ 46.840896][ T3992] total_pgmajfault 47 [ 46.840903][ T3992] total_inactive_anon 0 [ 46.840911][ T3992] total_active_anon 4096 [ 46.840919][ T3992] total_inactive_file 4096 [ 46.840927][ T3992] total_active_file 16384 [ 46.840934][ T3992] total_unevictable 0 [ 46.840942][ T3992] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 46.850355][ T4083] tipc: Enabled bearer , priority 10 [ 46.853279][ T3992] ,cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.96,pid=3991,uid=0 [ 46.972936][ T3992] Memory cgroup out of memory: Killed process 3991 (syz.4.96) total-vm:95696kB, anon-rss:788kB, file-rss:22464kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 46.987066][ T29] audit: type=1400 audit(1737242608.126:1308): avc: denied { create } for pid=4084 comm="syz.3.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 47.137471][ T29] audit: type=1400 audit(1737242608.286:1309): avc: denied { ioctl } for pid=4087 comm="syz.1.124" path="socket:[5640]" dev="sockfs" ino=5640 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.602267][ T3992] syz.4.96 (3992) used greatest stack depth: 7184 bytes left [ 47.614501][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.704299][ T4103] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 47.717837][ T4085] vlan2: entered allmulticast mode [ 47.742538][ T4103] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 47.836885][ T29] audit: type=1326 audit(1737242608.986:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4b4f5d29 code=0x7ffc0000 [ 47.879354][ T29] audit: type=1326 audit(1737242608.986:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4b4f5d29 code=0x7ffc0000 [ 47.903107][ T29] audit: type=1326 audit(1737242609.016:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a4b4f5d29 code=0x7ffc0000 [ 47.926464][ T29] audit: type=1326 audit(1737242609.016:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4b4f5d29 code=0x7ffc0000 [ 47.949960][ T29] audit: type=1326 audit(1737242609.016:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4b4f5d29 code=0x7ffc0000 [ 47.973289][ T29] audit: type=1326 audit(1737242609.016:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4b4f5d29 code=0x7ffc0000 [ 47.996672][ T29] audit: type=1326 audit(1737242609.016:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4101 comm="syz.4.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a4b4f5d29 code=0x7ffc0000 [ 48.020238][ T3361] tipc: Node number set to 1 [ 48.261201][ T4119] loop3: detected capacity change from 0 to 2048 [ 48.315685][ T4119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.617345][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.679714][ T4129] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.745941][ T4133] loop3: detected capacity change from 0 to 128 [ 48.897246][ T4133] vlan2: entered promiscuous mode [ 48.977742][ T4139] macvlan0: entered promiscuous mode [ 48.999670][ T4139] ipvlan0: entered promiscuous mode [ 49.008351][ T4139] ipvlan0: left promiscuous mode [ 49.023320][ T4139] macvlan0: left promiscuous mode [ 49.321661][ T4153] lo speed is unknown, defaulting to 1000 [ 49.328386][ T4153] lo speed is unknown, defaulting to 1000 [ 49.334526][ T4153] lo speed is unknown, defaulting to 1000 [ 49.394341][ T4153] infiniband sz1: set active [ 49.399055][ T4153] infiniband sz1: added lo [ 49.408520][ T4157] 9pnet_virtio: no channels available for device 127.0.0.1 [ 49.417981][ T4156] lo speed is unknown, defaulting to 1000 [ 49.423874][ T4156] lo speed is unknown, defaulting to 1000 [ 49.430079][ T4156] lo speed is unknown, defaulting to 1000 [ 49.439467][ T4158] »»»»»»: renamed from lo (while UP) [ 49.862846][ T24] »»»»»» speed is unknown, defaulting to 1000 [ 49.925996][ T4153] RDS/IB: sz1: added [ 49.930106][ T4153] smc: adding ib device sz1 with port count 1 [ 49.936320][ T4153] smc: ib device sz1 port 1 has pnetid [ 49.942592][ T4153] »»»»»» speed is unknown, defaulting to 1000 [ 49.987857][ T4153] »»»»»» speed is unknown, defaulting to 1000 [ 50.021110][ T4153] »»»»»» speed is unknown, defaulting to 1000 [ 50.054276][ T4153] »»»»»» speed is unknown, defaulting to 1000 [ 50.087986][ T4153] »»»»»» speed is unknown, defaulting to 1000 [ 50.141712][ T4166] futex_wake_op: syz.1.143 tries to shift op by -1; fix this program [ 50.162952][ T4168] __nla_validate_parse: 2 callbacks suppressed [ 50.162980][ T4168] netlink: 36 bytes leftover after parsing attributes in process `syz.0.144'. [ 50.165216][ T4153] »»»»»» speed is unknown, defaulting to 1000 [ 50.170529][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 50.194437][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 50.205165][ T24] »»»»»» speed is unknown, defaulting to 1000 [ 50.211571][ T4156] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 50.222147][ T4156] »»»»»» speed is unknown, defaulting to 1000 [ 50.238301][ T4156] »»»»»» speed is unknown, defaulting to 1000 [ 50.256372][ T4156] »»»»»» speed is unknown, defaulting to 1000 [ 50.267691][ T4156] »»»»»» speed is unknown, defaulting to 1000 [ 50.274283][ T4156] »»»»»» speed is unknown, defaulting to 1000 [ 50.343432][ T4156] »»»»»» speed is unknown, defaulting to 1000 [ 50.646125][ T4181] loop3: detected capacity change from 0 to 2048 [ 50.690333][ T4181] Alternate GPT is invalid, using primary GPT. [ 50.696829][ T4181] loop3: p2 p3 p7 [ 50.739724][ T2998] Alternate GPT is invalid, using primary GPT. [ 50.746237][ T2998] loop3: p2 p3 p7 [ 51.058185][ T4184] syz.0.147[4184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.058338][ T4184] syz.0.147[4184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.072904][ T4184] syz.0.147[4184] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.149586][ T4184] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 51.458096][ T4189] xt_CT: No such helper "syz0" [ 51.504749][ T4196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.560085][ T4199] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4199 comm=syz.1.153 [ 51.581625][ T4196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.645346][ T4196] bond0: (slave netdevsim1): Releasing backup interface [ 51.663567][ T4196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.737330][ T4196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.800261][ T4196] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.824829][ T4196] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.850438][ T4196] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.876016][ T4196] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.979088][ T4205] veth0_to_team: entered promiscuous mode [ 51.985079][ T4205] veth0_to_team: entered allmulticast mode [ 52.117224][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 52.117249][ T29] audit: type=1400 audit(1737242613.266:1559): avc: denied { read } for pid=4212 comm="syz.2.158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.249615][ T29] audit: type=1400 audit(1737242613.396:1560): avc: denied { getopt } for pid=4218 comm="syz.4.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.273038][ T4222] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 52.282925][ T29] audit: type=1400 audit(1737242613.426:1561): avc: denied { write } for pid=4221 comm="syz.0.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.308468][ T29] audit: type=1400 audit(1737242613.456:1562): avc: denied { append } for pid=4218 comm="syz.4.160" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 52.496852][ T29] audit: type=1326 audit(1737242613.646:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586d45d29 code=0x7ffc0000 [ 52.520686][ T29] audit: type=1326 audit(1737242613.656:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586d45d29 code=0x7ffc0000 [ 52.544209][ T29] audit: type=1326 audit(1737242613.656:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5586d45d29 code=0x7ffc0000 [ 52.567649][ T29] audit: type=1326 audit(1737242613.656:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586d45d29 code=0x7ffc0000 [ 52.591148][ T29] audit: type=1326 audit(1737242613.656:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f5586d45d29 code=0x7ffc0000 [ 52.603926][ T4232] @ÿ: renamed from vlan0 (while UP) [ 52.614647][ T29] audit: type=1326 audit(1737242613.656:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4229 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5586d45d29 code=0x7ffc0000 [ 52.816148][ T4239] loop4: detected capacity change from 0 to 128 [ 52.952880][ T4237] syz.4.165: attempt to access beyond end of device [ 52.952880][ T4237] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 53.019737][ T4242] loop3: detected capacity change from 0 to 2048 [ 53.043903][ T4242] loop3: p1 < > p3 [ 53.049743][ T4242] loop3: p3 size 134217728 extends beyond EOD, truncated [ 53.069139][ T2998] loop3: p1 < > p3 [ 53.074320][ T2998] loop3: p3 size 134217728 extends beyond EOD, truncated [ 53.114831][ T3517] udevd[3517]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 53.131760][ T3598] udevd[3598]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 53.172712][ T4250] loop4: detected capacity change from 0 to 512 [ 53.183996][ T4250] EXT4-fs: inline encryption not supported [ 53.259217][ T4253] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 53.273326][ T3361] IPVS: starting estimator thread 0... [ 53.302101][ T4250] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.313726][ T4250] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 53.323835][ T4250] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.167: Corrupt directory, running e2fsck is recommended [ 53.352076][ T4250] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 53.379580][ T4250] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.167: corrupted in-inode xattr: invalid ea_ino [ 53.393295][ T4258] IPVS: using max 2928 ests per chain, 146400 per kthread [ 53.403520][ T4250] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.167: couldn't read orphan inode 15 (err -117) [ 53.416138][ T4250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.470173][ T4261] 9pnet_fd: p9_fd_create_tcp (4261): problem connecting socket to 127.0.0.1 [ 53.495314][ T4250] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 53.506876][ T4250] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 53.516976][ T4250] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.167: Corrupt directory, running e2fsck is recommended [ 53.532609][ T4263] pim6reg: entered allmulticast mode [ 53.533407][ T4250] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 3: comm syz.4.167: path /29/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 53.549153][ T4263] pim6reg: left allmulticast mode [ 53.594026][ T4250] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 8: comm syz.4.167: path /29/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 53.594118][ T4266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.167'. [ 53.644686][ T4270] netlink: 88 bytes leftover after parsing attributes in process `syz.3.174'. [ 53.783549][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.872117][ T4278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.941351][ T4280] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 53.967378][ T4278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.097162][ T4278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.157677][ T4278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.227378][ T4278] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.269022][ T4278] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.334566][ T4278] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.345954][ T4278] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.601713][ T4288] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 54.610396][ T4288] bridge1: entered promiscuous mode [ 54.751432][ T4294] loop4: detected capacity change from 0 to 2048 [ 54.772669][ T4294] EXT4-fs: Ignoring removed mblk_io_submit option [ 55.095453][ T4294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.110524][ T4299] netlink: 256 bytes leftover after parsing attributes in process `syz.3.183'. [ 55.182795][ T4294] SELinux: Context system_u:object_r:sysfs_t:s0 is not valid (left unmapped). [ 55.204820][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.284045][ T4310] loop3: detected capacity change from 0 to 1024 [ 55.291806][ T4310] EXT4-fs: Ignoring removed orlov option [ 55.297658][ T4310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.320103][ T4310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.345780][ T4315] loop4: detected capacity change from 0 to 164 [ 55.354232][ T4310] process 'syz.3.185' launched './file0/file0' with NULL argv: empty string added [ 55.373958][ T4315] Unable to read rock-ridge attributes [ 55.422027][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.453602][ T4317] Unable to read rock-ridge attributes [ 55.467826][ T4317] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 55.481441][ T4317] Unable to read rock-ridge attributes [ 55.487855][ T4317] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 55.676085][ T4325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.189'. [ 55.753754][ T4326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.187'. [ 55.785952][ T4326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.187'. [ 55.808855][ T4330] x_tables: duplicate underflow at hook 1 [ 55.843644][ T4335] Cannot find add_set index 0 as target [ 55.852788][ T4326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.187'. [ 56.022208][ T4332] tipc: New replicast peer: 10.1.1.2 [ 56.027737][ T4332] tipc: Enabled bearer , priority 10 [ 56.338306][ T4342] wireguard: wg1: Could not create IPv4 socket [ 56.543559][ T3361] IPVS: starting estimator thread 0... [ 56.633971][ T4348] IPVS: using max 2880 ests per chain, 144000 per kthread [ 56.774756][ T4358] netlink: 256 bytes leftover after parsing attributes in process `syz.4.197'. [ 56.829083][ T4364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.875865][ T4364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.925536][ T4364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.978675][ T4364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.020036][ T4366] team_slave_0: entered promiscuous mode [ 57.025879][ T4366] team_slave_0: entered allmulticast mode [ 57.035350][ T4366] mmap: syz.2.199 (4366) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.040693][ T4364] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.060247][ T4364] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.072236][ T4364] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.084013][ T4364] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.201477][ T4374] loop4: detected capacity change from 0 to 512 [ 57.208292][ T4374] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.215441][ T4374] EXT4-fs: Ignoring removed mblk_io_submit option [ 57.221906][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 57.221918][ T29] audit: type=1400 audit(1737242618.366:2005): avc: denied { shutdown } for pid=4375 comm="syz.2.203" lport=58269 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 57.264123][ T4374] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 57.272172][ T4374] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 57.280821][ T4374] EXT4-fs (loop4): 1 truncate cleaned up [ 57.286915][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.303075][ T4374] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 57.323351][ T4374] EXT4-fs (loop4): Remounting filesystem read-only [ 57.374485][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.465392][ T4395] bridge0: port 3(syz_tun) entered blocking state [ 57.472094][ T4395] bridge0: port 3(syz_tun) entered disabled state [ 57.480414][ T4395] syz_tun: entered allmulticast mode [ 57.489622][ T4395] syz_tun: entered promiscuous mode [ 57.499856][ T4395] bridge0: port 3(syz_tun) entered blocking state [ 57.506670][ T4395] bridge0: port 3(syz_tun) entered forwarding state [ 57.508096][ T29] audit: type=1400 audit(1737242618.656:2006): avc: denied { ioctl } for pid=4398 comm="syz.2.209" path="socket:[6812]" dev="sockfs" ino=6812 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 57.538254][ T29] audit: type=1326 audit(1737242618.666:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.561628][ T29] audit: type=1326 audit(1737242618.666:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.569562][ T4389] loop4: detected capacity change from 0 to 128 [ 57.584954][ T29] audit: type=1326 audit(1737242618.666:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.615137][ T29] audit: type=1326 audit(1737242618.666:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.638587][ T29] audit: type=1326 audit(1737242618.666:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.661977][ T29] audit: type=1326 audit(1737242618.666:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.685422][ T29] audit: type=1326 audit(1737242618.666:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.709273][ T29] audit: type=1326 audit(1737242618.666:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4398 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 57.740519][ T4405] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 57.749306][ T4405] bridge1: entered promiscuous mode [ 57.760025][ T4389] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.774166][ T4389] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.787173][ T4412] team_slave_0: entered promiscuous mode [ 57.792827][ T4412] team_slave_0: entered allmulticast mode [ 57.800614][ T4389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 57.860120][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.873755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.134821][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 58.144662][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.152147][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.160136][ T4437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.167588][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.218115][ T4447] loop3: detected capacity change from 0 to 512 [ 58.231347][ T4447] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.225: casefold flag without casefold feature [ 58.247038][ T4441] loop4: detected capacity change from 0 to 512 [ 58.253774][ T4447] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.225: couldn't read orphan inode 15 (err -117) [ 58.265145][ T4441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.266388][ T4447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.282414][ T4441] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.547741][ T4454] hub 2-0:1.0: USB hub found [ 58.552670][ T4454] hub 2-0:1.0: 8 ports detected [ 58.677002][ T4457] Cannot find add_set index 0 as target [ 58.734312][ T4460] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 58.743025][ T4460] bridge1: entered promiscuous mode [ 58.814120][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 58.861992][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.914507][ T4469] team_slave_0: entered promiscuous mode [ 58.920190][ T4469] team_slave_0: entered allmulticast mode [ 59.098027][ T4476] loop4: detected capacity change from 0 to 512 [ 59.106826][ T4476] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.177444][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.195491][ T4476] EXT4-fs (loop4): orphan cleanup on readonly fs [ 59.202574][ T4476] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.229: Failed to acquire dquot type 1 [ 59.215606][ T4476] EXT4-fs (loop4): 1 truncate cleaned up [ 59.222001][ T4476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.235284][ T4476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.457587][ T4482] 9pnet_fd: p9_fd_create_tcp (4482): problem connecting socket to 127.0.0.1 [ 59.501486][ T4476] »»»»»» speed is unknown, defaulting to 1000 [ 59.594403][ T4476] »»»»»» speed is unknown, defaulting to 1000 [ 60.700746][ T4489] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ|Þå‡-' [ 60.701548][ T3435] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 60.729575][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 60.737132][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.744754][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.752156][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.759662][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.767145][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.375567][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.383274][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.391409][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.398955][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.406512][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.414053][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.421466][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.429027][ T4497] Cannot find del_set index 4 as target [ 61.434708][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.442333][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.449783][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.457240][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.464668][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.472105][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.479813][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.487345][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.494846][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.502434][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.510077][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.517509][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.524978][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.532393][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.539913][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.547453][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.554990][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.562431][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.569886][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.577395][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.585014][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.592584][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.600201][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.607658][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.615990][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 61.935592][ T4515] netlink: 'syz.1.245': attribute type 13 has an invalid length. [ 62.003975][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.011293][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.106863][ T4515] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.115598][ T4515] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.124349][ T4515] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.132698][ T4515] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.283493][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 62.283507][ T29] audit: type=1400 audit(1737242623.426:2319): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.292395][ T4527] loop4: detected capacity change from 0 to 1024 [ 62.333269][ T29] audit: type=1400 audit(1737242623.476:2320): avc: denied { create } for pid=4528 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 62.358369][ T4527] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 62.381504][ T4527] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 62.396282][ T4527] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: comm syz.4.248: inode #1: comm syz.4.248: iget: illegal inode # [ 62.413920][ T4527] EXT4-fs (loop4): no journal found [ 62.419210][ T4527] EXT4-fs (loop4): can't get journal size [ 62.431034][ T4522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.246'. [ 62.432397][ T4527] EXT4-fs (loop4): failed to initialize system zone (-22) [ 62.448043][ T4527] EXT4-fs (loop4): mount failed [ 62.499832][ T29] audit: type=1400 audit(1737242623.646:2321): avc: denied { listen } for pid=4526 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.547769][ T29] audit: type=1400 audit(1737242623.646:2322): avc: denied { accept } for pid=4526 comm="syz.4.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.750449][ T4538] 9pnet_fd: p9_fd_create_tcp (4538): problem connecting socket to 127.0.0.1 [ 62.867553][ T29] audit: type=1326 audit(1737242623.926:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 62.891240][ T29] audit: type=1326 audit(1737242623.926:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 62.914935][ T29] audit: type=1326 audit(1737242623.926:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 62.938450][ T29] audit: type=1326 audit(1737242623.926:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 62.961876][ T29] audit: type=1326 audit(1737242623.926:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 62.985668][ T29] audit: type=1326 audit(1737242623.926:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4537 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 64.209127][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 64.235691][ T4568] netlink: 64 bytes leftover after parsing attributes in process `syz.2.260'. [ 64.363797][ T4562] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 64.428025][ T4576] 9pnet_fd: Insufficient options for proto=fd [ 64.440561][ T4578] xt_socket: unknown flags 0xc [ 64.484114][ T4575] 9pnet_fd: p9_fd_create_tcp (4575): problem connecting socket to 127.0.0.1 [ 64.739708][ T4589] »»»»»» speed is unknown, defaulting to 1000 [ 64.788552][ T4589] »»»»»» speed is unknown, defaulting to 1000 [ 64.986765][ T4592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.268'. [ 65.037423][ T4596] @ÿ: renamed from vlan0 (while UP) [ 65.098108][ T4601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'. [ 65.116225][ T4601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'. [ 65.145581][ T4601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.271'. [ 65.156555][ T4601] x_tables: duplicate underflow at hook 1 [ 65.512276][ T4583] 9pnet_fd: p9_fd_create_tcp (4583): problem connecting socket to 127.0.0.1 [ 65.608357][ T4613] loop4: detected capacity change from 0 to 512 [ 65.627029][ T4613] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.673629][ T4613] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.274: iget: bad i_size value: -6917529027641081756 [ 65.687271][ T4613] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.274: couldn't read orphan inode 17 (err -117) [ 65.721785][ T4613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.288928][ T4619] IPVS: Error connecting to the multicast addr [ 66.340323][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.644290][ T4630] 9pnet_fd: p9_fd_create_tcp (4630): problem connecting socket to 127.0.0.1 [ 66.960109][ T4625] 9pnet_fd: p9_fd_create_tcp (4625): problem connecting socket to 127.0.0.1 [ 67.012182][ T4638] loop4: detected capacity change from 0 to 1024 [ 67.059317][ T4638] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.085139][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 67.086495][ T4638] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.114106][ T4638] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 67.132358][ T4638] EXT4-fs (loop4): orphan cleanup on readonly fs [ 67.137565][ T4653] netlink: 'syz.0.284': attribute type 13 has an invalid length. [ 67.148876][ T4638] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 67.173433][ T4638] EXT4-fs (loop4): Remounting filesystem read-only [ 67.180123][ T4638] EXT4-fs (loop4): 1 orphan inode deleted [ 67.187360][ T4638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.203927][ T4638] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 67.204553][ T4650] 9pnet_fd: p9_fd_create_tcp (4650): problem connecting socket to 127.0.0.1 [ 67.244727][ T4638] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.257173][ T4653] bridge0: port 3(syz_tun) entered disabled state [ 67.284900][ T4653] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.292274][ T4653] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.397277][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.416474][ T4653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.433993][ T4662] syz.4.289 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 67.477966][ T4653] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.486423][ T4653] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.495120][ T4653] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.503632][ T4653] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.520084][ T4661] netlink: 'syz.4.289': attribute type 150 has an invalid length. [ 67.604226][ T29] kauditd_printk_skb: 425 callbacks suppressed [ 67.604240][ T29] audit: type=1400 audit(1737242628.756:2750): avc: denied { audit_write } for pid=4663 comm="syz.4.290" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 67.640080][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.647733][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.652230][ T29] audit: type=1107 audit(1737242628.756:2751): pid=4663 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='¯' [ 67.668812][ T29] audit: type=1326 audit(1737242628.786:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.692308][ T29] audit: type=1326 audit(1737242628.786:2753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.715861][ T29] audit: type=1326 audit(1737242628.786:2754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.739338][ T29] audit: type=1326 audit(1737242628.786:2755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.762668][ T29] audit: type=1326 audit(1737242628.786:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.786590][ T29] audit: type=1326 audit(1737242628.786:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.810268][ T29] audit: type=1326 audit(1737242628.786:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.833724][ T29] audit: type=1326 audit(1737242628.786:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.2.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 67.857524][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.864977][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.880651][ T4671] lo speed is unknown, defaulting to 1000 [ 67.887319][ T4671] lo speed is unknown, defaulting to 1000 [ 67.893539][ T4671] lo speed is unknown, defaulting to 1000 [ 67.900272][ T4671] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 67.912501][ T4678] 9pnet_fd: p9_fd_create_tcp (4678): problem connecting socket to 127.0.0.1 [ 67.916434][ T4671] lo speed is unknown, defaulting to 1000 [ 67.943993][ T4671] lo speed is unknown, defaulting to 1000 [ 67.961749][ T4671] lo speed is unknown, defaulting to 1000 [ 67.983596][ T4671] lo speed is unknown, defaulting to 1000 [ 67.990434][ T4671] lo speed is unknown, defaulting to 1000 [ 67.998517][ T4683] dccp_invalid_packet: P.Data Offset(172) too large [ 68.009212][ T4685] loop4: detected capacity change from 0 to 512 [ 68.051122][ T4685] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.066028][ T4685] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.084286][ T4683] xt_hashlimit: max too large, truncated to 1048576 [ 68.091965][ T4683] Cannot find set identified by id 0 to match [ 68.121669][ T1043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.272814][ T4693] 9pnet_fd: p9_fd_create_tcp (4693): problem connecting socket to 127.0.0.1 [ 68.323566][ T4711] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿÿ|Þå‡-' [ 68.338065][ T4715] 9pnet_fd: Insufficient options for proto=fd [ 68.346648][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 68.354451][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.361924][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.369436][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.376867][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.376891][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.406944][ T4719] 9pnet_fd: p9_fd_create_tcp (4719): problem connecting socket to 127.0.0.1 [ 68.444588][ T4720] »»»»»» speed is unknown, defaulting to 1000 [ 68.492660][ T4720] »»»»»» speed is unknown, defaulting to 1000 [ 68.499570][ T4720] lo speed is unknown, defaulting to 1000 [ 68.867650][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.875242][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.881361][ T1043] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.882748][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.882770][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.882789][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.882808][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.923423][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.930919][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.938327][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.945754][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.953307][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.960696][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.968163][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.975615][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.983044][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.990468][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 68.997938][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.005402][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.012832][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.020243][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.027660][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.035954][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.043418][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.050999][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.058532][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.066015][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.073422][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.081030][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.088703][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.096217][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.103711][ T35] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.153068][ T35] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 69.217985][ T4726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 69.227257][ T4726] netlink: 28 bytes leftover after parsing attributes in process `syz.3.308'. [ 69.257025][ T4726] »»»»»» speed is unknown, defaulting to 1000 [ 69.301641][ T4726] »»»»»» speed is unknown, defaulting to 1000 [ 69.308361][ T4726] lo speed is unknown, defaulting to 1000 [ 69.740872][ T4738] rdma_rxe: rxe_newlink: failed to add lo [ 69.747963][ T4738] siw: device registration error -23 [ 69.754525][ T4738] »»»»»»: renamed from lo [ 69.819413][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.086748][ T4749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.313'. [ 70.117184][ T4753] 9pnet_fd: p9_fd_create_tcp (4753): problem connecting socket to 127.0.0.1 [ 70.387405][ T4763] netlink: 'syz.3.319': attribute type 150 has an invalid length. [ 70.423317][ T4765] netlink: 76 bytes leftover after parsing attributes in process `syz.1.320'. [ 70.471193][ T4768] netlink: 'syz.2.322': attribute type 21 has an invalid length. [ 70.484763][ T4768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.322'. [ 70.507000][ T4769] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 70.514885][ T4769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.321'. [ 70.535634][ T4769] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 70.564901][ T4769] team0: Failed to send options change via netlink (err -105) [ 70.572508][ T4769] team0: Port device geneve1 added [ 70.631417][ T4776] 9pnet_fd: p9_fd_create_tcp (4776): problem connecting socket to 127.0.0.1 [ 70.677816][ T4774] 9pnet_fd: p9_fd_create_tcp (4774): problem connecting socket to 127.0.0.1 [ 70.884225][ T4789] 9pnet_fd: p9_fd_create_tcp (4789): problem connecting socket to 127.0.0.1 [ 71.042420][ T4804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'. [ 71.254572][ T4811] 9pnet_fd: p9_fd_create_tcp (4811): problem connecting socket to 127.0.0.1 [ 71.652238][ T4827] 9pnet_fd: p9_fd_create_tcp (4827): problem connecting socket to 127.0.0.1 [ 71.692916][ T4812] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 71.817007][ T4836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 71.859486][ T4836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 71.869482][ T4840] x_tables: duplicate underflow at hook 1 [ 71.908683][ T4836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 71.925301][ T4839] netlink: 'syz.3.347': attribute type 13 has an invalid length. [ 71.946976][ T4839] infiniband sz1: set down [ 72.021706][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.029879][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.134744][ T4839] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.143908][ T4839] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.153044][ T4839] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.162160][ T4839] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.183966][ T3435] »»»»»» speed is unknown, defaulting to 1000 [ 72.209634][ T1043] »»»»»» speed is unknown, defaulting to 1000 [ 72.216612][ T1043] »»»»»» speed is unknown, defaulting to 1000 [ 72.368063][ T4861] netlink: 'syz.0.351': attribute type 21 has an invalid length. [ 72.407926][ T4862] syz.3.354[4862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.408376][ T4862] syz.3.354[4862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.413334][ T4849] 9pnet_fd: p9_fd_create_tcp (4849): problem connecting socket to 127.0.0.1 [ 72.460349][ T4862] syz.3.354[4862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.743126][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 72.743140][ T29] audit: type=1326 audit(1737242633.886:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.790046][ T29] audit: type=1326 audit(1737242633.906:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.814122][ T29] audit: type=1326 audit(1737242633.906:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.838344][ T29] audit: type=1326 audit(1737242633.906:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.861829][ T29] audit: type=1326 audit(1737242633.906:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.885505][ T29] audit: type=1326 audit(1737242633.906:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.908898][ T29] audit: type=1326 audit(1737242633.906:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.932562][ T29] audit: type=1326 audit(1737242633.906:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.955825][ T29] audit: type=1326 audit(1737242633.906:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 72.979520][ T29] audit: type=1326 audit(1737242633.906:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4876 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 73.694741][ T4887] netlink: 'syz.4.361': attribute type 13 has an invalid length. [ 73.752746][ T4893] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 73.860297][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.867552][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.984565][ T4887] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.993062][ T4887] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.001496][ T4887] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.010209][ T4887] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.064141][ T4900] macvlan0: entered promiscuous mode [ 74.071228][ T4900] ipvlan0: entered promiscuous mode [ 74.077076][ T4900] ipvlan0: left promiscuous mode [ 74.077193][ T4902] 9pnet_fd: p9_fd_create_tcp (4902): problem connecting socket to 127.0.0.1 [ 74.091848][ T4900] macvlan0: left promiscuous mode [ 74.209656][ T4900] »»»»»» speed is unknown, defaulting to 1000 [ 74.245365][ T4915] Cannot find del_set index 4 as target [ 74.252058][ T4911] loop4: detected capacity change from 0 to 1024 [ 74.282487][ T4911] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 74.303304][ T4911] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.327547][ T4900] »»»»»» speed is unknown, defaulting to 1000 [ 74.333788][ T4917] 9pnet_fd: p9_fd_create_tcp (4917): problem connecting socket to 127.0.0.1 [ 74.334491][ T4911] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 74.351491][ T4900] lo speed is unknown, defaulting to 1000 [ 74.376334][ T4911] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.404344][ T4922] block device autoloading is deprecated and will be removed. [ 74.419346][ T4911] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 74.431015][ T4911] EXT4-fs (loop4): Remounting filesystem read-only [ 74.437950][ T4911] EXT4-fs (loop4): 1 orphan inode deleted [ 74.439818][ T4928] __nla_validate_parse: 3 callbacks suppressed [ 74.439831][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 74.462918][ T4911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 74.513762][ T4911] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 74.544766][ T4911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.566215][ T4933] netlink: 'syz.2.372': attribute type 28 has an invalid length. [ 74.574043][ T4933] netlink: 'syz.2.372': attribute type 3 has an invalid length. [ 74.581721][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.372'. [ 74.758691][ T4944] 9pnet_fd: p9_fd_create_tcp (4944): problem connecting socket to 127.0.0.1 [ 74.853420][ T4941] 9pnet_fd: p9_fd_create_tcp (4941): problem connecting socket to 127.0.0.1 [ 74.874948][ T4950] netlink: 'syz.2.381': attribute type 13 has an invalid length. [ 74.893527][ T4956] netlink: 76 bytes leftover after parsing attributes in process `syz.4.383'. [ 74.947586][ T4950] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.955002][ T4950] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.969316][ T4950] batman_adv: batadv0: Interface deactivated: dummy0 [ 75.010121][ T4950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.022362][ T4950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.063419][ T4960] loop4: detected capacity change from 0 to 512 [ 75.070820][ T4950] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.079693][ T4950] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.088282][ T4950] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.096747][ T4950] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.114926][ T4960] EXT4-fs (loop4): orphan cleanup on readonly fs [ 75.132123][ T4960] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 75.161437][ T4960] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 75.176080][ T4960] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #13: comm syz.4.383: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 75.194788][ T4960] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.383: couldn't read orphan inode 13 (err -117) [ 75.215787][ T4960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.229263][ T4960] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.334198][ T4967] loop4: detected capacity change from 0 to 512 [ 75.349659][ T4967] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.386968][ T4967] EXT4-fs (loop4): 1 truncate cleaned up [ 75.404688][ T4967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.350317][ T4981] vlan0: entered allmulticast mode [ 76.442835][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.623587][ T4990] 9pnet_fd: p9_fd_create_tcp (4990): problem connecting socket to 127.0.0.1 [ 76.623788][ T4986] 9pnet_fd: p9_fd_create_tcp (4986): problem connecting socket to 127.0.0.1 [ 76.694588][ T5000] rdma_rxe: rxe_newlink: failed to add lo [ 76.701975][ T5000] siw: device registration error -23 [ 76.709380][ T5000] »»»»»»: renamed from lo [ 76.782808][ T5003] netlink: 'syz.0.395': attribute type 13 has an invalid length. [ 77.158831][ T5001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 77.163670][ T5015] xt_hashlimit: max too large, truncated to 1048576 [ 77.175183][ T5001] batman_adv: batadv0: Removing interface: dummy0 [ 77.175493][ T5015] Cannot find set identified by id 0 to match [ 77.188538][ T5001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.196974][ T5001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.206187][ T5001] bond0: (slave batadv0): Releasing backup interface [ 77.361235][ T5019] netlink: 'syz.3.400': attribute type 13 has an invalid length. [ 77.978614][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 78.102934][ T5045] hub 2-0:1.0: USB hub found [ 78.103250][ T5045] hub 2-0:1.0: 8 ports detected [ 78.414060][ T5048] netlink: 'syz.0.409': attribute type 13 has an invalid length. [ 78.611674][ T5055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.411'. [ 78.776286][ T5057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 78.785335][ T5057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.410'. [ 78.813249][ T5057] »»»»»» speed is unknown, defaulting to 1000 [ 78.859712][ T5057] »»»»»» speed is unknown, defaulting to 1000 [ 78.866375][ T5057] lo speed is unknown, defaulting to 1000 [ 79.363112][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 79.363127][ T29] audit: type=1326 audit(1737242640.506:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.408062][ T29] audit: type=1326 audit(1737242640.536:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.431812][ T29] audit: type=1326 audit(1737242640.536:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.455264][ T29] audit: type=1326 audit(1737242640.536:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.478610][ T29] audit: type=1326 audit(1737242640.546:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.502087][ T29] audit: type=1326 audit(1737242640.546:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.525482][ T29] audit: type=1326 audit(1737242640.546:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.549503][ T29] audit: type=1326 audit(1737242640.546:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.572905][ T29] audit: type=1326 audit(1737242640.546:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.579439][ T5069] netlink: 'syz.1.413': attribute type 150 has an invalid length. [ 79.596236][ T29] audit: type=1326 audit(1737242640.546:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5065 comm="syz.3.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 79.762191][ T5071] rdma_rxe: rxe_newlink: failed to add lo [ 79.769839][ T5071] »»»»»»: renamed from lo [ 80.051767][ T5075] tmpfs: Bad value for 'mpol' [ 80.218267][ T5075] loop4: detected capacity change from 0 to 1024 [ 80.226107][ T5075] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.237245][ T5075] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.247869][ T5075] JBD2: no valid journal superblock found [ 80.253620][ T5075] EXT4-fs (loop4): Could not load journal inode [ 81.383329][ T5116] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 81.411957][ T5116] »»»»»» speed is unknown, defaulting to 1000 [ 81.459336][ T5116] »»»»»» speed is unknown, defaulting to 1000 [ 81.465982][ T5116] »»»»»» speed is unknown, defaulting to 1000 [ 81.662552][ T5119] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 81.699442][ T5120] netlink: 'syz.4.429': attribute type 150 has an invalid length. [ 81.836386][ T5127] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 81.846184][ T5127] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 81.855739][ T5127] infiniband sz1: set active [ 81.860458][ T3435] »»»»»» speed is unknown, defaulting to 1000 [ 81.869839][ T3435] »»»»»» speed is unknown, defaulting to 1000 [ 81.876005][ T3435] »»»»»» speed is unknown, defaulting to 1000 [ 81.907964][ T5132] program syz.3.434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.311621][ T5148] Cannot find del_set index 4 as target [ 82.468841][ T5158] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 82.476711][ T5158] vlan1: entered allmulticast mode [ 82.612913][ T5165] IPVS: Error connecting to the multicast addr [ 83.129241][ T5175] netlink: 'syz.3.448': attribute type 150 has an invalid length. [ 83.156344][ T5177] loop4: detected capacity change from 0 to 512 [ 83.163957][ T5177] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.183769][ T5177] EXT4-fs (loop4): 1 truncate cleaned up [ 83.275903][ T5177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.428267][ T5187] 9pnet_virtio: no channels available for device 127.0.0.1 [ 84.149847][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.475923][ T5200] loop4: detected capacity change from 0 to 1024 [ 84.486755][ T5200] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.496757][ T5200] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.508609][ T5200] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 84.525602][ T5200] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.540517][ T5200] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 84.561017][ T5200] EXT4-fs (loop4): Remounting filesystem read-only [ 84.577640][ T5200] __quota_error: 277 callbacks suppressed [ 84.577656][ T5200] Quota error (device loop4): write_blk: dquota write failed [ 84.590954][ T5200] Quota error (device loop4): write_blk: dquota write failed [ 84.598380][ T5200] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 84.622413][ T5200] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 84.631324][ T5200] EXT4-fs (loop4): 1 orphan inode deleted [ 84.639771][ T5200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.652153][ T5200] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 84.659039][ T5200] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.694534][ T5215] 9pnet_fd: p9_fd_create_tcp (5215): problem connecting socket to 127.0.0.1 [ 84.704667][ T29] audit: type=1326 audit(1737242645.856:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 84.728188][ T29] audit: type=1326 audit(1737242645.856:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 84.751689][ T29] audit: type=1326 audit(1737242645.856:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 84.775057][ T29] audit: type=1326 audit(1737242645.856:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 84.798437][ T29] audit: type=1326 audit(1737242645.856:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 84.821835][ T29] audit: type=1326 audit(1737242645.856:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5213 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec77705d29 code=0x7ffc0000 [ 84.822086][ T5214] Cannot find del_set index 4 as target [ 85.025729][ T5220] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 85.035550][ T5220] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 85.127913][ T5225] 9pnet_fd: p9_fd_create_tcp (5225): problem connecting socket to 127.0.0.1 [ 85.866392][ T5246] 9pnet_virtio: no channels available for device 127.0.0.1 [ 86.280872][ T5257] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 86.295267][ T5261] 9pnet_fd: p9_fd_create_tcp (5261): problem connecting socket to 127.0.0.1 [ 86.311497][ T5259] syz.0.473[5259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.311587][ T5259] syz.0.473[5259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.324375][ T5259] syz.0.473[5259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.815655][ T5279] netlink: 'syz.2.480': attribute type 150 has an invalid length. [ 87.045262][ T5289] »»»»»» speed is unknown, defaulting to 1000 [ 87.076105][ T5289] »»»»»» speed is unknown, defaulting to 1000 [ 87.082556][ T5289] »»»»»» speed is unknown, defaulting to 1000 [ 87.915119][ T5268] 9pnet_fd: p9_fd_create_tcp (5268): problem connecting socket to 127.0.0.1 [ 88.316137][ T5293] SELinux: security_context_str_to_sid () failed with errno=-22 [ 88.610084][ T5305] 9pnet_virtio: no channels available for device 127.0.0.1 [ 88.992018][ T5320] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 89.296651][ T5330] netlink: 'syz.4.492': attribute type 150 has an invalid length. [ 89.398505][ T5331] pimreg: entered allmulticast mode [ 89.408186][ T5331] pimreg: left allmulticast mode [ 89.605975][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 89.606036][ T29] audit: type=1326 audit(1737242650.746:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 89.635843][ T29] audit: type=1326 audit(1737242650.746:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 89.659269][ T29] audit: type=1326 audit(1737242650.746:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 89.682640][ T29] audit: type=1326 audit(1737242650.746:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2feabb5d63 code=0x7ffc0000 [ 89.682666][ T29] audit: type=1326 audit(1737242650.756:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2feabb47df code=0x7ffc0000 [ 89.718521][ T29] audit: type=1326 audit(1737242650.816:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2feabb5db7 code=0x7ffc0000 [ 89.741846][ T5337] netlink: 224 bytes leftover after parsing attributes in process `syz.1.496'. [ 89.752561][ T29] audit: type=1326 audit(1737242650.816:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2feabb4690 code=0x7ffc0000 [ 89.784936][ T29] audit: type=1326 audit(1737242650.816:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2feabb498a code=0x7ffc0000 [ 89.784961][ T29] audit: type=1326 audit(1737242650.816:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 89.785039][ T29] audit: type=1326 audit(1737242650.816:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5333 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2feabb5d29 code=0x7ffc0000 [ 89.947494][ T5348] netlink: 1932 bytes leftover after parsing attributes in process `syz.1.499'. [ 89.956763][ T5348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 90.771711][ T5367] netlink: 'syz.2.504': attribute type 1 has an invalid length. [ 90.876108][ T5371] netlink: 'syz.0.505': attribute type 150 has an invalid length. [ 91.025738][ T5373] netlink: 'syz.1.506': attribute type 10 has an invalid length. [ 91.033824][ T5373] vlan1: entered allmulticast mode [ 91.147876][ T5381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.507'. [ 91.166494][ T5381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.507'. [ 91.192738][ T5381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.507'. [ 91.203795][ T5381] x_tables: duplicate underflow at hook 1 [ 91.273177][ T5389] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 91.323576][ T5391] syz.3.510[5391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.323682][ T5391] syz.3.510[5391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.335376][ T5391] syz.3.510[5391] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.617133][ T5394] »»»»»» speed is unknown, defaulting to 1000 [ 91.661626][ T5404] rdma_op ffff888120158d80 conn xmit_rdma 0000000000000000 [ 91.663340][ T5394] »»»»»» speed is unknown, defaulting to 1000 [ 91.675874][ T5394] »»»»»» speed is unknown, defaulting to 1000 [ 91.725670][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 91.756360][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.763475][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.770591][ T5394] bridge_slave_0: entered allmulticast mode [ 91.777109][ T5394] bridge_slave_0: entered promiscuous mode [ 91.783848][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.791074][ T5394] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.798549][ T5394] bridge_slave_1: entered allmulticast mode [ 91.805046][ T5394] bridge_slave_1: entered promiscuous mode [ 91.820521][ T5394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.830709][ T5394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.849517][ T5394] team0: Port device team_slave_0 added [ 91.856028][ T5394] team0: Port device team_slave_1 added [ 91.866643][ T5413] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 91.879135][ T5413] bond1: entered promiscuous mode [ 91.884373][ T5413] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.898100][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.905591][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.931540][ T5394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.943767][ T5394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.950802][ T5394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.976911][ T5394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.003190][ T5394] hsr_slave_0: entered promiscuous mode [ 92.009421][ T5394] hsr_slave_1: entered promiscuous mode [ 92.015369][ T5394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.022999][ T5394] Cannot create hsr debugfs directory [ 92.256542][ T5394] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.265329][ T5394] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.273960][ T5394] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.282493][ T5394] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.297471][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.304580][ T5394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.311854][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.318942][ T5394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.348543][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.360474][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.368512][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.380320][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.390401][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.397611][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.408215][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.415352][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.479215][ T5394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.559457][ T5394] veth0_vlan: entered promiscuous mode [ 92.568972][ T5394] veth1_vlan: entered promiscuous mode [ 92.572308][ T5443] xt_hashlimit: max too large, truncated to 1048576 [ 92.582261][ T5443] Cannot find set identified by id 0 to match [ 92.588225][ T5394] veth0_macvtap: entered promiscuous mode [ 92.597282][ T5394] veth1_macvtap: entered promiscuous mode [ 92.609701][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.620910][ T5394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.630318][ T5394] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.639089][ T5394] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.647909][ T5394] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.656655][ T5394] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.701709][ T5446] block device autoloading is deprecated and will be removed. [ 92.943800][ T5461] netlink: 'syz.0.524': attribute type 150 has an invalid length. [ 93.127439][ T5464] 9pnet_virtio: no channels available for device 127.0.0.1 [ 93.433359][ T5471] 9pnet_fd: p9_fd_create_tcp (5471): problem connecting socket to 127.0.0.1 [ 93.583868][ T5482] xt_hashlimit: max too large, truncated to 1048576 [ 93.591773][ T5482] Cannot find set identified by id 0 to match [ 93.728005][ T5488] netlink: 'syz.2.535': attribute type 27 has an invalid length. [ 93.730354][ T5487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.746860][ T5487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.767783][ T5488] team_slave_0: left promiscuous mode [ 93.773303][ T5488] team_slave_0: left allmulticast mode [ 93.779973][ T5488] vlan1: left allmulticast mode [ 93.785726][ T5488] bridge1: left promiscuous mode [ 93.854984][ T5488] bond1: left promiscuous mode [ 93.872642][ T5495] IPVS: Error connecting to the multicast addr [ 93.917134][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.934736][ T5492] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.980397][ T5492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.038678][ T5503] 9pnet_fd: p9_fd_create_tcp (5503): problem connecting socket to 127.0.0.1 [ 94.079015][ T5506] ================================================================== [ 94.087652][ T5506] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 94.094453][ T5506] [ 94.096780][ T5506] write to 0xffff8881194f3ab8 of 8 bytes by task 5505 on cpu 1: [ 94.105620][ T5506] vms_clear_ptes+0x1a7/0x300 [ 94.110296][ T5506] vms_complete_munmap_vmas+0x16c/0x470 [ 94.115841][ T5506] do_vmi_align_munmap+0x344/0x390 [ 94.121139][ T5506] do_vmi_munmap+0x1eb/0x230 [ 94.125833][ T5506] __vm_munmap+0xfd/0x220 [ 94.130166][ T5506] __x64_sys_munmap+0x36/0x40 [ 94.134845][ T5506] x64_sys_call+0xe14/0x2dc0 [ 94.139645][ T5506] do_syscall_64+0xc9/0x1c0 [ 94.144410][ T5506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.150330][ T5506] [ 94.152753][ T5506] read to 0xffff8881194f3ab8 of 8 bytes by task 5506 on cpu 0: [ 94.160295][ T5506] getrusage+0xa24/0xb80 [ 94.164539][ T5506] io_sq_thread+0x5ea/0x10d0 [ 94.169131][ T5506] ret_from_fork+0x4b/0x60 [ 94.173538][ T5506] ret_from_fork_asm+0x1a/0x30 [ 94.178293][ T5506] [ 94.180603][ T5506] value changed: 0x00000000000014c5 -> 0x00000000000016b7 [ 94.187718][ T5506] [ 94.190028][ T5506] Reported by Kernel Concurrency Sanitizer on: [ 94.196170][ T5506] CPU: 0 UID: 0 PID: 5506 Comm: iou-sqp-5505 Not tainted 6.13.0-rc7-syzkaller-00191-gfda5e3f28400 #0 [ 94.207047][ T5506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 94.217093][ T5506] ================================================================== [ 95.847015][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 95.847031][ T29] audit: type=1400 audit(1737242912.997:4687): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.877627][ T29] audit: type=1400 audit(1737242912.997:4688): avc: denied { open } for pid=3296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 95.901937][ T29] audit: type=1400 audit(1737242912.997:4689): avc: denied { ioctl } for pid=3296 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=549 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1