last executing test programs: 4.562269009s ago: executing program 0 (id=266): perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x56, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2778, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$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") r8 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r8, 0x40085203, &(0x7f0000000000)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) rmdir(0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 4.232947521s ago: executing program 0 (id=267): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') lseek(r1, 0x7fffffffffffffff, 0x0) shutdown(r1, 0x0) lseek(r1, 0x67, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000580)=@urb_type_control={0x2, {0xd}, 0x3e554d16, 0x4, &(0x7f00000002c0)={0x5, 0x5, 0xeda6, 0x8, 0x212a}, 0x8, 0x3, 0x2, 0x0, 0x2, 0x8b, &(0x7f0000000f40)="8882bf49fe25944e658021359139b47e68e629ac1c47bbdd8538e3ad8ce6fba791b654223867f7ffc87e783d80ef0b7532f28457f15e0e19033653f8bd5b581c2c86820bb93154eaa2c4ea20127f25a9b2fd3392f4054be7a3cae08c5c0b89dc70e7e8df15425d24426d4b5a0e923538e357137cb35849ef61fbb2435a5b3f567ac231a12aa2a5512c35784b9c21c11496dbe6bf9ef9ea09e06d6dc58ebfaf8093ae7644c69c15e69d1ab75f55"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000480)={[{@journal_checksum}, {@errors_continue}]}, 0x0, 0x4fa, &(0x7f0000000a40)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x169341, 0x0) getrandom(&(0x7f00000000c0)=""/62, 0x3e, 0x2) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, "ff011f0000024c7f7e5c7000"}) r3 = syz_open_pts(r2, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) socket$key(0xf, 0x3, 0x2) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 3.367670785s ago: executing program 0 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080), 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioprio_get$pid(0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) sendmsg$nl_route(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@ipv4_getaddr={0x28, 0x16, 0x300, 0x70bd27, 0x25dfdbfe, {0x2, 0x10, 0x15, 0xc8}, [@IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008044}, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000200)="ae", 0x1, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000040)={0x0, 0xfffffffffffffe1a}) ioctl$MON_IOCX_GETX(r6, 0x80089203, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) msgctl$IPC_SET(0x0, 0x1, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000180)=0x3f80000000000) 2.707215598s ago: executing program 2 (id=277): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a19000007000000080300000c00000400000000bae050e6cdf04a3e588bb52fb9f1d16382b96eb6d9a13f086a92b77b2f0bcd6a684dfd81bf8a576a4dfa3f37639948ecc87e6d7b97a4cbf1347efed61be79d1ab8fa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='ext4_mb_release_inode_pa\x00', r3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_pts(r4, 0x0) r6 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r4, 0x7c593000) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r9 = dup3(r6, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11) ioctl$TCSETSW2(r9, 0x5437, 0x0) 2.620658268s ago: executing program 4 (id=280): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x9, 0x1, &(0x7f0000000400)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendfile(r1, r2, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000c2cf5aeda86c219b7e6100000000"], 0x48) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000480)=0xe3, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0xff000000, 0xff, 'vcan0\x00', 'wg0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xca, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0xff000000, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x84}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2aa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 2.492105108s ago: executing program 3 (id=282): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = epoll_create1(0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001200010a28bd7000fddbdf25800000000a00f50058444453535431d7"], 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="11b8b90b0a0ff3b600000100000008000100", @ANYRES32=r4, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003"], 0x60}, 0x1, 0xf000}, 0x0) socket(0x18, 0x6, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000100)={0xa000000d}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fchdir(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) unshare(0x40040000) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) renameat2(r8, &(0x7f0000000380)='./file0\x00', r8, &(0x7f0000000200)='./bus\x00', 0x0) 2.402180359s ago: executing program 0 (id=283): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0xb7, 0x4, 0x37, 0x0, 0x8001, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2000000, 0x2, @perf_config_ext={0x6, 0x4}, 0x4000, 0xe1, 0x80000000, 0x7, 0x4, 0xb96, 0x10, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0x5, r4, 0x1) write$UHID_CREATE2(r4, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r5, 0x2284, &(0x7f0000000000)) setsockopt(r0, 0x84, 0x80, &(0x7f0000000240)="1a00", 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = getuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r6, &(0x7f00000000c0)={0x19f, 0xffffffff, 0x1}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x1000}) 2.401672939s ago: executing program 1 (id=284): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000b80)={0xffffffffffff7eff, 0x60000, 0x2, 0x1}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) modify_ldt$write(0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) acct(&(0x7f0000000200)='./file0\x00') ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={0x0}) add_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="9fb7b892a5501474c6e29fcfc2c4307960b7fdf736dbe4cbb94709752e", 0x1d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r4, &(0x7f0000000380)='./file0\x00', r4, &(0x7f0000000200)='./bus\x00', 0x0) 2.366868609s ago: executing program 2 (id=285): fsmount(0xffffffffffffffff, 0x1, 0x36) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x20001}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x20, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r6, 0x0, 0x400000}, 0x18) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x40018000, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_emit_ethernet(0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 2.08553725s ago: executing program 1 (id=287): set_mempolicy(0x3, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001800)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000001fc0)=""/4086, 0xff6) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x2210808, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000001780)="61dabe0a3cf3d8a980691eee1dd6a198cb8fb1c89cb5e7684c68222ce401c26dc7d784f9aa44e952590260c660c9003df31e00000000000000001904000000d2dab436d5", 0x44, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x43, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b005025d94e77df8b0080000000000000000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000400"/28], 0x50) msgget$private(0x0, 0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000840)={[{@orlov}, {@grpjquota}, {@errors_remount}]}, 0x1, 0x4af, &(0x7f00000012c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x31}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) chdir(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$kcm(0x21, 0x2, 0x2) mount$nfs(&(0x7f0000000600)='$:](\\-$+\x00', &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x202088, &(0x7f0000000740)={[{'\x15'}, {'map_files\x00'}, {'\x00'}, {}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1.755782092s ago: executing program 4 (id=288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x181900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="7800000010000305000000000000000000cf0100", @ANYRES32=0x0, @ANYBLOB="83000000000000002000128008000100677265001400028008000700e0"], 0x78}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r8) 1.754352282s ago: executing program 3 (id=289): r0 = socket(0x10, 0x3, 0x9) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) fchmod(0xffffffffffffffff, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x3fb, 0x8, 0x70bd27, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24880}, 0x20008851) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) lseek(0xffffffffffffffff, 0x1c17, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getrlimit(0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) 1.718159602s ago: executing program 2 (id=290): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x20004801) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x8004745a, 0x2000000c) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x16, "cd2cf7680800000100f200a0fc380e43c96d22"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000000000000000000000000000180100202020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7e7ffff07000000b70300000000004eb10cb200700000009516f53bea565da666bf1b4bb02fdc34defa7d8d1e3d30c7656a62d1fd8588ccd1fca86f0870cad3c28f412f3f871b82224e6d5bf80be3356c652d1713ee0ab793cc2368d250718b5a09cc37de1eed52203fbb37515a08b8c06d948c78347d3c286241a3be8b64abb69f00cc2e8661d6ff1e69e03295367b1e90a1136acbd028b0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.619071122s ago: executing program 1 (id=291): sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000940)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) linkat(0xffffffffffffffff, &(0x7f0000002140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYBLOB="1bffffffffffff000ae0feff000000000000", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x4008004) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r3, r3, 0x0, 0xfffe80) 1.468547743s ago: executing program 3 (id=292): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000011000000000000000000a22a30456b880000145b41fe69e3ffff78616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000800000000000000b100000067010000900100007374617469737469630000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000646e61740000060000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000bb8e66505c1aa6d062c3b52cffffffff000000006e666c6f670000000000000000000000000000000000000050000000121b6eb244c4f0fffbf04a000000007e4b000022569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aeea768e825383d2afb577ed2bb6dd99fd43741089cca6edb0041555449540000000000000000000000000626967e000000000000000000000008000000000000200000000000000000840200"/544]}, 0x298) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000002c0)=ANY=[@ANYRES8], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) rmdir(0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x9, 0x0, 0x7fff, 0x0, 0x4}) 1.420966533s ago: executing program 4 (id=293): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095", @ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r7, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x197, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc0105303, &(0x7f0000000440)) tkill(r6, 0x7) socket$netlink(0x10, 0x3, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsmount(r3, 0x1, 0x70) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1205, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x783) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettaction={0x98, 0x32, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x400000}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffc}}]}]}, 0x98}}, 0x0) write$binfmt_misc(r4, &(0x7f0000000140), 0x4240a2ca) 1.340192503s ago: executing program 3 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe065) 1.322116234s ago: executing program 0 (id=295): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095", @ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r7, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x197, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc0105303, &(0x7f0000000440)) tkill(r6, 0x7) socket$netlink(0x10, 0x3, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsmount(r3, 0x1, 0x70) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1205, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x783) write$binfmt_misc(r4, &(0x7f0000000140), 0x4240a2ca) 1.254732764s ago: executing program 1 (id=296): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000180), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="250000000000000000000100000000000000014100000018001700"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x14, r5, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000000206050000000000000000000000000010000300686173683a69702c6d61630005000400000000000900020073797a30000000000c00010100001500fc00000005000500020000000500010006000000"], 0x54}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000280)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000680)={r3, 0xffffffffffffffff, 0x37, 0x0, @val=@target_btf_id=r9}, 0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x2) 1.253577924s ago: executing program 3 (id=306): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x90, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x90}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = io_uring_setup(0x7975, &(0x7f00000002c0)={0x0, 0x659, 0x40, 0x1, 0x328}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x564a0000) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000400)=[@ioring_restriction_register_op={0x0, 0x10}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 864.410306ms ago: executing program 2 (id=297): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2d) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x74) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) setregid(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x208600, 0x20) chdir(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x3}}, {@abort}, {@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@dioread_lock}, {@dioread_lock}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x565, &(0x7f0000001080)="$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") 863.532455ms ago: executing program 1 (id=308): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') lseek(r1, 0x7fffffffffffffff, 0x0) shutdown(r1, 0x0) lseek(r1, 0x67, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000580)=@urb_type_control={0x2, {0xd}, 0x3e554d16, 0x4, &(0x7f00000002c0)={0x5, 0x5, 0xeda6, 0x8, 0x212a}, 0x8, 0x3, 0x2, 0x0, 0x2, 0x8b, &(0x7f0000000f40)="8882bf49fe25944e658021359139b47e68e629ac1c47bbdd8538e3ad8ce6fba791b654223867f7ffc87e783d80ef0b7532f28457f15e0e19033653f8bd5b581c2c86820bb93154eaa2c4ea20127f25a9b2fd3392f4054be7a3cae08c5c0b89dc70e7e8df15425d24426d4b5a0e923538e357137cb35849ef61fbb2435a5b3f567ac231a12aa2a5512c35784b9c21c11496dbe6bf9ef9ea09e06d6dc58ebfaf8093ae7644c69c15e69d1ab75f55"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000480)={[{@journal_checksum}, {@errors_continue}]}, 0x0, 0x4fa, &(0x7f0000000a40)="$eJzs3ctvVNUfAPDv3GlLC/TX/vDJw1BFY+OjpeW5cKPRhI2JicbgztoWghRqaE2ANLYag0vD0pW69F9wpRtiXGncanBJTIjpBnRhrrkzd8pMZ/qeMpZ+PsmUc+89955z7rmncx7MNIBtqy/7UYjYHRG/RkRPebM2Ql/5n7vzM6N/zc+MFiJN3/yzUIp3Z35mtBK1ct6ufKM/iUg+LcT+BulOFSNiYmL8Ur49OH3hg8GpK1dfPHdh5Ox4MS4Onzx59EjXiePDx5pSzu4sr/s+mjyw99Q7118fPX39vfaa49XlKOtdYwrFRTcuu2d98Xuapo1iP7PGq//XdVeFC20tzAhrkjXDrLraS+2/J4pxr/J64rVPWpo5YFOlaZruqNtbrATm0ook0rRQKJ8APCAKmjRsU5U3+jvz2eB1ZrR+HBwR725qF6Slbr9cHgBl5b6bv8pH2iLJxvC95bFRsknpPxwRp+f+/jJ7RcN5CACA5vou6/+8UO53VF7lI0k8Wol0a+dkZRWmNyL+HxF7IuKhvP/ySN6LfCwiHq+5+myDFL+o6Ur1LTpa3//5uWv9pVtZ1v97KV/bqu3/LWTzZme+1V0qf3vhzLmJ8cMR8b+I6I/2Hdn2UP2lF6bVvn/1l8+XSr+vqv+XvbL0K33BPB9/tC2aoBsbmR7ZaLkrbn9cmtKbrS9/LKwEZCODvRGxby0Xzp+J7J6de+6bA1VHahbeVi7/MpqwzpR+HfFsuf7noqb85cW8jjxUuz55dry8Pjl04vjwscHOmBg/PFh5Kur9+NO1N/Jg++JjGyp/E2T1v7Ph87+wmNmbhaauXD0/MjExfmlqrSkU49pvny05plnv899ReKsU7sj3XR6Znr40FNFRmKvfP3zv3MsjXTXxs/L3H2rc/vdE/PNVft7+iMge4ify338H87w/GRFPRcShZe7AD688/X6jul9N+TuXuW4zZOUfW1P9rz1QPH/j26XSX139Hy2F+vM9YyPTK96W1WZwI/cOAAAAtoqDEbE7CslAPse5O5JkYCBi18IMytT082cmP7w4Vv6MQG+0J5WZrp6q+dChfG44287OGq7azo4fKc2bpGmadpW2B0YnJ7pbW3TY9nYt0f4zt4qtzh2w6dqqfq6osLl5Ae6v9a+jN/xsK7CFLN/+G3+AHdjySkP8hu3flzjAtrDqpt7wvzACW1mj9j8bcbcFWQHus0bt/+3lTrhhZRAeFIb6sH2tu/2faW4+gPvP+z9sSxv5XP9ygT2nqvfsT2riFNo2J9GlA0ks/y0AveU/RrD6C95MIpqTw2JTS9q1ijrtjGakFcmKcdoafBFD26q/mmGTAkl2f5JWpd4osCMiVnh6Fx622Urgal3k7DJNzFirfzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0x78BAAD//3yV2y4=") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x169341, 0x0) getrandom(&(0x7f00000000c0)=""/62, 0x3e, 0x2) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, "ff011f0000024c7f7e5c7000"}) r3 = syz_open_pts(r2, 0x0) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 486.076387ms ago: executing program 4 (id=298): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a19000007000000080300000c00000400000000bae050e6cdf04a3e588bb52fb9f1d16382b96eb6d9a13f086a92b77b2f0bcd6a684dfd81bf8a576a4dfa3f37639948ecc87e6d7b97a4cbf1347efed61be79d1ab8fa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='ext4_mb_release_inode_pa\x00', r3}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_pts(r4, 0x0) r6 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r4, 0x7c593000) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r9 = dup3(r6, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11) ioctl$TCSETSW2(r9, 0x5437, 0x0) 416.175508ms ago: executing program 0 (id=299): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0x9, 0x1, &(0x7f0000000400)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendfile(r1, r2, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000c2cf5aeda86c219b7e6100000000"], 0x48) r6 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000480)=0xe3, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) setxattr$security_selinux(&(0x7f0000000340)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000400)='system_u:object_r:system_dbusd_var_run_t:s0\x00', 0x2c, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0xff000000, 0xff, 'vcan0\x00', 'wg0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xca, 'netbios-ns\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0xff000000, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x84}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2aa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, 0x0, 0x0) sendmmsg$inet6(r8, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}], 0x1, 0x0) 303.920818ms ago: executing program 4 (id=300): bpf$MAP_CREATE(0x0, 0x0, 0x0) llistxattr(0x0, 0x0, 0x0) unshare(0x22020400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)='cpuset\x00'}, 0x30) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_udplite(0xa, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) unshare(0x69a04c8e98d914be) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x1}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 302.997649ms ago: executing program 3 (id=312): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095", @ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r7, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000040)={0x197, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r7, 0xc0105303, &(0x7f0000000440)) tkill(r6, 0x7) socket$netlink(0x10, 0x3, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsmount(r3, 0x1, 0x70) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1205, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, r8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x3) write$binfmt_misc(r4, &(0x7f0000000140), 0x4240a2ca) 279.368459ms ago: executing program 2 (id=301): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040), 0x10) 243.944448ms ago: executing program 4 (id=302): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x1b, 0x5, 0x460, 0x2f8, 0x1d0, 0xffffffff, 0x1d0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, &(0x7f00000001c0), {[{{@ip={@remote, @empty, 0xff, 0xff000000, 'ip6_vti0\x00', 'geneve1\x00', {0xff}, {0xff}, 0xe7, 0x0, 0x20}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@icmp={{0x28}, {0x3, "fa7c"}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0x6, {0x4a}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x2b7391f786e993fa, "99f6", 0x1}}, @common=@unspec=@connlabel={{0x28}, {0x1000, 0x2}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @private=0xa010102, @port=0x4e22, @port=0x4e22}}}}, {{@ip={@multicast1, @loopback, 0xff, 0xffffffff, 'rose0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x5, 0x6, 0x2}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x1, 0x0, 0x1}}, @common=@addrtype={{0x30}, {0x1, 0x2, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x19, @loopback, @empty, @gre_key=0x9017, @port=0x4e21}}}}, {{@ip={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0xff, 'nr0\x00', 'pimreg1\x00', {}, {}, 0x89, 0x3, 0xf43ab658282afd63}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x5, @rand_addr=0x64010101, @local, @port=0x4e23, @port=0x4e21}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) sigaltstack(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x13, &(0x7f0000000500)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x100000001}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@noload}, {@data_writeback}]}, 0x1, 0x631, &(0x7f0000001940)="$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") 116.305689ms ago: executing program 2 (id=303): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) read(r0, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x197, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f0000000440)) 0s ago: executing program 1 (id=304): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_getevents(0x0, 0x100000000000006, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008042, &(0x7f0000000c00)={[{@norecovery}, {@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000240)='./file1\x00', 0x3200010, &(0x7f0000000c00)=ANY=[], 0x3, 0x7b9, &(0x7f0000001d80)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe065) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) kernel console output (not intermixed with test programs): [ 21.060578][ T29] audit: type=1400 audit(1733192905.041:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.43' (ED25519) to the list of known hosts. [ 26.884144][ T29] audit: type=1400 audit(1733192910.871:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.885400][ T3288] cgroup: Unknown subsys name 'net' [ 26.906954][ T29] audit: type=1400 audit(1733192910.871:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.934451][ T29] audit: type=1400 audit(1733192910.901:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.092103][ T3288] cgroup: Unknown subsys name 'cpuset' [ 27.098314][ T3288] cgroup: Unknown subsys name 'rlimit' [ 27.268950][ T29] audit: type=1400 audit(1733192911.251:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.292756][ T29] audit: type=1400 audit(1733192911.251:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.313357][ T29] audit: type=1400 audit(1733192911.251:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.322292][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.333730][ T29] audit: type=1400 audit(1733192911.251:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.362751][ T29] audit: type=1400 audit(1733192911.261:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.387573][ T29] audit: type=1400 audit(1733192911.261:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.410836][ T29] audit: type=1400 audit(1733192911.331:91): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.440599][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.534852][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.555801][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.615687][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 28.688421][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.695622][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.703025][ T3306] bridge_slave_0: entered allmulticast mode [ 28.709358][ T3306] bridge_slave_0: entered promiscuous mode [ 28.718297][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.725388][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.732575][ T3306] bridge_slave_1: entered allmulticast mode [ 28.738942][ T3306] bridge_slave_1: entered promiscuous mode [ 28.751844][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.793970][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.807948][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.815112][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.822368][ T3297] bridge_slave_0: entered allmulticast mode [ 28.828854][ T3297] bridge_slave_0: entered promiscuous mode [ 28.839869][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.847002][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.854284][ T3299] bridge_slave_0: entered allmulticast mode [ 28.860766][ T3299] bridge_slave_0: entered promiscuous mode [ 28.868214][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.877451][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.884629][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.891836][ T3299] bridge_slave_1: entered allmulticast mode [ 28.898205][ T3299] bridge_slave_1: entered promiscuous mode [ 28.908683][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.915796][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.923087][ T3297] bridge_slave_1: entered allmulticast mode [ 28.929403][ T3297] bridge_slave_1: entered promiscuous mode [ 28.987552][ T3306] team0: Port device team_slave_0 added [ 28.994361][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.004809][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.016443][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.030910][ T3306] team0: Port device team_slave_1 added [ 29.042508][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.056412][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.065074][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.072165][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.079424][ T3298] bridge_slave_0: entered allmulticast mode [ 29.085977][ T3298] bridge_slave_0: entered promiscuous mode [ 29.120176][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.127274][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.134589][ T3298] bridge_slave_1: entered allmulticast mode [ 29.140972][ T3298] bridge_slave_1: entered promiscuous mode [ 29.147567][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.154664][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.180596][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.191820][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.198774][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.224745][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.236154][ T3299] team0: Port device team_slave_0 added [ 29.242657][ T3297] team0: Port device team_slave_0 added [ 29.249007][ T3299] team0: Port device team_slave_1 added [ 29.263770][ T3297] team0: Port device team_slave_1 added [ 29.282776][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.294191][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.328994][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.336089][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.362040][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.373288][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.380238][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.406289][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.430379][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.437376][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.463324][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.474471][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.481446][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.507371][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.524036][ T3306] hsr_slave_0: entered promiscuous mode [ 29.530063][ T3306] hsr_slave_1: entered promiscuous mode [ 29.537499][ T3298] team0: Port device team_slave_0 added [ 29.546224][ T3298] team0: Port device team_slave_1 added [ 29.554056][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.561172][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.568256][ T3303] bridge_slave_0: entered allmulticast mode [ 29.574674][ T3303] bridge_slave_0: entered promiscuous mode [ 29.606818][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.613942][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.621416][ T3303] bridge_slave_1: entered allmulticast mode [ 29.627905][ T3303] bridge_slave_1: entered promiscuous mode [ 29.660159][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.667162][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.693148][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.705095][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.715357][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.726347][ T3297] hsr_slave_0: entered promiscuous mode [ 29.732486][ T3297] hsr_slave_1: entered promiscuous mode [ 29.738365][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.745941][ T3297] Cannot create hsr debugfs directory [ 29.758922][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.765939][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.791875][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.820626][ T3299] hsr_slave_0: entered promiscuous mode [ 29.827180][ T3299] hsr_slave_1: entered promiscuous mode [ 29.833198][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.841026][ T3299] Cannot create hsr debugfs directory [ 29.852056][ T3303] team0: Port device team_slave_0 added [ 29.867229][ T3303] team0: Port device team_slave_1 added [ 29.904902][ T3298] hsr_slave_0: entered promiscuous mode [ 29.911179][ T3298] hsr_slave_1: entered promiscuous mode [ 29.917086][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.924865][ T3298] Cannot create hsr debugfs directory [ 29.943911][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.951044][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.976972][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.999173][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.006188][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.032098][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.102211][ T3303] hsr_slave_0: entered promiscuous mode [ 30.108124][ T3303] hsr_slave_1: entered promiscuous mode [ 30.113997][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.121628][ T3303] Cannot create hsr debugfs directory [ 30.168320][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.178822][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.200775][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.217521][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.243657][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.264645][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.277163][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.288501][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.305670][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.314591][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.323072][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.337677][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.369452][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.379114][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.389699][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.407695][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.427415][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.436728][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.445997][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.455756][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.504163][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.527082][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.550550][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.559760][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.580603][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.587788][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.598764][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.608079][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.623346][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.630447][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.639018][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.646123][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.663810][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.671048][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.681434][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.688493][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.710817][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.717921][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.732337][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.746448][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.766689][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.783628][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.790712][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.804094][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.811179][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.823399][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.830766][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.843659][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.856710][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.883773][ T1757] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890970][ T1757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.906764][ T1757] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.913885][ T1757] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.988990][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.002721][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.047609][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.075126][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.125963][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.149069][ T3306] veth0_vlan: entered promiscuous mode [ 31.165834][ T3306] veth1_vlan: entered promiscuous mode [ 31.207079][ T3297] veth0_vlan: entered promiscuous mode [ 31.224365][ T3306] veth0_macvtap: entered promiscuous mode [ 31.233644][ T3297] veth1_vlan: entered promiscuous mode [ 31.244403][ T3306] veth1_macvtap: entered promiscuous mode [ 31.257883][ T3297] veth0_macvtap: entered promiscuous mode [ 31.281777][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.289758][ T3297] veth1_macvtap: entered promiscuous mode [ 31.301643][ T3298] veth0_vlan: entered promiscuous mode [ 31.312305][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.323401][ T3306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.332214][ T3306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.341002][ T3306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.349800][ T3306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.365826][ T3298] veth1_vlan: entered promiscuous mode [ 31.382529][ T3298] veth0_macvtap: entered promiscuous mode [ 31.389301][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.399872][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.410527][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.425240][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.435808][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.447366][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.456415][ T3299] veth0_vlan: entered promiscuous mode [ 31.463385][ T3298] veth1_macvtap: entered promiscuous mode [ 31.476996][ T3299] veth1_vlan: entered promiscuous mode [ 31.485509][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.494446][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.503216][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.511966][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.537723][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.548339][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.558219][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.568749][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.572224][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.579818][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.610938][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.621476][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.631317][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.641765][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.652363][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.661949][ T3299] veth0_macvtap: entered promiscuous mode [ 31.668835][ T3299] veth1_macvtap: entered promiscuous mode [ 31.676438][ T3303] veth0_vlan: entered promiscuous mode [ 31.685003][ T3303] veth1_vlan: entered promiscuous mode [ 31.697808][ T3298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.706634][ T3298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.715400][ T3298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.716870][ T3437] loop2: detected capacity change from 0 to 512 [ 31.724140][ T3298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.737117][ T3437] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.752143][ T3437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.764795][ T3437] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.3: bad orphan inode 131083 [ 31.776087][ T3437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.778775][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.798627][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.803085][ T3437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.808607][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.827705][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.837540][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.848118][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.860058][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.877773][ T3303] veth0_macvtap: entered promiscuous mode [ 31.889866][ T3440] usb usb4: usbfs: process 3440 (syz.2.3) did not claim interface 0 before use [ 31.904317][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.914931][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.924834][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.935484][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.935996][ T3437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.945439][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.964548][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.975828][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.991182][ T3299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.999933][ T3299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.008682][ T3299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.017481][ T3299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.033698][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 32.033716][ T29] audit: type=1400 audit(1733192916.021:133): avc: denied { perfmon } for pid=3443 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.060481][ T29] audit: type=1400 audit(1733192916.021:134): avc: denied { map_read map_write } for pid=3443 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.087704][ T29] audit: type=1326 audit(1733192916.021:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.110934][ T29] audit: type=1326 audit(1733192916.021:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.134014][ T29] audit: type=1326 audit(1733192916.021:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.157185][ T29] audit: type=1326 audit(1733192916.021:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.180303][ T29] audit: type=1326 audit(1733192916.021:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.203392][ T29] audit: type=1326 audit(1733192916.021:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.226519][ T29] audit: type=1326 audit(1733192916.021:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.249590][ T29] audit: type=1326 audit(1733192916.021:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3443 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 32.275488][ T3303] veth1_macvtap: entered promiscuous mode [ 32.293609][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.304136][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.314076][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.324739][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.334716][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.334735][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.334749][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.334765][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.335718][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.395774][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.406363][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.416340][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.426807][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.436817][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.447623][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.457498][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.468273][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.479306][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.479314][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.497037][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.505893][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.515008][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523805][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.545168][ T3451] loop3: detected capacity change from 0 to 512 [ 32.579550][ T3451] EXT4-fs: Ignoring removed orlov option [ 32.587349][ T3451] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.644262][ T3456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 32.674036][ T3451] EXT4-fs (loop3): 1 orphan inode deleted [ 32.679837][ T3451] EXT4-fs (loop3): 1 truncate cleaned up [ 32.689847][ T3451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.815907][ T3459] veth0_to_team: entered promiscuous mode [ 32.821803][ T3459] veth0_to_team: entered allmulticast mode [ 32.914598][ T3462] loop4: detected capacity change from 0 to 1024 [ 32.957181][ T3465] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8'. [ 32.980488][ T3462] EXT4-fs: Ignoring removed orlov option [ 32.986456][ T3462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.096186][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.135983][ T3462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.246042][ T3470] syz.4.5 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 33.521714][ T3474] SELinux: Context Ü is not valid (left unmapped). [ 33.573803][ T3476] smc: net device bond0 applied user defined pnetid SYZ0 [ 33.574816][ T3453] kexec: Could not allocate swap buffer [ 33.586792][ T3476] can0: slcan on pts0. [ 33.606056][ T3479] dccp_invalid_packet: P.Data Offset(100) too large [ 33.630727][ T3478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 33.655095][ T3479] loop0: detected capacity change from 0 to 512 [ 33.678978][ T3482] loop2: detected capacity change from 0 to 4096 [ 33.690849][ T3479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.707677][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.714081][ T3482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.762608][ T3479] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.776164][ T3476] can0 (unregistered): slcan off pts0. [ 33.783067][ T3479] EXT4-fs (loop0): 1 truncate cleaned up [ 33.801393][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.878718][ T3493] pim6reg: entered allmulticast mode [ 33.894237][ T3474] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.11: inode #1073372648: comm syz.0.11: iget: illegal inode # [ 33.916211][ T3494] loop1: detected capacity change from 0 to 2048 [ 33.930256][ T3494] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 33.940294][ T3474] EXT4-fs error (device loop0): ext4_xattr_inode_iget:445: comm syz.0.11: error while reading EA inode 1073372648 err=-117 [ 33.973000][ T3474] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #15: comm syz.0.11: corrupted xattr block 33: invalid header [ 34.005312][ T3474] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 34.056790][ T3513] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 34.083114][ T3507] loop4: detected capacity change from 0 to 512 [ 34.106395][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.172053][ T3507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.191232][ T3507] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.206477][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16'. [ 34.449791][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.475154][ T3534] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.487525][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.488734][ T3534] lo speed is unknown, defaulting to 1000 [ 34.505479][ T3534] lo speed is unknown, defaulting to 1000 [ 34.511673][ T3534] lo speed is unknown, defaulting to 1000 [ 34.529595][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 34.554466][ T3534] infiniband syz0: set active [ 34.559209][ T3534] infiniband syz0: added lo [ 34.563796][ T3378] lo speed is unknown, defaulting to 1000 [ 34.571607][ T3534] RDS/IB: syz0: added [ 34.576178][ T3534] smc: adding ib device syz0 with port count 1 [ 34.583671][ T3534] smc: ib device syz0 port 1 has pnetid [ 34.589717][ T3461] lo speed is unknown, defaulting to 1000 [ 34.595779][ T3534] lo speed is unknown, defaulting to 1000 [ 34.627013][ T3534] lo speed is unknown, defaulting to 1000 [ 34.658289][ T3534] lo speed is unknown, defaulting to 1000 [ 34.693781][ T3534] lo speed is unknown, defaulting to 1000 [ 34.711992][ T3541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.721393][ T3541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.737321][ T3534] lo speed is unknown, defaulting to 1000 [ 34.801035][ T3534] syz.2.18 (3534) used greatest stack depth: 10720 bytes left [ 34.922333][ T3547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22'. [ 35.056260][ T3550] loop0: detected capacity change from 0 to 512 [ 35.064360][ T3550] ======================================================= [ 35.064360][ T3550] WARNING: The mand mount option has been deprecated and [ 35.064360][ T3550] and is ignored by this kernel. Remove the mand [ 35.064360][ T3550] option from the mount to silence this warning. [ 35.064360][ T3550] ======================================================= [ 35.116790][ T3553] Illegal XDP return value 4291362816 on prog (id 25) dev N/A, expect packet loss! [ 35.118411][ T3550] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.23: corrupted xattr block 95: invalid header [ 35.141394][ T3550] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.23: bg 0: block 7: invalid block bitmap [ 35.155482][ T3550] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 35.165109][ T3550] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.23: corrupted xattr block 95: invalid header [ 35.171451][ T3553] loop3: detected capacity change from 0 to 4096 [ 35.180366][ T3550] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 35.194252][ T3550] EXT4-fs (loop0): 1 orphan inode deleted [ 35.201417][ T3550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.214934][ T3553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.228139][ T3553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.285020][ T3558] loop3: detected capacity change from 0 to 512 [ 35.298705][ T3560] lo speed is unknown, defaulting to 1000 [ 35.306175][ T3558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.318860][ T3558] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.339759][ T3558] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.25: corrupted inode contents [ 35.351547][ T3558] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.25: mark_inode_dirty error [ 35.363194][ T3558] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.25: corrupted inode contents [ 35.376500][ T3558] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.25: mark_inode_dirty error [ 35.400552][ T3558] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.25' sets config #1 [ 35.404533][ T3567] loop4: detected capacity change from 0 to 512 [ 35.482655][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.495597][ T3567] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.27: bg 0: block 393: padding at end of block bitmap is not set [ 35.499290][ T3560] loop1: detected capacity change from 0 to 1024 [ 35.511150][ T3567] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 35.516682][ T3560] EXT4-fs: Ignoring removed oldalloc option [ 35.526814][ T3567] EXT4-fs (loop4): 2 truncates cleaned up [ 35.556395][ T3567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.562622][ T3570] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.577754][ T3570] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 35.582647][ T3560] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 35.639884][ T3560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.806259][ T3580] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.29'. [ 35.821967][ T3577] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.29'. [ 35.867372][ T3582] syz.2.31[3582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.867613][ T3582] syz.2.31[3582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.880578][ T3582] syz.2.31[3582] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.942432][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.969153][ T3582] loop2: detected capacity change from 0 to 4096 [ 35.977256][ T3582] EXT4-fs: Ignoring removed nobh option [ 35.982988][ T3582] EXT4-fs: Ignoring removed i_version option [ 36.012926][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.023060][ T3582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.052962][ T3584] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.054573][ T3582] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.083870][ T3584] loop3: detected capacity change from 0 to 2048 [ 36.096953][ T3587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 36.113244][ T3587] Zero length message leads to an empty skb [ 36.120236][ T3587] syz.4.33 (3587) used greatest stack depth: 10312 bytes left [ 36.579495][ T3601] loop4: detected capacity change from 0 to 8192 [ 36.587842][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.631477][ T3601] loop4: p1 p2 p3 [ 36.635432][ T3601] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 36.643961][ T3601] loop4: p2 size 117440512 extends beyond EOD, truncated [ 36.652367][ T3601] loop4: p3 start 4294901760 is beyond EOD, truncated [ 36.675739][ T3000] loop4: p1 p2 p3 [ 36.679575][ T3000] loop4: p1 size 3523149824 extends beyond EOD, truncated [ 36.687374][ T3000] loop4: p2 size 117440512 extends beyond EOD, truncated [ 36.695276][ T3000] loop4: p3 start 4294901760 is beyond EOD, truncated [ 36.951788][ T3611] loop0: detected capacity change from 0 to 512 [ 36.977221][ T3608] SELinux: Context system_u:object_r:system_dbusd_var_run_t:s0 is not valid (left unmapped). [ 36.990557][ T3611] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.41: casefold flag without casefold feature [ 37.012813][ T3611] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.41: couldn't read orphan inode 15 (err -117) [ 37.027520][ T3611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.055848][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 37.055866][ T29] audit: type=1400 audit(1733192921.041:734): avc: denied { create } for pid=3610 comm="syz.0.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.091171][ T29] audit: type=1400 audit(1733192921.041:735): avc: denied { mounton } for pid=3610 comm="+}[@" path="/6/file0/file0" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.113407][ T29] audit: type=1400 audit(1733192921.041:736): avc: denied { mount } for pid=3610 comm="+}[@" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.135046][ T29] audit: type=1400 audit(1733192921.051:737): avc: denied { read } for pid=3610 comm="+}[@" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.155157][ T29] audit: type=1400 audit(1733192921.051:738): avc: denied { open } for pid=3610 comm="+}[@" path="/6/file0/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.155312][ T3611] atomic_op ffff888131403d28 conn xmit_atomic 0000000000000000 [ 37.177145][ T29] audit: type=1400 audit(1733192921.051:739): avc: denied { setopt } for pid=3610 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.203848][ T29] audit: type=1400 audit(1733192921.051:740): avc: denied { bind } for pid=3610 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.244913][ T29] audit: type=1400 audit(1733192921.131:741): avc: denied { write } for pid=3610 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.253855][ T3614] loop2: detected capacity change from 0 to 2048 [ 37.294468][ T29] audit: type=1400 audit(1733192921.281:742): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.324254][ T3614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.340684][ T29] audit: type=1326 audit(1733192921.321:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.2.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 37.367222][ T3614] mmap: syz.2.42 (3614) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.381288][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.473653][ T3618] loop0: detected capacity change from 0 to 128 [ 37.486665][ T3618] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.499551][ T3618] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 37.546595][ T3614] __nla_validate_parse: 1 callbacks suppressed [ 37.546609][ T3614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.42'. [ 37.575835][ T3624] loop3: detected capacity change from 0 to 512 [ 37.584977][ T3624] EXT4-fs: Ignoring removed orlov option [ 37.626427][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.648064][ T3624] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.657875][ T3632] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 37.673364][ T3633] loop1: detected capacity change from 0 to 512 [ 37.682341][ T3624] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.689876][ T3632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 37.693090][ T3624] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.44: bg 0: block 248: padding at end of block bitmap is not set [ 37.706189][ T3633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.714432][ T3624] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.44: Failed to acquire dquot type 1 [ 37.725316][ T3633] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.738471][ T3624] EXT4-fs (loop3): 1 truncate cleaned up [ 37.767021][ T3624] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.822090][ T3624] syz.3.44 (3624) used greatest stack depth: 9296 bytes left [ 37.826737][ T3640] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 37.847032][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.849536][ T3633] netlink: 16 bytes leftover after parsing attributes in process `syz.1.46'. [ 37.904993][ T3633] hub 6-0:1.0: USB hub found [ 37.911787][ T3633] hub 6-0:1.0: 8 ports detected [ 37.945283][ T3647] loop2: detected capacity change from 0 to 1024 [ 37.954483][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.998884][ T3647] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.045660][ T3647] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.49: missing EA_INODE flag [ 38.060335][ T3647] EXT4-fs (loop2): Remounting filesystem read-only [ 38.071473][ T3647] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 38.083256][ T3647] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 38.159931][ T3656] xt_TCPMSS: Only works on TCP SYN packets [ 38.248069][ T3298] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.405117][ T3663] @˙: renamed from vlan0 (while UP) [ 38.720340][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.854322][ T3667] siw: device registration error -23 [ 38.905616][ T3669] 9pnet_fd: Insufficient options for proto=fd [ 39.066756][ T3673] process 'syz.2.55' launched '/dev/fd/7' with NULL argv: empty string added [ 39.101739][ T3676] loop1: detected capacity change from 0 to 128 [ 39.131127][ C0] hrtimer: interrupt took 32546 ns [ 39.258136][ T3645] syz.3.51 (3645) used greatest stack depth: 7272 bytes left [ 39.287361][ T3684] netlink: 'syz.0.61': attribute type 29 has an invalid length. [ 39.303499][ T3684] loop0: detected capacity change from 0 to 512 [ 39.310233][ T3684] EXT4-fs: Ignoring removed oldalloc option [ 39.318095][ T3684] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.331837][ T3684] EXT4-fs (loop0): 1 truncate cleaned up [ 39.343648][ T3684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.430521][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.467401][ T3690] loop0: detected capacity change from 0 to 256 [ 39.487719][ T3690] FAT-fs (loop0): Directory bread(block 64) failed [ 39.496430][ T3690] FAT-fs (loop0): Directory bread(block 65) failed [ 39.504321][ T3690] FAT-fs (loop0): Directory bread(block 66) failed [ 39.510978][ T3690] FAT-fs (loop0): Directory bread(block 67) failed [ 39.517675][ T3690] FAT-fs (loop0): Directory bread(block 68) failed [ 39.525504][ T3690] FAT-fs (loop0): Directory bread(block 69) failed [ 39.532345][ T3690] FAT-fs (loop0): Directory bread(block 70) failed [ 39.539005][ T3690] FAT-fs (loop0): Directory bread(block 71) failed [ 39.547012][ T3690] FAT-fs (loop0): Directory bread(block 72) failed [ 39.553726][ T3690] FAT-fs (loop0): Directory bread(block 73) failed [ 39.556287][ T3687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.62'. [ 39.579324][ T3690] capability: warning: `+}[@' uses deprecated v2 capabilities in a way that may be insecure [ 39.588246][ T3687] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.591519][ T3690] program +}[@ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.621063][ T3690] netlink: '+}[@': attribute type 3 has an invalid length. [ 39.640357][ T3690] Process accounting resumed [ 39.645164][ T3690] +}[@: attempt to access beyond end of device [ 39.645164][ T3690] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 39.659804][ T3298] syz-executor: attempt to access beyond end of device [ 39.659804][ T3298] loop0: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 39.703831][ T3692] loop0: detected capacity change from 0 to 1024 [ 39.716549][ T3692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.820282][ T3696] loop2: detected capacity change from 0 to 1024 [ 39.827158][ T3696] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.842388][ T3696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.155986][ T3724] lo speed is unknown, defaulting to 1000 [ 40.656448][ T3732] loop3: detected capacity change from 0 to 1024 [ 40.671839][ T3732] EXT4-fs: Ignoring removed oldalloc option [ 40.681262][ T3732] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 40.740061][ T3732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.776570][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.839050][ T3723] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 40.843053][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.847992][ T3723] netlink: 92 bytes leftover after parsing attributes in process `syz.1.67'. [ 40.870870][ T3723] syz.1.67 uses obsolete (PF_INET,SOCK_PACKET) [ 41.029665][ T3746] program syz.0.71 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.684801][ T3748] lo speed is unknown, defaulting to 1000 [ 41.842023][ T3747] loop1: detected capacity change from 0 to 256 [ 41.869747][ T3750] rdma_op ffff888103133980 conn xmit_rdma 0000000000000000 [ 42.120188][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.234411][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 42.234437][ T29] audit: type=1400 audit(1733192926.221:1234): avc: denied { search } for pid=3038 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.271860][ T29] audit: type=1326 audit(1733192926.221:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.295311][ T29] audit: type=1326 audit(1733192926.221:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.318895][ T29] audit: type=1326 audit(1733192926.221:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.342238][ T29] audit: type=1326 audit(1733192926.221:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.365614][ T29] audit: type=1326 audit(1733192926.221:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.388989][ T29] audit: type=1326 audit(1733192926.221:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.412338][ T29] audit: type=1326 audit(1733192926.221:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.435615][ T29] audit: type=1326 audit(1733192926.221:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.454672][ T3757] loop3: detected capacity change from 0 to 512 [ 42.458923][ T29] audit: type=1326 audit(1733192926.221:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 42.478069][ T3757] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 42.523402][ T3757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0102] [ 42.543722][ T3754] Falling back ldisc for ttyS3. [ 42.544204][ T3757] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.561751][ T3757] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.74: attempt to clear invalid blocks 1024 len 1 [ 42.587419][ T3757] EXT4-fs (loop3): Remounting filesystem read-only [ 42.607430][ T3757] EXT4-fs (loop3): 1 truncate cleaned up [ 42.613581][ T3757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 42.638332][ T3757] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 42.655540][ T3757] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 43.076882][ T3780] loop3: detected capacity change from 0 to 4096 [ 43.260129][ T3797] loop2: detected capacity change from 0 to 512 [ 43.282283][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.324338][ T3806] loop0: detected capacity change from 0 to 1024 [ 43.325100][ T3797] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.2.79: corrupted xattr block 95: invalid header [ 43.332494][ T3806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.355196][ T3797] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.79: bg 0: block 7: invalid block bitmap [ 43.367560][ T3797] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 43.376430][ T3806] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 43.384555][ T3797] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #11: comm syz.2.79: corrupted xattr block 95: invalid header [ 43.389863][ T3780] EXT4-fs: Ignoring removed orlov option [ 43.397966][ T3806] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.407269][ T3780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.420803][ T3797] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 43.431404][ T3797] EXT4-fs (loop2): 1 orphan inode deleted [ 43.437575][ T3797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.464148][ T3780] EXT4-fs (loop3): can't enable nombcache during remount [ 43.471855][ T3806] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 43.484588][ T3806] EXT4-fs (loop0): Remounting filesystem read-only [ 43.492361][ T3806] EXT4-fs (loop0): 1 orphan inode deleted [ 43.528079][ T3806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.544189][ T3806] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 43.558034][ T3806] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.572014][ T3818] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 43.656526][ T3818] veth0_macvtap: left promiscuous mode [ 43.695478][ T3818] veth0_macvtap: entered promiscuous mode [ 43.707361][ T3818] team0: Device macvtap0 failed to register rx_handler [ 43.721786][ T3823] netlink: 'syz.0.85': attribute type 39 has an invalid length. [ 43.729477][ T3823] netlink: 'syz.0.85': attribute type 4 has an invalid length. [ 43.737141][ T3823] netlink: 152 bytes leftover after parsing attributes in process `syz.0.85'. [ 43.746121][ T3818] veth0_macvtap: left promiscuous mode [ 43.746508][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.896003][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 43.904986][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 43.916322][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 43.934754][ T3823] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 43.953976][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.003673][ T3830] loop4: detected capacity change from 0 to 2048 [ 44.039607][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 44.048639][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 44.106753][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 44.159542][ T3830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.174750][ T3836] loop3: detected capacity change from 0 to 512 [ 44.177988][ T3830] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.198540][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 44.207584][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 44.218129][ T3827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 44.232931][ T3836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.246063][ T3836] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.468264][ T3836] Process accounting resumed [ 44.561719][ T3836] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 44.591978][ T3849] No such timeout policy "syz0" [ 44.605603][ T3849] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.677866][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.688918][ T3851] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 44.747969][ T3855] loop3: detected capacity change from 0 to 512 [ 44.771717][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.793474][ T3855] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 44.805142][ T3855] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 44.815277][ T3855] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.91: Corrupt directory, running e2fsck is recommended [ 44.843383][ T3855] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 44.853060][ T3855] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.91: corrupted in-inode xattr: invalid ea_ino [ 44.877792][ T3855] EXT4-fs (loop3): Remounting filesystem read-only [ 44.904996][ T3855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.918209][ T3855] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 44.926922][ T3855] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.006086][ T3855] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.008156][ T3863] loop2: detected capacity change from 0 to 1024 [ 45.060665][ T3863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.085265][ T3863] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.101349][ T3855] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.139235][ T3874] loop4: detected capacity change from 0 to 512 [ 45.150362][ T3874] EXT4-fs: Mount option(s) incompatible with ext3 [ 45.162025][ T3855] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.184845][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.215110][ T3855] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.348118][ T3855] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.377690][ T3855] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.395485][ T3885] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.402790][ T3885] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.452759][ T3855] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.474714][ T3855] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.544908][ T3887] loop1: detected capacity change from 0 to 8192 [ 45.562837][ T3892] lo speed is unknown, defaulting to 1000 [ 46.160411][ T3909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 46.167164][ T3909] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 46.174815][ T3909] vhci_hcd vhci_hcd.0: Device attached [ 46.185304][ T3911] vhci_hcd: connection closed [ 46.186267][ T55] vhci_hcd: stop threads [ 46.195367][ T55] vhci_hcd: release socket [ 46.199796][ T55] vhci_hcd: disconnect device [ 46.228599][ T3915] netlink: 'syz.0.109': attribute type 4 has an invalid length. [ 46.403535][ T3922] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 46.413480][ T3922] bridge0: port 3(dummy0) entered blocking state [ 46.419864][ T3922] bridge0: port 3(dummy0) entered disabled state [ 46.426481][ T3922] dummy0: entered allmulticast mode [ 46.432270][ T3922] dummy0: entered promiscuous mode [ 46.437555][ T3922] bridge0: port 3(dummy0) entered blocking state [ 46.443918][ T3922] bridge0: port 3(dummy0) entered forwarding state [ 46.645475][ T3926] loop4: detected capacity change from 0 to 4096 [ 46.654895][ T3926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.681668][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.789913][ T3936] loop2: detected capacity change from 0 to 1024 [ 46.803472][ T3936] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.818312][ T3938] loop4: detected capacity change from 0 to 1024 [ 46.837816][ T3938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.852194][ T3936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.870544][ T3938] EXT4-fs: Cannot change quota options when quota turned on [ 46.941503][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.966076][ T3943] loop2: detected capacity change from 0 to 512 [ 46.977944][ T3943] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 47.258265][ T3951] lo speed is unknown, defaulting to 1000 [ 47.655470][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.672231][ T3956] tipc: Started in network mode [ 47.677153][ T3956] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 47.688323][ T3956] tipc: New replicast peer: fc00:0000:0000:0000:0000:0000:0000:0000 [ 47.689958][ T3958] loop4: detected capacity change from 0 to 128 [ 47.697099][ T3956] tipc: Enabled bearer , priority 10 [ 47.923012][ T3967] program syz.1.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.973879][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 47.973894][ T29] audit: type=1326 audit(1733192931.961:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.003573][ T29] audit: type=1326 audit(1733192931.961:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.048324][ T3971] loop1: detected capacity change from 0 to 4096 [ 48.054034][ T29] audit: type=1400 audit(1733192931.961:2014): avc: denied { lock } for pid=3968 comm="syz.3.125" path="socket:[5799]" dev="sockfs" ino=5799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 48.078363][ T29] audit: type=1326 audit(1733192932.011:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.101715][ T29] audit: type=1326 audit(1733192932.011:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.125074][ T29] audit: type=1326 audit(1733192932.011:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.148431][ T29] audit: type=1326 audit(1733192932.011:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.171976][ T29] audit: type=1326 audit(1733192932.011:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.195313][ T29] audit: type=1326 audit(1733192932.011:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.218638][ T29] audit: type=1326 audit(1733192932.011:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3970 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc776b9ff19 code=0x7ffc0000 [ 48.249350][ T3976] loop0: detected capacity change from 0 to 512 [ 48.256444][ T3971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.257755][ T3974] lo speed is unknown, defaulting to 1000 [ 48.274981][ T3976] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.312083][ T3971] EXT4-fs: Ignoring removed orlov option [ 48.320685][ T3976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 48.329688][ T3971] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.338603][ T3971] EXT4-fs (loop1): can't enable nombcache during remount [ 48.345826][ T3976] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.126: corrupted in-inode xattr: e_value size too large [ 48.360441][ T3976] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.126: couldn't read orphan inode 15 (err -117) [ 48.374227][ T3976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.417086][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.438601][ T3981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.448477][ T3981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.698998][ T3990] bridge_slave_0: left allmulticast mode [ 48.704811][ T3990] bridge_slave_0: left promiscuous mode [ 48.710578][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.711175][ T3461] tipc: Node number set to 1 [ 48.742719][ T3990] bridge_slave_1: left allmulticast mode [ 48.748391][ T3990] bridge_slave_1: left promiscuous mode [ 48.754222][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.797015][ T3990] bond0: (slave bond_slave_0): Releasing backup interface [ 48.815754][ T3990] bond0: (slave bond_slave_1): Releasing backup interface [ 48.851028][ T3990] team0: Port device team_slave_0 removed [ 48.883601][ T3990] team0: Port device team_slave_1 removed [ 48.890911][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.898519][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.916248][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.923760][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.109580][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.117630][ T3999] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 49.187332][ T3377] kernel write not supported for file /sysvipc/shm (pid: 3377 comm: kworker/1:4) [ 49.496070][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.504649][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.694426][ T4031] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.788202][ T4051] loop0: detected capacity change from 0 to 1024 [ 49.796372][ T4051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.808307][ T4048] loop1: detected capacity change from 0 to 512 [ 49.829781][ T4048] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.141: corrupted xattr block 95: invalid header [ 49.844249][ T4048] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.141: bg 0: block 7: invalid block bitmap [ 49.856823][ T4048] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 49.857533][ T4051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.867398][ T4048] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.141: corrupted xattr block 95: invalid header [ 49.893075][ T4048] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 49.902507][ T4048] EXT4-fs (loop1): 1 orphan inode deleted [ 49.908773][ T4048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.964195][ T4058] loop2: detected capacity change from 0 to 4096 [ 49.987264][ T4060] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 49.998257][ T4058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.010853][ T4060] veth0_macvtap: left promiscuous mode [ 50.021459][ T4058] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.033827][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.064434][ T4060] veth0_macvtap: entered promiscuous mode [ 50.071376][ T4060] team0: Device macvtap0 failed to register rx_handler [ 50.078815][ T4060] veth0_macvtap: left promiscuous mode [ 50.123267][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.136529][ T4064] loop4: detected capacity change from 0 to 1024 [ 50.150858][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.177045][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.216870][ T4070] loop0: detected capacity change from 0 to 4096 [ 50.229526][ T4070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.272803][ T4070] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.409486][ T4071] __nla_validate_parse: 8 callbacks suppressed [ 50.409592][ T4071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.147'. [ 50.424801][ T4071] netlink: 92 bytes leftover after parsing attributes in process `syz.4.147'. [ 50.488704][ T4076] loop4: detected capacity change from 0 to 512 [ 50.496968][ T4076] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 51.384740][ T4112] loop0: detected capacity change from 0 to 1024 [ 51.389396][ T4110] loop4: detected capacity change from 0 to 1024 [ 51.396539][ T4109] loop1: detected capacity change from 0 to 4096 [ 51.408870][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.436646][ T4109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.450955][ T4110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.470926][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.478780][ T4109] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.480912][ T4118] loop3: detected capacity change from 0 to 1024 [ 51.495958][ T4118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.517440][ T4118] /dev/loop3: Can't open blockdev [ 51.531098][ T4110] EXT4-fs: Cannot change quota options when quota turned on [ 51.780472][ T4139] lo speed is unknown, defaulting to 1000 [ 52.157635][ T4144] loop1: detected capacity change from 0 to 1024 [ 52.180408][ T4144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.214391][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.285905][ T4159] loop4: detected capacity change from 0 to 1024 [ 52.293646][ T4159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.314454][ T4159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.513575][ T4178] loop2: detected capacity change from 0 to 1024 [ 52.543539][ T4182] loop3: detected capacity change from 0 to 1024 [ 52.548676][ T4176] loop4: detected capacity change from 0 to 512 [ 52.550616][ T4182] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.600954][ T4176] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 52.773400][ T4197] loop3: detected capacity change from 0 to 4096 [ 53.029838][ T29] kauditd_printk_skb: 449 callbacks suppressed [ 53.029856][ T29] audit: type=1326 audit(2000000003.950:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.060363][ T29] audit: type=1326 audit(2000000003.950:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.083820][ T29] audit: type=1326 audit(2000000003.950:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.092608][ T4208] dccp_invalid_packet: P.Data Offset(100) too large [ 53.107384][ T29] audit: type=1326 audit(2000000003.950:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.137152][ T29] audit: type=1326 audit(2000000003.950:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb87b5d27c5 code=0x7ffc0000 [ 53.160553][ T29] audit: type=1326 audit(2000000003.950:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.184018][ T29] audit: type=1326 audit(2000000003.950:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.184388][ T4208] loop3: detected capacity change from 0 to 512 [ 53.207411][ T29] audit: type=1326 audit(2000000003.960:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.227263][ T4208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 53.239449][ T29] audit: type=1326 audit(2000000004.140:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4207 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.270210][ T29] audit: type=1326 audit(2000000004.140:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4205 comm="syz.3.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb87b59ff19 code=0x7ffc0000 [ 53.294476][ T4208] EXT4-fs (loop3): 1 truncate cleaned up [ 53.336961][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.178: inode #1073372648: comm syz.3.178: iget: illegal inode # [ 53.339927][ T4211] loop1: detected capacity change from 0 to 1024 [ 53.350809][ T4206] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.178: error while reading EA inode 1073372648 err=-117 [ 53.370016][ T4211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.378817][ T4206] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm syz.3.178: corrupted xattr block 33: invalid header [ 53.393017][ T4206] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 53.588440][ T4226] loop0: detected capacity change from 0 to 1024 [ 53.595224][ T4226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.612981][ T4228] can0: slcan on pts0. [ 53.720255][ T4239] lo speed is unknown, defaulting to 1000 [ 53.914278][ T4228] can0 (unregistered): slcan off pts0. [ 54.095126][ T4246] loop3: detected capacity change from 0 to 1024 [ 54.209388][ T4246] EXT4-fs: Cannot change quota options when quota turned on [ 54.359147][ T4266] loop0: detected capacity change from 0 to 4096 [ 54.477453][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.192'. [ 54.566160][ T4286] dccp_invalid_packet: P.Data Offset(100) too large [ 54.579671][ T4286] loop4: detected capacity change from 0 to 512 [ 54.586759][ T4286] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.608019][ T4286] EXT4-fs (loop4): 1 truncate cleaned up [ 54.630078][ T4286] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.193: inode #1073372648: comm syz.4.193: iget: illegal inode # [ 54.643889][ T4286] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.193: error while reading EA inode 1073372648 err=-117 [ 54.657840][ T4286] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.193: corrupted xattr block 33: invalid header [ 54.671448][ T4286] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 54.712336][ T4289] loop4: detected capacity change from 0 to 1024 [ 54.719229][ T4289] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.857839][ T4293] loop4: detected capacity change from 0 to 512 [ 54.864897][ T4293] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 54.943314][ T4295] loop3: detected capacity change from 0 to 512 [ 54.961425][ T4295] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.3.196: corrupted xattr block 95: invalid header [ 54.976747][ T4295] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.196: bg 0: block 7: invalid block bitmap [ 54.989615][ T4295] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 54.999655][ T4295] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #11: comm syz.3.196: corrupted xattr block 95: invalid header [ 55.014772][ T4295] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 55.024027][ T4295] EXT4-fs (loop3): 1 orphan inode deleted [ 55.091458][ T4301] netlink: 'syz.3.196': attribute type 10 has an invalid length. [ 55.101137][ T4301] veth0_macvtap: left promiscuous mode [ 55.117525][ T4301] veth0_macvtap: entered promiscuous mode [ 55.134159][ T4301] team0: Device macvtap0 failed to register rx_handler [ 55.154400][ T4301] veth0_macvtap: left promiscuous mode [ 55.350625][ T4316] loop3: detected capacity change from 0 to 1024 [ 55.377198][ T4316] EXT4-fs: Cannot change quota options when quota turned on [ 55.467672][ T4322] loop3: detected capacity change from 0 to 1024 [ 55.475581][ T4322] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.593907][ T4325] lo speed is unknown, defaulting to 1000 [ 55.893896][ T4327] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 56.039030][ T4329] loop3: detected capacity change from 0 to 4096 [ 56.056726][ T4330] loop4: detected capacity change from 0 to 2048 [ 56.102093][ T4336] loop0: detected capacity change from 0 to 512 [ 56.110772][ T4336] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 56.421233][ T4356] loop2: detected capacity change from 0 to 1024 [ 56.464748][ T4353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'. [ 56.488444][ T4355] loop4: detected capacity change from 0 to 512 [ 56.489557][ T4352] EXT4-fs: Cannot change quota options when quota turned on [ 56.583100][ T4355] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.213: corrupted xattr block 95: invalid header [ 56.610265][ T4355] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.213: bg 0: block 7: invalid block bitmap [ 56.632873][ T4360] lo speed is unknown, defaulting to 1000 [ 56.839105][ T4355] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 56.874500][ T4355] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.213: corrupted xattr block 95: invalid header [ 56.908970][ T4365] loop2: detected capacity change from 0 to 512 [ 56.938946][ T4355] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 56.947177][ T4365] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 56.960535][ T4355] EXT4-fs (loop4): 1 orphan inode deleted [ 57.039585][ T4374] netlink: 'syz.4.213': attribute type 10 has an invalid length. [ 57.082144][ T4374] veth0_macvtap: left promiscuous mode [ 57.126557][ T4374] veth0_macvtap: entered promiscuous mode [ 57.141437][ T4374] team0: Device macvtap0 failed to register rx_handler [ 57.156604][ T4374] veth0_macvtap: left promiscuous mode [ 57.237828][ T4379] loop1: detected capacity change from 0 to 512 [ 57.266752][ T4379] EXT4-fs: Ignoring removed orlov option [ 57.292652][ T4379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.307240][ T4379] EXT4-fs (loop1): orphan cleanup on readonly fs [ 57.307641][ T4378] loop3: detected capacity change from 0 to 4096 [ 57.315414][ T4379] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.220: bg 0: block 248: padding at end of block bitmap is not set [ 57.335422][ T4379] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.220: Failed to acquire dquot type 1 [ 57.347143][ T4379] EXT4-fs (loop1): 1 truncate cleaned up [ 57.478317][ T4394] loop3: detected capacity change from 0 to 1024 [ 57.495064][ T4394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.556019][ T4401] loop3: detected capacity change from 0 to 512 [ 57.563266][ T4401] EXT4-fs (loop3): can't mount with journal_checksum, fs mounted w/o journal [ 57.760221][ T4406] loop2: detected capacity change from 0 to 1024 [ 57.767150][ T4406] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.835100][ T4410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 58.174334][ T4420] lo speed is unknown, defaulting to 1000 [ 58.517985][ T4422] loop4: detected capacity change from 0 to 4096 [ 58.682378][ T4428] rdma_op ffff88811714a580 conn xmit_rdma 0000000000000000 [ 58.728246][ T29] kauditd_printk_skb: 654 callbacks suppressed [ 58.728268][ T29] audit: type=1326 audit(2000000009.630:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 58.757963][ T29] audit: type=1326 audit(2000000009.630:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 58.781338][ T29] audit: type=1326 audit(2000000009.630:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 58.804600][ T29] audit: type=1326 audit(2000000009.630:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 58.828217][ T29] audit: type=1326 audit(2000000009.630:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 58.851563][ T29] audit: type=1326 audit(2000000009.630:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 58.874828][ T29] audit: type=1326 audit(2000000009.630:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 58.898185][ T29] audit: type=1326 audit(2000000009.630:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f023d66ff19 code=0x7ffc0000 [ 59.147818][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 59.168164][ T4436] loop0: detected capacity change from 0 to 512 [ 59.188352][ T4436] EXT4-fs: Ignoring removed orlov option [ 59.253819][ T4436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.272184][ T4436] EXT4-fs (loop0): orphan cleanup on readonly fs [ 59.279242][ T4436] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.237: bg 0: block 248: padding at end of block bitmap is not set [ 59.294336][ T4436] Quota error (device loop0): write_blk: dquota write failed [ 59.301859][ T4436] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 59.311835][ T4436] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.237: Failed to acquire dquot type 1 [ 59.362136][ T4436] EXT4-fs (loop0): 1 truncate cleaned up [ 59.455727][ T4443] loop1: detected capacity change from 0 to 4096 [ 59.560424][ T4450] siw: device registration error -23 [ 59.998105][ T4464] syz.4.246[4464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.998276][ T4464] syz.4.246[4464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.009723][ T4464] syz.4.246[4464] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.043292][ T4464] loop4: detected capacity change from 0 to 4096 [ 60.061262][ T4464] EXT4-fs: Ignoring removed nobh option [ 60.066859][ T4464] EXT4-fs: Ignoring removed i_version option [ 60.114742][ T4467] loop1: detected capacity change from 0 to 4096 [ 60.177881][ T4471] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 60.200259][ T4479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.250'. [ 60.419960][ T4482] lo speed is unknown, defaulting to 1000 [ 60.999886][ T4487] lo speed is unknown, defaulting to 1000 [ 61.102228][ T4491] dccp_invalid_packet: P.Data Offset(100) too large [ 61.143269][ T4491] loop2: detected capacity change from 0 to 512 [ 61.161927][ T4491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.198002][ T4494] loop1: detected capacity change from 0 to 8192 [ 61.199149][ T4491] EXT4-fs (loop2): 1 truncate cleaned up [ 61.233083][ T4501] loop4: detected capacity change from 0 to 1024 [ 61.240214][ T4501] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.260098][ T4502] loop3: detected capacity change from 0 to 1024 [ 61.260795][ T4494] loop1: p1 p2 p3 [ 61.266985][ T4502] EXT4-fs: Ignoring removed oldalloc option [ 61.287035][ T4494] loop1: p1 size 3523149824 extends beyond EOD, truncated [ 61.305776][ T4494] loop1: p2 size 117440512 extends beyond EOD, truncated [ 61.314204][ T4494] loop1: p3 start 4294901760 is beyond EOD, truncated [ 61.323352][ T4502] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 61.335401][ T3000] loop1: p1 p2 p3 [ 61.352581][ T3000] loop1: p1 size 3523149824 extends beyond EOD, truncated [ 61.394501][ T3000] loop1: p2 size 117440512 extends beyond EOD, truncated [ 61.396901][ T4485] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: comm syz.2.252: inode #1073372648: comm syz.2.252: iget: illegal inode # [ 61.402742][ T3000] loop1: p3 start 4294901760 is beyond EOD, truncated [ 61.418001][ T4485] EXT4-fs error (device loop2): ext4_xattr_inode_iget:445: comm syz.2.252: error while reading EA inode 1073372648 err=-117 [ 61.479217][ T4485] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2977: inode #15: comm syz.2.252: corrupted xattr block 33: invalid header [ 61.560627][ T4485] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 61.682796][ T3755] udevd[3755]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 61.694531][ T3375] udevd[3375]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.708848][ T4510] @˙: renamed from vlan0 (while UP) [ 61.857375][ T4519] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 61.945745][ T4527] can0: slcan on pts0. [ 61.959012][ T4529] loop2: detected capacity change from 0 to 4096 [ 61.970838][ T4530] loop3: detected capacity change from 0 to 1024 [ 61.987331][ T4530] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: inode #11: comm syz.3.261: missing EA_INODE flag [ 61.999460][ T4530] EXT4-fs (loop3): Remounting filesystem read-only [ 62.007354][ T4530] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 62.019806][ T4530] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 62.029156][ T4527] can0 (unregistered): slcan off pts0. [ 62.053803][ T4538] loop4: detected capacity change from 0 to 512 [ 62.079395][ T4538] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.4.265: corrupted xattr block 95: invalid header [ 62.100734][ T4543] loop0: detected capacity change from 0 to 512 [ 62.109207][ T4538] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.265: bg 0: block 7: invalid block bitmap [ 62.122224][ T4543] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.0.266: corrupted xattr block 95: invalid header [ 62.137624][ T4538] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 62.147470][ T4543] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.266: bg 0: block 7: invalid block bitmap [ 62.161652][ T4538] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #11: comm syz.4.265: corrupted xattr block 95: invalid header [ 62.178183][ T4543] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 62.188066][ T4543] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2977: inode #11: comm syz.0.266: corrupted xattr block 95: invalid header [ 62.197864][ T4538] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 62.210779][ T4538] EXT4-fs (loop4): 1 orphan inode deleted [ 62.217850][ T4543] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 62.227369][ T4543] EXT4-fs (loop0): 1 orphan inode deleted [ 62.298802][ T4564] netlink: 'syz.0.266': attribute type 10 has an invalid length. [ 62.308646][ T4564] veth0_macvtap: left promiscuous mode [ 62.318969][ T4564] veth0_macvtap: entered promiscuous mode [ 62.328117][ T4564] team0: Device macvtap0 failed to register rx_handler [ 62.337882][ T4564] veth0_macvtap: left promiscuous mode [ 62.412194][ T4569] loop0: detected capacity change from 0 to 512 [ 62.419309][ T4569] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 62.762748][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.268'. [ 62.766356][ T4576] loop2: detected capacity change from 0 to 512 [ 62.778486][ T4576] EXT4-fs (loop2): can't mount with journal_checksum, fs mounted w/o journal [ 62.851676][ T4578] loop1: detected capacity change from 0 to 4096 [ 62.994193][ T4584] veth0_to_team: entered promiscuous mode [ 63.000304][ T4584] veth0_to_team: entered allmulticast mode [ 63.235887][ T4589] loop4: detected capacity change from 0 to 1024 [ 63.242793][ T4589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.363782][ T4596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.273'. [ 63.443299][ T4600] lo speed is unknown, defaulting to 1000 [ 63.608894][ T4600] loop4: detected capacity change from 0 to 1024 [ 63.618221][ T4600] EXT4-fs: Ignoring removed oldalloc option [ 63.667769][ T4600] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 63.700469][ T4607] loop2: detected capacity change from 0 to 512 [ 63.749973][ T4612] rdma_rxe: rxe_newlink: failed to add lo [ 63.759408][ T4607] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.760791][ T4605] lo speed is unknown, defaulting to 1000 [ 63.816419][ T4607] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 18: comm syz.2.286: lblock 23 mapped to illegal pblock 18 (length 1) [ 64.021278][ T4617] Falling back ldisc for ttyS3. [ 64.047022][ T4626] can0: slcan on pts0. [ 64.079646][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 64.079670][ T29] audit: type=1400 audit(2000000015.000:3383): avc: denied { write } for pid=4625 comm="syz.1.281" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.131333][ T4626] can0 (unregistered): slcan off pts0. [ 64.160972][ T4629] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 64.171820][ T4629] program syz.1.281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.190854][ T4637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.282'. [ 64.194485][ T29] audit: type=1400 audit(2000000015.090:3384): avc: denied { relabelto } for pid=4625 comm="syz.1.281" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 64.208872][ T4638] loop4: detected capacity change from 0 to 1024 [ 64.227036][ T29] audit: type=1400 audit(2000000015.090:3385): avc: denied { associate } for pid=4625 comm="syz.1.281" name="cgroup.procs" dev="cgroup" ino=102 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 64.274616][ T29] audit: type=1326 audit(2000000015.160:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 64.297994][ T29] audit: type=1326 audit(2000000015.160:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 64.321513][ T29] audit: type=1326 audit(2000000015.160:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 64.344953][ T29] audit: type=1326 audit(2000000015.160:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 64.369125][ T29] audit: type=1326 audit(2000000015.160:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 64.392624][ T29] audit: type=1326 audit(2000000015.160:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 64.416071][ T29] audit: type=1326 audit(2000000015.160:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4639 comm="syz.2.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e360cff19 code=0x7ffc0000 [ 64.448281][ T4638] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: inode #11: comm syz.4.280: missing EA_INODE flag [ 64.471222][ T4641] wireguard0: entered promiscuous mode [ 64.476722][ T4641] wireguard0: entered allmulticast mode [ 64.486223][ T4638] EXT4-fs (loop4): Remounting filesystem read-only [ 64.493917][ T4638] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 64.508014][ T4638] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 64.567014][ T4664] loop1: detected capacity change from 0 to 128 [ 64.581508][ T4637] netlink: 16 bytes leftover after parsing attributes in process `syz.3.282'. [ 64.601151][ T4664] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 64.620955][ T4646] lo speed is unknown, defaulting to 1000 [ 64.923303][ T4677] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 64.949303][ T4677] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 64.961806][ T4681] netlink: 56 bytes leftover after parsing attributes in process `syz.4.288'. [ 64.970723][ T4681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.288'. [ 65.029708][ T4682] lo speed is unknown, defaulting to 1000 [ 65.123258][ T3375] udevd[3375]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 65.211882][ T3375] udevd[3375]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 65.511851][ T4705] Falling back ldisc for ttyS3. [ 65.803485][ T4740] lo speed is unknown, defaulting to 1000 [ 66.167392][ T4740] loop2: detected capacity change from 0 to 1024 [ 66.193064][ T4740] EXT4-fs: Ignoring removed oldalloc option [ 66.224870][ T4740] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 66.253381][ T4749] can0: slcan on pts0. [ 66.301739][ T4749] can0 (unregistered): slcan off pts0. [ 66.351922][ T4757] rdma_rxe: rxe_newlink: failed to add lo [ 66.429852][ T4761] loop4: detected capacity change from 0 to 1024 [ 66.725152][ T4761] ================================================================== [ 66.733267][ T4761] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 66.740412][ T4761] [ 66.742745][ T4761] write to 0xffff888106721924 of 4 bytes by task 4771 on cpu 1: [ 66.750401][ T4761] xas_set_mark+0x131/0x150 [ 66.754953][ T4761] __folio_start_writeback+0x1e8/0x430 [ 66.760458][ T4761] ext4_bio_write_folio+0x591/0x9d0 [ 66.765677][ T4761] mpage_process_page_bufs+0x486/0x5d0 [ 66.771162][ T4761] mpage_prepare_extent_to_map+0x788/0xb80 [ 66.776992][ T4761] ext4_do_writepages+0xa20/0x2130 [ 66.782149][ T4761] ext4_writepages+0x159/0x2e0 [ 66.786945][ T4761] do_writepages+0x1d8/0x480 [ 66.791573][ T4761] file_write_and_wait_range+0x168/0x2f0 [ 66.797226][ T4761] generic_buffers_fsync_noflush+0x46/0x120 [ 66.803150][ T4761] ext4_sync_file+0x1ff/0x6c0 [ 66.807863][ T4761] vfs_fsync_range+0x116/0x130 [ 66.812674][ T4761] ext4_buffered_write_iter+0x326/0x370 [ 66.818265][ T4761] ext4_file_write_iter+0x383/0xf20 [ 66.823514][ T4761] iter_file_splice_write+0x5f1/0x980 [ 66.828924][ T4761] direct_splice_actor+0x160/0x2c0 [ 66.834084][ T4761] splice_direct_to_actor+0x302/0x670 [ 66.839492][ T4761] do_splice_direct+0xd7/0x150 [ 66.844294][ T4761] do_sendfile+0x398/0x660 [ 66.848728][ T4761] __x64_sys_sendfile64+0x110/0x150 [ 66.853957][ T4761] x64_sys_call+0xfbd/0x2dc0 [ 66.858569][ T4761] do_syscall_64+0xc9/0x1c0 [ 66.863084][ T4761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.869024][ T4761] [ 66.871356][ T4761] read to 0xffff888106721924 of 4 bytes by task 4761 on cpu 0: [ 66.878921][ T4761] xas_find_marked+0x60a/0x660 [ 66.883711][ T4761] find_get_entry+0x54/0x390 [ 66.888329][ T4761] filemap_get_folios_tag+0x9e/0x210 [ 66.893661][ T4761] mpage_prepare_extent_to_map+0x329/0xb80 [ 66.899496][ T4761] ext4_do_writepages+0x6ea/0x2130 [ 66.904648][ T4761] ext4_writepages+0x159/0x2e0 [ 66.909439][ T4761] do_writepages+0x1d8/0x480 [ 66.914069][ T4761] file_write_and_wait_range+0x168/0x2f0 [ 66.919721][ T4761] generic_buffers_fsync_noflush+0x46/0x120 [ 66.925653][ T4761] ext4_sync_file+0x1ff/0x6c0 [ 66.930365][ T4761] vfs_fsync_range+0x116/0x130 [ 66.935163][ T4761] ext4_buffered_write_iter+0x326/0x370 [ 66.940735][ T4761] ext4_file_write_iter+0x383/0xf20 [ 66.945990][ T4761] iter_file_splice_write+0x5f1/0x980 [ 66.951391][ T4761] direct_splice_actor+0x160/0x2c0 [ 66.956549][ T4761] splice_direct_to_actor+0x302/0x670 [ 66.961952][ T4761] do_splice_direct+0xd7/0x150 [ 66.966754][ T4761] do_sendfile+0x398/0x660 [ 66.971196][ T4761] __x64_sys_sendfile64+0x110/0x150 [ 66.976406][ T4761] x64_sys_call+0xfbd/0x2dc0 [ 66.981018][ T4761] do_syscall_64+0xc9/0x1c0 [ 66.985551][ T4761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.991480][ T4761] [ 66.993810][ T4761] value changed: 0x0a000021 -> 0x04000021 [ 66.999548][ T4761] [ 67.001898][ T4761] Reported by Kernel Concurrency Sanitizer on: [ 67.008078][ T4761] CPU: 0 UID: 0 PID: 4761 Comm: syz.4.302 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 67.018701][ T4761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.028786][ T4761] ================================================================== [ 67.358136][ T3303] EXT4-fs unmount: 79 callbacks suppressed [ 67.358150][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.