last executing test programs: 48.743637967s ago: executing program 0 (id=120): r0 = syz_io_uring_setup(0x1725, &(0x7f0000000700)={0x0, 0x0, 0x100, 0x2, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000d00008500000083000000bf090000000000005509010000000000950020d000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000c00)="c100000000000000b47381c96558", 0xe}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) 48.244194417s ago: executing program 0 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_io_uring_setup(0x112, &(0x7f0000000140)={0x0, 0x24089, 0x80, 0x3, 0x3}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r7, 0x3, 0x3, &(0x7f0000000340)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bind(r0, &(0x7f0000000680)=@pppoe={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'veth0\x00'}}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x8001, 0x0) 47.86350097s ago: executing program 0 (id=127): socket$nl_netfilter(0x10, 0x3, 0xc) (async) clock_gettime(0x0, &(0x7f0000001080)) r0 = socket$inet6(0xa, 0x1, 0x0) listen(r0, 0x0) syz_io_uring_setup(0x2eda, &(0x7f00000001c0)={0x0, 0xaa76, 0x10100, 0x0, 0x401}, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) (async) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x3808002, &(0x7f0000000640), 0x3, 0x4e9, &(0x7f00000000c0)="$eJzs3d9rW9cdAPDvla3MTpzZ2faQBZaYsZGELZIdL4nZQ5LB2J4C27J3z7NlYyxbxpKT2IThsOcxGGMb28v61JdC/4BCyZ9QCoH2PZTSEtokfehDWxVJV4nrSnZCJCuxPx84vuf+0P1+j4SOdO691g3gwBqNiKsR0RcRZyNiOF2eSUtsNkptu0cPb8/UShLV6vVPkkjSZc19Jen0SPqwgYj4w28j/pwkjQVblNc3FqeLxcJqOp+vLK3ky+sb5xaWpucL84XliYnxi5OXJi9MjnWsrZd//eG//v76by6//fOb96c+PvOXWr5D6bqt7eikxnOSrT8XTf0RsdqNYD3Ql7Yn+ywbJ93PBwCAndW+438vIn4cEY//2+tsAAAAgG6oXhmKL5KIKgAAALBvZerXwCaZXHotwFBkMrlc4xreH8SVKJbKlZ/NldaWZxvXyo5ENjO3UCyMpdcKj0Q2qc2P1+tP589vm5+IiGMR8c/hwfp8bqZUnO31wQ8AAAA4IGrj/KFMo16bfDbcGP8DAAAA+8xIrxMAAAAAus74HwAAAPa/b4//RxuTpH/vkwEAAAA67XfXrtVKtXn/69kb62uLpRvnZgvlxdzS2kxuprS6kpsvlebrv9m3tNv+iqXSyi9iee1WvlIoV/Ll9Y2ppdLacmWqfl/vqcIz3ScaAAAA6Khjp+6+n0TE5i8H66XmULrOWB32t8zzbZ50Kw9g7/X1OgGgZ1zgCweXMT6w28B+YI/yAAAAuuf0D5+c/x+MLef/j953bAD2u+c8/w/sI87/w8G17fz//3uVB7D3jPGB3Y4DtD3//07ncwEAALpjqF6STC4dAwxFJpPLRRyt3xYgm8wtFAtjEfHdiHhvOPud2vx4r5MGAAAAAAAAAAAAAAAAAAAAAAAAgFdMtZpEFQAAANjXIjIfJRGRxEDE8E+Gth8fOJR8PlyfRsTN/13/963pSmV1vLb80yfLK/9Jl5/vxREMAAAAYLvmOL05jgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATnr08PZMs+xl3Ae/ioiRVvH7Y6A+HYhsRBx+nET/lsclEdHXgfibdyLieKv4SS2tGEmz2B4/ExGDPY5/pAPx4SC7W+t/rrZ6/2VitD5t/f7rT8uLejDarv/LPOn/+tr0f0d32fehdHri3pv5tvHvRJzob93/NOMnL9j//umPGxvt1lVfizjd8vMn+UasfGVpJV9e3zi3sDQ9X5gvLE9MjF+cvDR5YXIsP7dQLKR/W8b4x4/e+mqn9h9uE3+kXfuTRk7Vaut9nto2/+W9Ww+/32rDJOLB39J6i9f/eLv46XP/0/RzoLb+dLO+2ahvdfKNd0/u1P7ZNu3f7fU/026n25z9/V8/aNSyz/gIAKCbyusbi9PFYmH1Va/UGvMSpNHByujLkYbKwaz0umcCAAA67emX/l5nAgAAAAAAAAAAAAAAAAAAAAdX8///m7/l3I2fE9sab6BZSZI9bysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwE6+DgAA///TSdFe") (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a140000000000000000000000000000c08c73000011000100ffffffff00000000000a"], 0x3c}, 0x1, 0x1200}, 0x0) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0}) (async) syz_io_uring_setup(0x5777, &(0x7f0000001100)={0x0, 0xc638, 0x0, 0x0, 0x281}, &(0x7f0000000dc0), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x27, &(0x7f0000000bc0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x7, 0x0, 0x7, 0x3, 0x8, 0x1, 0xfffffffffffffffc}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@nobarrier}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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") (async, rerun: 64) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) (async, rerun: 32) syz_mount_image$tmpfs(&(0x7f0000002300), &(0x7f0000000040)='./file0\x00', 0x21408, 0x0, 0x0, 0x0, &(0x7f0000006380)) (async, rerun: 32) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) 47.772000776s ago: executing program 0 (id=130): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") (async) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") truncate(&(0x7f0000000380)='./file2\x00', 0x9376) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,errors=remount-ro,errors=remount-ro,dots,dots,errors\x00\x00\x00\x00\x00\x00\x00\x00e,\x00'], 0x1, 0x2f8, &(0x7f0000000680)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0xf, 0x0, 0x5, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x400, 0x165) fstatfs(r0, &(0x7f0000000340)=""/244) (async) fstatfs(r0, &(0x7f0000000340)=""/244) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r2 = syz_open_pts(0xffffffffffffffff, 0x109401) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x281c2, 0x10) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x281c2, 0x10) fcntl$setlease(r8, 0x400, 0x1) (async) fcntl$setlease(r8, 0x400, 0x1) fremovexattr(r8, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0x18, &(0x7f0000000bc0)=ANY=[@ANYRES16=r7, @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r9}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x0) (async) r10 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r10, 0x28, 0x2, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xb, 0x7}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x19, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff070000000000ed7b6e1b086b5f0018102f6f85e562b8028d35ce3c31632d6c82da4dfa4d312dd34f3be402dbf5d72b19a0944ef4139ac91267f1578f33d580b81b94800cd754f821e8e9827c9ec2178024726a99b5df0826b18c892c8356c6b7624cb9", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003d501000fcffffff8520000004000000185a00000700000000000000000000008520000002000000bf580c00f0ffffff6d34ffff00000000950000000000000018420000f8ffffff00000000000000008500000084000000b7000000000000009500"/176], &(0x7f0000000080)='GPL\x00', 0x2, 0x54, &(0x7f0000000280)=""/84, 0x41000, 0x10, '\x00', r6, 0x0, r11, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x6, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 47.489002003s ago: executing program 0 (id=137): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000100)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000500)={r3, 0x6, 0x0, [0x100000000, 0xfffffffffffffff8, 0x4, 0xf, 0x1], [0x3, 0xa, 0x824, 0xfffffffffffffff8, 0x39d, 0x0, 0xffffffffffffff81, 0x4, 0x5295, 0x200, 0x10, 0x3, 0x2, 0x5, 0x2, 0x0, 0x5, 0x92c7, 0x1d, 0xfff, 0x2, 0x100000000, 0x100000001, 0x9, 0x6, 0x6, 0x1, 0xb9a5, 0x3, 0x6, 0x6, 0x10000, 0x8000, 0x5fa, 0xd19e, 0x3, 0x3ff, 0x2, 0x6, 0xffffffff, 0x9, 0x0, 0xd2, 0x4, 0x4, 0x7ff, 0x10001, 0x4800000, 0x3, 0x75, 0x4, 0xfff, 0x1, 0x3ff, 0x4, 0x9, 0x7, 0x6, 0x29, 0x61, 0xff, 0x9, 0x0, 0x3, 0xc, 0x3, 0x8, 0x10, 0x81, 0x9, 0x7c466e70, 0xffffffffffffff62, 0x5, 0x0, 0x4, 0x0, 0x7, 0x7ff, 0x8, 0xe971, 0x1, 0xc92e, 0xb, 0x2, 0xa00, 0x80, 0x1, 0xffffffffffffff80, 0x0, 0x3, 0x7, 0xe497, 0x0, 0x3, 0x7, 0x6, 0x1, 0xd3fe, 0x1, 0x7, 0x3, 0x7ff, 0x4, 0x7, 0xa8ca000, 0x2d86, 0x5, 0x8, 0x8, 0x40, 0x0, 0x3, 0x9, 0x100000001, 0x200, 0xffffffffffffffff, 0x97, 0x786, 0x8001, 0xb, 0x8]}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x7, 0x1000, 0x735, 0x1000, r4, 0x81, '\x00', r2, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0x3, @void, @value, @void, @value}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000a80)={0x10}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'}) recvfrom(r6, &(0x7f0000000b00)=""/161, 0xa1, 0x2160, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000bc0)='signal_generate\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r8 = gettid() getresuid(&(0x7f0000000e40), &(0x7f0000000e80), &(0x7f0000000ec0)=0x0) getgroups(0x2, &(0x7f0000000f00)=[0xee01, 0xee00]) r11 = syz_clone(0x2000, &(0x7f0000000f40)="05d99a06f37a88465157ef4c389f030aad5f69e198a857ddb5c6fad2c5d3fc36e8080f8de5f7bdf6ee08bfd7151f16e42cbc6d7c067c684c4c4d2a5d092ebb1fd56120ee9bb8359f29dd1938c48f59216ae9730c2659b5ae64fb0fd32e9a0de09e2205d70ad5f4912833331b075fb9f4ede2f0358c02c02652a2743890cf3e87091abea225bcec8cb760d6eb8e02447730c8c817b6b6e661224ed9368a", 0x9d, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="fb88000ae76b5f664ba799610f09a31575a9") r12 = geteuid() r13 = getgid() ioctl$TIOCGSID(r6, 0x5429, &(0x7f00000010c0)=0x0) getresuid(&(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r0, {0x0, 0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001280)=0x0) ioctl$NS_GET_OWNER_UID(r6, 0xb704, &(0x7f00000012c0)=0x0) fstat(r1, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001380)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000001400)={{0x1, 0x1, 0x18, r0, {0x0}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r22 = getegid() r23 = openat$cgroup(r6, &(0x7f00000014c0)='syz1\x00', 0x200002, 0x0) r24 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x21, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0xc, 0x7, 0x9, 0x20, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000001640)='syzkaller\x00', 0x1, 0x8, &(0x7f0000001680)=""/8, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001700)=[r4, r4, r4, r7, r6, r4], &(0x7f0000001740)=[{0x3, 0x3}, {0x4, 0x4, 0xa, 0x6}, {0x2, 0x4, 0x5, 0x5}, {0x0, 0x4, 0x0, 0x7}, {0x3, 0x3, 0x0, 0x9}, {0x5, 0x3, 0x3, 0x7}, {0x0, 0x1, 0x1, 0xc}], 0x10, 0x4, @void, @value}, 0x94) r25 = syz_open_dev$mouse(&(0x7f0000001880), 0x10001, 0x200200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="1d111dcbe3d7ebb53c67fdd1a2d56b9d9bfae05ecd062766d28067417eb5527e191a81bc108d94a03b1a755e7d56e4a665e414d40770a94ccfefd8c0e25844c7dd3b716089c8082e854e05b97744614112373011324333c0777ae66477d3fd7851962062b698ada19479444e14786443028cf18ff62ab9a650d38b08216317a2020fdac2303677bbfb14dce849cf17f7a88097ddadb07681498e928ba13d68", 0x9f}, {&(0x7f0000000d80)="62886b56d82d622cc5996e1d51de05b01a2686844e5f197cf41cef143560612ebad5147bf9d414696ebcc00649f9a11bcc07e95c6c87731f533710aab87eee644cf696d7624d44b4b1adc2eef6eee0c921dd32ef0b8c36ed36cef959", 0x5c}], 0x2, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x1c, 0x1, 0x1, [r7, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r20, r21, r22}}}, @rights={{0x34, 0x1, 0x1, [r23, r1, 0xffffffffffffffff, r1, r6, r6, r4, r24, r25]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x150, 0x11}}, {{&(0x7f0000001c40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)="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", 0xfc}], 0x1, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r4, r4, r1, r7, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r5, r0, r6, r7, r0, r6]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x138, 0x4004}}, {{&(0x7f0000002740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002a00)=[{&(0x7f00000027c0)="c5cb3c3ae8bb5a6d3a66bb260f09c47df6", 0x11}, {&(0x7f0000002800)="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", 0xfc}, {&(0x7f0000002900)="2879d6429d38ed1764b2d9561a9896c4ec9b9a80444339e8aa9dcca915979cce37da26d25764e77e5f585c139bf4dd2f28dc8b8a5a5debd95237a4f28b3e28734ddbab61f1971416e4e9f5528242691c10cfa3e6557bb04d8b5891ca6287078d67879b02c40686c0b86237234b0db550d3e1396699a2513dbc0f4b4f7da3803e02f2bd290f529e14c3af8786a3e580c1e26db4442c2792d8389d76a9f2e81c36cd8d0e25176c1517871e60ad65d85cc3e7f761bc327f91c7b4844ee14a55228b224c3a908412", 0xc6}], 0x3, &(0x7f0000002a40), 0x0, 0x20000810}}, {{&(0x7f0000002a80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002b00)="f667e2c20aa69b952d16bf4bf6efefcab50adefebdec97d02e90dfa2f0e9ee3dd6f0a56c6e9091dec1b89cf66a47be8d46d79892e934e302cf87e91d001cfae22796d1bd489729778cc1f823690e4d00a8c6b6f5c0b6b7567b625c0835199c58523b26edad72482b0e66b62a180fb18f61f1fd6c93bebd35b39b0245f38a7701fcae2274bb2904e15fbfdd92025ae14092dba2e4cc4a06de973930fa4eca34bedd9ef1b87224", 0xa6}, {&(0x7f0000002bc0)="412b845d", 0x4}, {&(0x7f0000002c00)="7f8b07b17de894f81420cef421f3615720daf8bf77b51bd0daab6a1b7189fc1097fd9c0191415a6d074328515f2651afef71d7220cb82c180a644124efc62ff3381164e5a9fc4765041e607ba650221a2ac942005c13c66bf49f58265e61c98117b526a89ee91ee48cc2aeaee32a4900795ddc031988476b10210ad5931a04a27598c8e390a40ca44dee9e047b22dd8007724651a377860cb9ac5f9e6cba918a9de9782613b35fa29b3ed054bc7f81c0740311034c1beebb1da4db324bd2528970b7edff44c70bdff0fa0251ab5d53eb780c8e", 0xd3}, {&(0x7f0000002d00)="565a04ea7629184bee5f805b077e87571de111879c681d5cb8cc1ae41247d658892e52e414dc5b406148d4c187e60af4675b8d1511ce6ab241f1210be3987ce06f9c857ba76af7e5f9e817d83d30e2c2c3d121ae8da3810a2c4d4e540de8500fe5daab0a36e67a6f79efc3b2215ea9b09eacd9edd2f6691beec1cb71aeda8f9be4649bd2ac6fa0bdbd3731b1e8a3aec1eb232edb97bae291e15b49cb39748ae83e416faf0fe83f68", 0xa8}, {&(0x7f0000002dc0)="e2aa141130fa7fff50c2e793444a9dc98b1bfb081d8bff0479bb969bd370a69da9f16359341facfa24f4566ee46187f17fac82cdaf488db95b89c644ac4a36cb5201cfefe4ec1d4bfc46cc1c3910287a15245c90d5a5cc978cf16c996aea99c3109e77fefaab25e2ed087645132d15f552194f16b0cfaaa209ab05766a5c6092d0dad3fd8eae0491aeed4af5f798b483faaf3459532075c2444029de1c42a2e21e7876573a16223788c19bf46ee7f696394df959e7a42290fe4190fe634bbe29f038da3357ee7c14dc", 0xc9}, {&(0x7f0000002ec0)="ae2d568db56b93839b21a2ee057130bbabef6e4dd3222cc22493f98469c6cd620215de1229715f59ca92c6cf98f70844dfa27958e5cccbb6e456468598016f0f90172cb4a005b6cd3d4804e44075b1aec23782ae2d71c4f74f82901d64f561e7beee9a70e0aa4d771f9f134b534b53b83865783d17284a6cec93d550670a6cf18dacc394a7551b573650fd3f56d1d9e621db85c143f9b4009c7af2ba35906d8f76eaf10b096242ee850665d1418b7431d7", 0xb1}, {&(0x7f0000002f80)="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", 0xff}], 0x7, &(0x7f0000003a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r6, r6]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r4, r1]}}, @cred={{0x1c}}], 0xb8, 0x800}}], 0x4, 0x8000) 47.291366705s ago: executing program 0 (id=140): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000b0000000000000a040000001000000000000002fcffffff000000000000000d000000000e0000000000000207000000005f00"/75], &(0x7f0000000840)=""/242, 0x4b, 0xf2, 0xffffffff, 0x803, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r5}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000740)={0x0, &(0x7f0000000780)}) dup(r6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2801c0a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff030000050021000600000018011a80300002802c00018008000f0008000000080011007a80000008002000ff010000080004000c00000008001e0003000000a0000a800500080002"], 0x1c0}, 0x1, 0xba01}, 0x200480d0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000006f00000018010000202070250000000000202020ceb97800000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000950000000000000000000000000000000000000060f7e4dd6f5adb7c9901262625147a38862d9c987dcaba57c4309fcff9243950875dab316b6837"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$igmp6(0xa, 0x3, 0x3a) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 47.288216506s ago: executing program 32 (id=140): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000b0000000000000a040000001000000000000002fcffffff000000000000000d000000000e0000000000000207000000005f00"/75], &(0x7f0000000840)=""/242, 0x4b, 0xf2, 0xffffffff, 0x803, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES32=0xffffffffffffffff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r4}, 0x3d) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r5}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000740)={0x0, &(0x7f0000000780)}) dup(r6) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2801c0a, &(0x7f0000000000), 0x1, 0x79b, &(0x7f0000000a40)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=ANY=[@ANYBLOB="c00100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000480000004800128009000100766c616e00000000380002800c0003000000000005000000280004800c000100ff0f0000000000000c00010006000000050000000c000100060000000900000014000300766c616e30000000000000000000000008002c00ff030000050021000600000018011a80300002802c00018008000f0008000000080011007a80000008002000ff010000080004000c00000008001e0003000000a0000a800500080002"], 0x1c0}, 0x1, 0xba01}, 0x200480d0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000006f00000018010000202070250000000000202020ceb97800000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000950000000000000000000000000000000000000060f7e4dd6f5adb7c9901262625147a38862d9c987dcaba57c4309fcff9243950875dab316b6837"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) socket$igmp6(0xa, 0x3, 0x3a) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.493785616s ago: executing program 1 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00001ca9000000ffd1356112e524955f75ee3a93468b0f000007222724daf61ca35e2b68d3b5df1c0bcaee9114a8d8a2bbeb3dd1f5798b82c3623a112137c16e855dc90a00c5a0de7bbd39965d5d8e9d523e1693515d3bb42e722f2edf06"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r4 = dup(r3) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$FOU_CMD_GET(r5, 0x0, 0x40000) openat(r4, 0x0, 0x2c0000, 0x220) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sync() sync() fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) sync() sync() sync() sync() sync() sync() sync() sync() 4.097008021s ago: executing program 1 (id=904): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, 0x0, 0x0) listen(r7, 0x0) accept4$nfc_llcp(r7, 0x0, 0x0, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000001a000100a483fb3afbdbdf2581bc"], 0x1c}}, 0x884) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'veth0_vlan\x00', {'bridge_slave_1\x00'}, 0xc}) 2.337562328s ago: executing program 1 (id=938): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 2.311586269s ago: executing program 1 (id=939): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140004001000010000000000000000000a00000a74000000060a0b0400000000000000000200000048000480440001800a000100696e6e6572000000340002800800024000000084080003"], 0x9c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) readahead(r0, 0x3e0, 0x6e0948fa) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x2c010210) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x96) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmmsg$unix(r2, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x2000c080) getpeername$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000002c0)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0xac}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) r6 = socket$inet(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) readv(r6, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/187, 0xbb}], 0x1) sendto$inet(r6, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r6, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0", 0x3}], 0x1}}], 0x1, 0x80) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.237966504s ago: executing program 1 (id=942): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fstat(r2, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @loopback={0x30000000000}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x6}}) 2.082555093s ago: executing program 1 (id=948): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = getpid() r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, 0x0, 0x0) listen(r7, 0x0) accept4$nfc_llcp(r7, 0x0, 0x0, 0x80000) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c0000001a000100a483fb3afbdbdf2581bc"], 0x1c}}, 0x884) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0xfffffffc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000000)={0x8, 'veth0_vlan\x00', {'bridge_slave_1\x00'}, 0xc}) 1.887082155s ago: executing program 4 (id=955): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = fsopen(&(0x7f0000000200)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000001540)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001780)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="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"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x200, 0x0, 0x600, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r7, 0x40044591, 0x0) io_setup(0x3, &(0x7f0000000080)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.746082063s ago: executing program 4 (id=957): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = fsopen(&(0x7f0000000200)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000001540)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, 0x0, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x200, 0x0, 0x600, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) io_setup(0x3, &(0x7f0000000080)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 1.742531484s ago: executing program 4 (id=958): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}]}, &(0x7f0000000100)=0x10) bind$packet(r0, &(0x7f0000000280)={0x11, 0x7, r1, 0x1, 0xdf, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r1, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000600)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@errors_remount}, {@noload}]}, 0x3, 0x44a, &(0x7f00000006c0)="$eJzs271vG2UYAPDn7CSlXyRU5aMfQKAgylfSpKV0YAGBxFAkJBjKGJK0CnUb1ASJVhEEhMqIKjGxIEYk/gImWBAwIbHCjipVKEsLk9HZd43t2E6dOnGpfz/p3Pe9O/d9nrt77ffujQPoW6PpSxKxKyL+iIjharV+h9HqPzdWlqb/WVmaTqJcfuvvpLLf9ZWl6XzX/H0788pAROGzJA40aXfh4qWzU6XS7IWsPr547v3xhYuXnp87N3Vm9szs+ckTJ44dnXjx+OQLXckzzev6/o/mD+57/Z0rb0yfuvLuL98lef4NeXTJaLuNT5bLXW6ut3bXlJOBHgZCR4rVbhqDlf4/HMVYPXnD8dqnPQ0O2FTlcrn8QOvNy2XgLpZEryMAeiP/ok/vf/Nli4Yed4RrL1dvgNK8b2RLdctAFLJ9Bhvub7tpNCJOLf/7dbrE5jyHAACo80M6/nmu2fivELXPhe7N5lBGIuK+iNgTEccjYm9E3B9R2ffBiHiow/YbJ0nWjn8KV2tr5aTDBtaRjv9eyua26sd/+egvRopZbXcl/8Hk9Fxp9kh2TA7H4La0PtGmjR9f/f2LVttqx3/pkrafjwWzOK4ObKt/z8zU4tTt5Fzr2icR+wca8j8ZlQm8fCYgPeT7ImL/BtuYe+bbg622rZ9/G12YZyp/E/FU9fwvR935X73Qkvbzk+P3RGn2yHh+Vaz162+X32zV/m3l3wXp+d/R9Pq/mf9IUjtfu9DJ//7V0+nr5T8/b3lPs9Hrfyh5u1IeytZ9OLW4eGEiYig5WQ26dv3k6nvzer5/mv/hQ837/55YPRIHIiK9iB+OiEci4tEs9sci4vGIONTmKPz8yhPvbTz/zZXmP9PR+V8tDEXjmuaF4tmfvq9rdKST/NPzf6xSOpytuZXPv1uJq9OrGQAAAP6vChGxK5LC2M1yoTA2Vv0b/r2xo1CaX1h89vT8B+dnqr8RGInBQv6ka7jmeehEdluf1ycb6kez58ZfFrdX6mPT86WZXicPfW5ni/6f+qvY6+iATef3WtC/9H/oX/o/9C/9H/pXk/6/vRdxAFuv2ff/xz2IA9h6Df3ftB/0Eff/0L820v99ZsDdoW1fHtq6OIAttbA91v+RvILCmkIU7ogwFDap0OtPJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO74LwAA///lI+j0") ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000340)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000480)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r5}, 0x18) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000180)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) close(r6) perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x3, 0x6, 0x3, 0x3, 0x0, 0x2, 0x2990, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xbfe, 0x2, @perf_config_ext={0x2, 0x6a5}, 0x0, 0x3, 0x9, 0x5, 0x1, 0x0, 0x1, 0x0, 0x10}, r6, 0x8, r6, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000cd57000000a83a3383d32311d60028f8", @ANYRES32=r4, @ANYBLOB="ea00"/20, @ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0200000002000000040000000200000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000380)={0x0, @local, @broadcast}, &(0x7f00000003c0)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x26, &(0x7f0000000c40)=@raw=[@alu={0x4, 0x1, 0x1, 0x6, 0x7, 0x20}, @map_fd={0x18, 0x6, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @jmp={0x5, 0x1, 0xd, 0x0, 0x3, 0x100, 0xffffffffffffffff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x45, '\x00', r8, 0x25, r4, 0x8, &(0x7f0000000400)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0x3, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b40)=[{0x5, 0x2, 0x5, 0x8}, {0x5, 0x1, 0x6, 0x7}], 0x10, 0x9, @void, @value}, 0x94) memfd_secret(0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r10, 0x5, &(0x7f00000031c0)={0x2, 0x2, 0x4, 0x20001}) 1.236946005s ago: executing program 5 (id=966): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="240000009616419e3b4d5c1d0000040000000049000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000e1820b9ab58050020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1830000012800000000000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000240)=""/153, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000002000004000000000008eb32825349"], 0x50) syz_emit_ethernet(0x3a, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0a08004600002c0000000000069078ac1414bbac1414aa9402000000004e26", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="cd7974aac9a3979738454f48ed463bd0d788654d62b783f7d63aea2964e21b87f651c77d3bdbb9949079c395bf60089a1fee99d51f40cde31ec5f2bfe8cc129f89e49ef311d93ac8688e7a2651681cdaf1e55294afa6ad660f73ecf9a0424c6aa4c68107e845f2568f3b2afdd952297edaff46d2c75ace6323dd16a9674f77ccc5240f15b3225de07585c3aaad05ae1289b3e4551fb72ecb98978e6957c0bd68e19475d7360dbed66cb523df294ba2c80081e34ce9b4ff"], 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) getresuid(0xffffffffffffffff, 0x0, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x1004000, &(0x7f00000001c0), 0x1, 0x783, &(0x7f0000002200)="$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") openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r6, 0x0, 0xfc8d, 0x8000, 0x3) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, 0x0, 0x4040) setsockopt$packet_int(r8, 0x107, 0x8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}, 0x9539}], 0x1, 0x20, 0x0) fcntl$setsig(r7, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 879.516887ms ago: executing program 3 (id=972): socket(0x10, 0x3, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x4000000) (async, rerun: 64) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) (rerun: 64) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000014002101000000000000000002000000", @ANYRES32=r6, @ANYBLOB="0800020014"], 0x20}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000150001000b7efe000000000002000000", @ANYRES32=r6], 0x18}}, 0x0) 878.686727ms ago: executing program 3 (id=973): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x4f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r1, 0x0, 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xd80, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f00000001c0)={0x68081000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000340)) creat(&(0x7f0000000000)='./bus\x00', 0x26) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 878.204577ms ago: executing program 4 (id=974): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = fsopen(&(0x7f0000000200)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000001540)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x200, 0x0, 0x600, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) io_setup(0x3, &(0x7f0000000080)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 808.409321ms ago: executing program 4 (id=975): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = fsopen(&(0x7f0000000200)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000001540)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x200, 0x0, 0x600, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) io_setup(0x3, &(0x7f0000000080)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 750.465804ms ago: executing program 4 (id=976): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) clock_adjtime(0x0, &(0x7f0000000540)={0xc616, 0x2, 0x0, 0x2, 0xff, 0x8, 0x7fffffff, 0xb6, 0x400, 0x4, 0x6, 0x800000000000000, 0x2aed, 0x2, 0xfffffffffffffffe, 0xffff, 0x3dd, 0x7, 0x3, 0x9, 0x0, 0x4, 0x800, 0x4, 0x3, 0x5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) syz_io_uring_setup(0x6908, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0xe6}, &(0x7f0000000200), &(0x7f0000000340)) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x400}, &(0x7f0000000000), &(0x7f0000000240)) socket$inet6(0xa, 0x2, 0x0) setresgid(0x0, 0xee00, 0xee01) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xd, 0x13, r5, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f00000000c0)) socket(0x10, 0x3, 0x0) io_uring_setup(0x4f01, &(0x7f0000000180)) r6 = msgget$private(0x0, 0x0) msgrcv(r6, &(0x7f0000000740)={0x0, ""/242}, 0xfa, 0x2, 0x1000) msgsnd(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0200c7612f33117c281794584c199e0af2676f21d1ef000000000000"], 0xe, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r7, 0x400000001ffffffd) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xffff, @loopback, 0x9193}, 0x1c) 720.587776ms ago: executing program 3 (id=977): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x53) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x1f33, 0x0, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f0000000080)={[{@abort}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@init_itable}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@oldalloc}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x542, &(0x7f0000000140)="$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") timer_delete(0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x18}}, @dstopts_2292={{0x10, 0x29, 0xb}}], 0x30}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@errors_remount}]}, 0x9, 0x625, &(0x7f0000000e40)="$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") 694.956638ms ago: executing program 3 (id=978): socket(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xd, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'sit0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'tunl0\x00'}}, 0x1e) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000045000000020000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getitimer(0x0, &(0x7f00000010c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x3, 0x2}}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=@gettaction={0x44, 0x32, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008014}, 0x4004014) 623.353992ms ago: executing program 3 (id=979): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000580)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3, 0xcdbc, 0x8, 0x4, 0x100, 0xfffffff9, "86de0a"}}, 0x11b) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket(0x21, 0x2, 0x10000000000002) connect$qrtr(r4, &(0x7f0000000440)={0x2a, 0x3, 0x7fff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x6, &(0x7f0000000080)=[{0x8, 0x1, 0xfa, 0xfffffff5}, {0x8, 0x3, 0x2}, {0x4, 0x35, 0x3, 0xb}, {0x0, 0x4, 0xf7, 0xffff}, {0x5, 0x5, 0x7, 0x1}, {0x8, 0x8, 0xda, 0xb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) rmdir(0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r7}, 0x10) timerfd_create(0x0, 0x0) 622.293762ms ago: executing program 3 (id=980): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_create1(0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)={0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={r1}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)) 335.098569ms ago: executing program 5 (id=984): creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x1c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c9dfea5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41ecdd52}]}]}]}, 0x44}}, 0x0) (async) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 325.27462ms ago: executing program 5 (id=985): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r0 = fsopen(&(0x7f0000000200)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) mkdirat(r1, &(0x7f0000001540)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000001680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x74) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x200, 0x0, 0x600, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) io_setup(0x3, &(0x7f0000000080)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000500)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000040)="f6f4e9a100000000002a8bc686ddb7dbfc007024", 0x0, 0x4, 0x0, 0x31, 0x0, &(0x7f0000000940)="01020ef222540f58f09046dc2ff1b910745539f08dcceb13d6572de6b1135d3bcaaaf48967d4d83bce18014a392a3bc0b8", 0x0}, 0x50) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 323.91912ms ago: executing program 2 (id=986): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x200}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) syz_io_uring_setup(0x7d6, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x2, 0xca}, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) pipe(&(0x7f0000000040)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000000c0)=ANY=[@ANYRES16=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x9135}, 0x18) syz_open_dev$usbmon(&(0x7f0000000240), 0x9, 0x24000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffef, 0x20000006, 0x6, 0x4, 0x8, 0xfff9, 0x0, 0x0, 0x0, 0x100000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000000000000000001eff93eb03210c2341ff9e99cfdbf45764ae91a9cd29fc7cbf5a233cbe74cdd56d5ba8e90b08faea9ff5e7ef5ef187cf5d275b61be5b1d4048dfd24dc216c8b40eef8a27e9529dff543136d9a5610e9e30d1c297af", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) 296.924151ms ago: executing program 2 (id=987): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0x4f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r1, 0x0, 0x0, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xd80, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) syz_clone3(&(0x7f00000001c0)={0x68081000, 0x0, 0x0, 0x0, {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000340)) creat(&(0x7f0000000000)='./bus\x00', 0x26) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 290.396782ms ago: executing program 5 (id=988): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x53) mount(&(0x7f0000000040)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000044}, 0x4000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x1f33, 0x0, 0x0, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000040)='.\x02\x00', 0x1004e, &(0x7f0000000080)={[{@abort}, {@usrjquota_path={'usrjquota', 0x3d, '.\x02'}}, {@init_itable}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@data_err_abort}, {@oldalloc}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@acl}]}, 0x1, 0x542, &(0x7f0000000140)="$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") timer_delete(0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x18}}, @dstopts_2292={{0x10, 0x29, 0xb}}], 0x30}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@errors_remount}]}, 0x9, 0x625, &(0x7f0000000e40)="$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") 246.857975ms ago: executing program 5 (id=989): lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000140)=@v1={0x1000000, [{0x7, 0x9}]}, 0xc, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x2c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x26}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42841}, 0x8010) (async) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") (async) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x14000000, 0x4}, 0x8000, 0xffffffff, 0x20000, 0x9, 0x0, 0x268, 0xfff9, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 167.44662ms ago: executing program 5 (id=990): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x2, 0x7ffc0002}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x64}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r8 = openat$cgroup_ro(r7, &(0x7f00000005c0)='io.stat\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x103ff, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000780)={'dummy0\x00'}) 120.316733ms ago: executing program 2 (id=991): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {}, {0x7, 0x5}}}, 0x24}}, 0x44800) r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000906010200000000000000a1e2e7bef2811b170007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x2, 0x3, 0x3}) 71.777755ms ago: executing program 2 (id=992): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x40000000) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001900)='./cgroup/syz1\x00', 0x1ff) (async) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000003dc0)=[{0x9, 0x1, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/110, 0x6e}, {&(0x7f0000000380)=""/134, 0x86}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000580)=""/219, 0xdb}, {&(0x7f0000000680)=""/90, 0x5a}], &(0x7f00000007c0)=[0x7, 0x2, 0x6, 0x7, 0xff, 0x4, 0xff, 0x8001, 0x2]}, {0x1, 0x1, 0x0, &(0x7f0000000880)=[{&(0x7f0000000840)=""/39, 0x27}], &(0x7f00000008c0)=[0x9, 0x216, 0x80, 0x0, 0x81]}, {0x5, 0x1, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)}, {&(0x7f0000001940)=""/66, 0x42}, {&(0x7f00000019c0)=""/73, 0x49}, {&(0x7f0000001a40)=""/60, 0x3c}], &(0x7f0000001b00)=[0x8000000000000000]}, {0x2, 0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001b40)=""/92, 0x5c}, {&(0x7f0000001dc0)=""/191, 0xbf}], &(0x7f0000001e80)=[0x5, 0x4, 0x0]}, {0x5, 0x1, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001ec0)=""/8, 0x8}, {&(0x7f0000001f00)=""/161, 0xa1}, {&(0x7f0000001fc0)=""/30, 0x1e}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/137, 0x89}], &(0x7f0000003140)=[0x9, 0xffff, 0x12, 0xc37, 0x1a73, 0x8000000000000001, 0x800, 0x3]}, {0x8, 0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003180)=""/45, 0x2d}, {&(0x7f00000031c0)=""/223, 0xdf}, {&(0x7f00000032c0)=""/161, 0xa1}, {&(0x7f0000003380)=""/245, 0xf5}, {&(0x7f0000003480)=""/192, 0xc0}, {&(0x7f0000003540)=""/231, 0xe7}, {&(0x7f0000003640)=""/181, 0xb5}, {&(0x7f0000003700)=""/82, 0x52}], &(0x7f0000003800)=[0x4480, 0x1, 0x5, 0x79, 0x7, 0x9, 0x8]}, {0x5, 0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000003840)=""/215, 0xd7}, {&(0x7f0000003940)=""/216, 0xd8}, {&(0x7f0000003a40)=""/241, 0xf1}, {&(0x7f0000003b40)=""/218, 0xda}, {&(0x7f0000003c40)=""/129, 0x81}], &(0x7f0000003d80)=[0x15, 0x7533afda, 0x11a, 0x81, 0x80, 0x0, 0x80000001]}], 0x7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) unshare(0x2040400) (async) unshare(0x2000400) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) (async) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/105, 0x69}], 0x1, 0x0) 7.408329ms ago: executing program 2 (id=993): bpf$TOKEN_CREATE(0x24, &(0x7f0000000440), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@initdev, @in6=@loopback}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) write$sndseq(r1, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r5) close(r5) mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x11, r5, 0xffffffffffffffc0) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000280)={0x0, 0x3ff, 0xad}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x0, 0x250, 0x128, 0xffffffff, 0xffffffff, 0x320, 0x320, 0x320, 0xffffffff, 0x4, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "1c0c", 0x1}}, @common=@addrtype={{0x30}, {0x880, 0x100, 0x0, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x0, 0x0, 0x2], 0x1, 0x5}, {0xffffffffffffffff, [0x2, 0x1, 0x1527d57d7d5f68cc, 0x2, 0x3, 0x1], 0x6, 0x2}}}}, {{@ip={@broadcast, @broadcast, 0xff000000, 0xffffff00, 'ip6tnl0\x00', 'hsr0\x00', {0xff}, {}, 0x73, 0x3, 0xc}, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28}, 0x1}, @common=@inet=@set3={{0x50}, {{0x2, 0x0, 0x3}, {0xe, 0x400}, {0x2, 0x1}, 0x7f3}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x6, 0x9, {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, 0x7, 0x7, [0x3d, 0x3, 0x9, 0x9, 0x3b, 0x16, 0x1b, 0x28, 0x36, 0x15, 0x9, 0x2f, 0x3d, 0x25, 0xb, 0xf], 0x0, 0x200}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) connect$pppoe(r3, &(0x7f00000004c0)={0x18, 0x0, {0x1, @random="dffcc2101e34", 'vcan0\x00'}}, 0x1e) sendmmsg$sock(r3, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800}}], 0x1, 0x81) 0s ago: executing program 2 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) (async) r1 = timerfd_create(0x8, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 64) timerfd_settime(r1, 0x0, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x7, 0x3, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000006a0001032bbd7000fbdbdf2502000000e6ffffff07000a"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8014) kernel console output (not intermixed with test programs): 38.027849][ T3728] EXT4-fs (loop3): 1 truncate cleaned up [ 38.071533][ T3728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.087364][ T3732] loop2: detected capacity change from 0 to 8192 [ 38.112035][ T3732] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.314637][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.582315][ T3753] loop1: detected capacity change from 0 to 128 [ 38.611777][ T3310] kworker/u8:6: attempt to access beyond end of device [ 38.611777][ T3310] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 38.668542][ T3756] syz.1.92: attempt to access beyond end of device [ 38.668542][ T3756] loop1: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 39.123241][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 39.164613][ T3777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.211033][ T3777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.253432][ T3777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.315298][ T3777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.360424][ T3783] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6) [ 39.400011][ T3777] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.418250][ T3777] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.461587][ T3789] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.476509][ T3777] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.512770][ T3777] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.537587][ T3795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 39.559231][ T3794] loop0: detected capacity change from 0 to 256 [ 39.580229][ T3795] bridge_slave_1: left allmulticast mode [ 39.585945][ T3795] bridge_slave_1: left promiscuous mode [ 39.591728][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.604467][ T3789] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.103'. [ 39.639256][ T3789] netlink: zone id is out of range [ 39.644499][ T3789] netlink: zone id is out of range [ 39.651349][ T3789] netlink: zone id is out of range [ 39.654133][ T3795] bridge_slave_0: left allmulticast mode [ 39.657170][ T3801] netlink: 'syz.0.104': attribute type 1 has an invalid length. [ 39.662284][ T3795] bridge_slave_0: left promiscuous mode [ 39.674039][ T3789] netlink: zone id is out of range [ 39.675581][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.680800][ T3789] netlink: zone id is out of range [ 39.693837][ T3789] netlink: zone id is out of range [ 39.699059][ T3800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.699986][ T3789] netlink: zone id is out of range [ 39.712558][ T3789] netlink: zone id is out of range [ 39.717735][ T3789] netlink: zone id is out of range [ 39.723037][ T3789] netlink: zone id is out of range [ 39.873196][ T35] IPVS: starting estimator thread 0... [ 39.917988][ T3820] 9pnet_fd: Insufficient options for proto=fd [ 39.968327][ T3822] loop1: detected capacity change from 0 to 512 [ 39.971390][ T3814] IPVS: using max 2016 ests per chain, 100800 per kthread [ 39.975031][ T3822] EXT4-fs: Ignoring removed oldalloc option [ 40.010917][ T3822] EXT4-fs: Mount option(s) incompatible with ext2 [ 40.027034][ T3822] loop1: detected capacity change from 0 to 1024 [ 40.035229][ T3822] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 40.045254][ T3822] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: comm syz.1.111: inode #98: comm syz.1.111: iget: illegal inode # [ 40.058774][ T3822] EXT4-fs (loop1): no journal found [ 40.064093][ T3822] EXT4-fs (loop1): can't get journal size [ 40.071922][ T3822] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 40.081131][ T3822] EXT4-fs (loop1): failed to initialize system zone (-22) [ 40.088558][ T3822] EXT4-fs (loop1): mount failed [ 40.133158][ T3833] loop1: detected capacity change from 0 to 512 [ 40.140722][ T3833] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.152798][ T3833] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.115: invalid indirect mapped block 83886080 (level 1) [ 40.168451][ T3833] EXT4-fs (loop1): Remounting filesystem read-only [ 40.175331][ T3833] EXT4-fs (loop1): 1 orphan inode deleted [ 40.181176][ T3833] EXT4-fs (loop1): 1 truncate cleaned up [ 40.188696][ T3833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.202299][ T3833] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 40.209389][ T3833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.336250][ T3843] syz_tun: entered allmulticast mode [ 40.387845][ T3846] syz_tun: left allmulticast mode [ 40.404169][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.119'. [ 40.432095][ T3847] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 40.505819][ T3854] netlink: 112 bytes leftover after parsing attributes in process `syz.2.121'. [ 40.524253][ T3847] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.556486][ T3854] netlink: 112 bytes leftover after parsing attributes in process `syz.2.121'. [ 40.955570][ T3847] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.992725][ T3847] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.013393][ T29] kauditd_printk_skb: 3887 callbacks suppressed [ 41.013407][ T29] audit: type=1326 audit(1740436152.849:7802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 41.043502][ T29] audit: type=1326 audit(1740436152.849:7803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87e78d9359 code=0x7ffc0000 [ 41.066921][ T29] audit: type=1326 audit(1740436152.849:7804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 41.090187][ T29] audit: type=1326 audit(1740436152.879:7805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 41.113441][ T29] audit: type=1326 audit(1740436152.879:7806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87e78d9359 code=0x7ffc0000 [ 41.136692][ T29] audit: type=1326 audit(1740436152.879:7807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 41.160118][ T29] audit: type=1326 audit(1740436152.879:7808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87e78d9359 code=0x7ffc0000 [ 41.183471][ T29] audit: type=1326 audit(1740436152.879:7809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 41.206801][ T29] audit: type=1326 audit(1740436152.899:7810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 41.230126][ T29] audit: type=1326 audit(1740436152.899:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3848 comm="syz.2.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87e78d9359 code=0x7ffc0000 [ 41.257561][ T3847] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.304273][ T3372] hid-generic 0001:0003:02C6.0002: item fetching failed at offset 2/3 [ 41.317785][ T3867] netlink: 272 bytes leftover after parsing attributes in process `syz.2.124'. [ 41.328738][ T3372] hid-generic 0001:0003:02C6.0002: probe with driver hid-generic failed with error -22 [ 41.357286][ T3847] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.373246][ T3847] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.395212][ T3847] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.409140][ T3847] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.471303][ T3871] Falling back ldisc for ttyS3. [ 41.477635][ T3888] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.484832][ T3888] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.530705][ T3894] loop2: detected capacity change from 0 to 2048 [ 41.555776][ T3886] loop0: detected capacity change from 0 to 8192 [ 41.564403][ T3886] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.578209][ T3894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.592014][ T3885] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 41.600854][ T3885] FAT-fs (loop0): Filesystem has been set read-only [ 41.612602][ T3894] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.132: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 41.622924][ T3885] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 41.636013][ T3894] EXT4-fs (loop2): Remounting filesystem read-only [ 41.645014][ T3885] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 41.661626][ T3908] netlink: 112 bytes leftover after parsing attributes in process `syz.4.134'. [ 41.672410][ T3908] netlink: 112 bytes leftover after parsing attributes in process `syz.4.134'. [ 41.681856][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.733957][ T3914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.813423][ T3914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.836114][ T3918] loop2: detected capacity change from 0 to 512 [ 41.844244][ T3918] ext4: Bad value for 'debug_want_extra_isize' [ 41.863631][ T3914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.885290][ T1942] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.904580][ T3918] lo speed is unknown, defaulting to 1000 [ 41.924598][ T3914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.997726][ T1942] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.027059][ T3914] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.038927][ T3914] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.051102][ T3914] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.063659][ T3914] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.073104][ T1942] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.121733][ T1942] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.139238][ T3921] lo speed is unknown, defaulting to 1000 [ 42.212949][ T1942] bridge_slave_1: left allmulticast mode [ 42.218684][ T1942] bridge_slave_1: left promiscuous mode [ 42.224476][ T1942] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.233293][ T1942] bridge_slave_0: left allmulticast mode [ 42.239030][ T1942] bridge_slave_0: left promiscuous mode [ 42.244804][ T1942] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.343076][ T1942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.359060][ T1942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.384856][ T3944] loop1: detected capacity change from 0 to 256 [ 42.403596][ T1942] bond0 (unregistering): Released all slaves [ 42.430413][ T3944] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.444043][ T3944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 42.456185][ T3921] chnl_net:caif_netlink_parms(): no params data found [ 42.466903][ T1942] hsr_slave_0: left promiscuous mode [ 42.473462][ T1942] hsr_slave_1: left promiscuous mode [ 42.479085][ T1942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.486625][ T1942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.494330][ T1942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.501880][ T1942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.512314][ T1942] veth1_macvtap: left promiscuous mode [ 42.518090][ T1942] veth0_macvtap: left promiscuous mode [ 42.518275][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.146'. [ 42.524671][ T1942] veth1_vlan: left promiscuous mode [ 42.537792][ T1942] veth0_vlan: left promiscuous mode [ 42.609280][ T1942] team0 (unregistering): Port device team_slave_1 removed [ 42.619476][ T1942] team0 (unregistering): Port device team_slave_0 removed [ 42.655137][ T3944] bond_slave_1: entered promiscuous mode [ 42.670151][ T3949] bond0: (slave bond_slave_1): Releasing backup interface [ 42.678618][ T3949] bond_slave_1 (unregistering): left promiscuous mode [ 42.739265][ T3921] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.746721][ T3921] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.754816][ T3921] bridge_slave_0: entered allmulticast mode [ 42.761434][ T3921] bridge_slave_0: entered promiscuous mode [ 42.768528][ T3921] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.775866][ T3921] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.783433][ T3921] bridge_slave_1: entered allmulticast mode [ 42.789884][ T3921] bridge_slave_1: entered promiscuous mode [ 42.798612][ T3964] ip6tnl1: entered promiscuous mode [ 42.833941][ T3921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.845944][ T3921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.902491][ T3921] team0: Port device team_slave_0 added [ 42.909875][ T3921] team0: Port device team_slave_1 added [ 42.929859][ T3921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.936937][ T3921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.962951][ T3921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.979647][ T3921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.986676][ T3921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.012736][ T3921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.046632][ T3921] hsr_slave_0: entered promiscuous mode [ 43.053077][ T3921] hsr_slave_1: entered promiscuous mode [ 43.059263][ T3921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.067240][ T3921] Cannot create hsr debugfs directory [ 43.095270][ T1942] IPVS: stop unused estimator thread 0... [ 43.166758][ T3921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.175699][ T3921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.184838][ T3921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.194571][ T3921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.230603][ T3921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.244552][ T3921] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.268834][ T267] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.275980][ T267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.292049][ T3981] loop2: detected capacity change from 0 to 128 [ 43.304887][ T267] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.311993][ T267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.359220][ T3983] loop4: detected capacity change from 0 to 512 [ 43.368925][ T3983] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.158: bg 0: block 418: padding at end of block bitmap is not set [ 43.384478][ T3983] EXT4-fs (loop4): Remounting filesystem read-only [ 43.392028][ T3983] EXT4-fs (loop4): 1 truncate cleaned up [ 43.398270][ T3983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.410471][ T3983] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 43.415514][ T3921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.417329][ T3983] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.437661][ T3983] syz.4.158 uses obsolete (PF_INET,SOCK_PACKET) [ 43.558302][ T3921] veth0_vlan: entered promiscuous mode [ 43.566251][ T3921] veth1_vlan: entered promiscuous mode [ 43.581639][ T3921] veth0_macvtap: entered promiscuous mode [ 43.590108][ T3921] veth1_macvtap: entered promiscuous mode [ 43.603537][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.614067][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.623900][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.634362][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.644207][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.654646][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.674748][ T3921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.683944][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.694441][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.704270][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.714715][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.724639][ T3921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.735129][ T3921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.992050][ T3921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.007249][ T3921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.016047][ T3921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.024899][ T3921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.025577][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 44.033665][ T3921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.060390][ T4011] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 44.074009][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 44.082893][ T4014] netlink: 24 bytes leftover after parsing attributes in process `syz.3.162'. [ 44.134047][ T4018] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.142561][ T4018] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.150911][ T4018] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.159235][ T4018] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 44.168652][ T4018] geneve2: entered promiscuous mode [ 44.173930][ T4018] geneve2: entered allmulticast mode [ 44.368308][ T4033] 9pnet_fd: Insufficient options for proto=fd [ 44.484824][ T4035] loop2: detected capacity change from 0 to 8192 [ 44.547564][ T4040] 9pnet_fd: Insufficient options for proto=fd [ 44.790925][ T4053] 9pnet_fd: Insufficient options for proto=fd [ 44.842877][ T4060] loop1: detected capacity change from 0 to 512 [ 44.849748][ T4060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.862202][ T4060] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.176: invalid indirect mapped block 83886080 (level 1) [ 44.876317][ T4060] EXT4-fs (loop1): Remounting filesystem read-only [ 44.883111][ T4060] EXT4-fs (loop1): 1 orphan inode deleted [ 44.888870][ T4060] EXT4-fs (loop1): 1 truncate cleaned up [ 44.895113][ T4060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.907636][ T4060] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 44.914768][ T4060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.946675][ T4065] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 44.957814][ T4064] IPVS: stopping master sync thread 4065 ... [ 45.096030][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.102912][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.109111][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.163922][ T4084] infiniband syz1: set active [ 45.168683][ T4084] infiniband syz1: added tunl0 [ 45.173561][ T1037] tunl0 speed is unknown, defaulting to 1000 [ 45.296547][ T4084] RDS/IB: syz1: added [ 45.308457][ T4084] smc: adding ib device syz1 with port count 1 [ 45.327558][ T4084] smc: ib device syz1 port 1 has pnetid [ 45.333703][ T3373] tunl0 speed is unknown, defaulting to 1000 [ 45.340612][ T4097] SELinux: syz.2.187 (4097) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.349589][ T4095] loop1: detected capacity change from 0 to 512 [ 45.363732][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.363926][ T4097] netlink: 'syz.2.187': attribute type 4 has an invalid length. [ 45.371737][ T4095] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 45.385649][ T4095] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.396490][ T4095] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.189: invalid indirect mapped block 256 (level 2) [ 45.413281][ T4095] EXT4-fs (loop1): 2 truncates cleaned up [ 45.422011][ T4095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.431833][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.469240][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.489800][ T4103] loop2: detected capacity change from 0 to 1024 [ 45.507095][ T4095] netlink: 'syz.1.189': attribute type 1 has an invalid length. [ 45.508574][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.514822][ T4095] __nla_validate_parse: 2 callbacks suppressed [ 45.514836][ T4095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'. [ 45.538304][ T4103] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.556851][ T4084] tunl0 speed is unknown, defaulting to 1000 [ 45.565759][ T4103] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.578754][ T4103] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.191: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 45.599291][ T4103] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.191: couldn't read orphan inode 11 (err -117) [ 45.613728][ T4103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.636253][ T4103] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.191: Invalid block bitmap block 0 in block_group 0 [ 45.652842][ T4103] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.191: Failed to acquire dquot type 0 [ 45.666833][ T4103] EXT4-fs (loop2): shut down requested (2) [ 45.668406][ T4111] 9pnet_fd: Insufficient options for proto=fd [ 45.686641][ T4103] veth0_to_bond: entered promiscuous mode [ 45.702941][ T4103] lo speed is unknown, defaulting to 1000 [ 45.709115][ T4103] tunl0 speed is unknown, defaulting to 1000 [ 45.747645][ T4114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 45.765007][ T4114] veth0_to_bond (unregistering): left promiscuous mode [ 45.773325][ T4114] bond0: (slave bond_slave_0): Releasing backup interface [ 45.845681][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.939267][ T4130] lo speed is unknown, defaulting to 1000 [ 45.945662][ T4130] tunl0 speed is unknown, defaulting to 1000 [ 45.983497][ T4132] loop4: detected capacity change from 0 to 512 [ 45.990555][ T4132] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.999681][ T4132] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 46.008753][ T4132] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 46.019055][ T4131] sd 0:0:1:0: device reset [ 46.023655][ T29] kauditd_printk_skb: 3532 callbacks suppressed [ 46.023670][ T29] audit: type=1400 audit(1740436157.849:11342): avc: denied { open } for pid=4122 comm="syz.2.197" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.028214][ T4132] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 46.029940][ T29] audit: type=1400 audit(1740436157.849:11343): avc: denied { ioctl } for pid=4122 comm="syz.2.197" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.054864][ T4132] System zones: 0-2, 18-18, 34-34 [ 46.093006][ T4132] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.107797][ T4132] EXT4-fs (loop4): 1 truncate cleaned up [ 46.113836][ T4132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.164559][ T29] audit: type=1400 audit(1740436157.999:11344): avc: denied { read write } for pid=4129 comm="syz.4.200" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.189145][ T29] audit: type=1400 audit(1740436158.029:11345): avc: denied { open } for pid=4129 comm="syz.4.200" path="/35/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.212242][ T29] audit: type=1400 audit(1740436158.029:11346): avc: denied { ioctl } for pid=4129 comm="syz.4.200" path="/35/file1/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.238634][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.242760][ T4130] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.200: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 46.269522][ T4130] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.200: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 46.292565][ T4130] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.200: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 46.311686][ T4137] SELinux: syz.1.201 (4137) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 46.313579][ T4130] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #2: block 3: comm syz.4.200: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 46.326231][ T4137] netlink: 'syz.1.201': attribute type 4 has an invalid length. [ 46.372362][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.383662][ T4139] loop1: detected capacity change from 0 to 2048 [ 46.393513][ T4141] loop4: detected capacity change from 0 to 512 [ 46.401781][ T4141] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.203: corrupted in-inode xattr: invalid ea_ino [ 46.401814][ T4139] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.416534][ T4141] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.203: couldn't read orphan inode 15 (err -117) [ 46.430929][ T4139] EXT4-fs error (device loop1): ext4_find_extent:938: inode #2: comm syz.1.202: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 46.440965][ T4141] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.457355][ T4139] EXT4-fs (loop1): Remounting filesystem read-only [ 46.497254][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.562649][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.593047][ T29] audit: type=1400 audit(1740436158.429:11347): avc: denied { accept } for pid=4157 comm="syz.1.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.649291][ T29] audit: type=1400 audit(1740436158.479:11348): avc: denied { read write } for pid=4165 comm="syz.1.211" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.673063][ T29] audit: type=1400 audit(1740436158.479:11349): avc: denied { open } for pid=4165 comm="syz.1.211" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.718948][ T29] audit: type=1326 audit(1740436158.549:11350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83321fd169 code=0x7ffc0000 [ 46.742508][ T29] audit: type=1326 audit(1740436158.549:11351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83321fd169 code=0x7ffc0000 [ 46.847078][ T4182] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 46.885579][ T4189] capability: warning: `syz.1.216' uses 32-bit capabilities (legacy support in use) [ 46.995996][ T4193] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4193 comm=syz.3.217 [ 47.026955][ T4205] SELinux: Context : is not valid (left unmapped). [ 47.044060][ T4185] loop4: detected capacity change from 0 to 2048 [ 47.163036][ T4185] loop4: p1 < > p4 [ 47.185676][ T4185] loop4: p4 size 8388608 extends beyond EOD, truncated [ 47.224676][ T4185] netlink: 64 bytes leftover after parsing attributes in process `syz.4.214'. [ 47.239528][ T4185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.214'. [ 47.293800][ T4223] loop4: detected capacity change from 0 to 256 [ 47.302489][ T4223] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 47.311119][ T4223] FAT-fs (loop4): Filesystem has been set read-only [ 47.321906][ T4223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.330787][ T4223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.648805][ T4243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.234'. [ 47.669931][ T4243] netlink: 4 bytes leftover after parsing attributes in process `syz.5.234'. [ 47.846052][ T4263] gretap0: entered promiscuous mode [ 47.851895][ T4263] macsec0: entered allmulticast mode [ 47.857310][ T4263] gretap0: entered allmulticast mode [ 47.870030][ T4263] gretap0: left allmulticast mode [ 47.875284][ T4263] gretap0: left promiscuous mode [ 47.883966][ T4267] net_ratelimit: 339 callbacks suppressed [ 47.883983][ T4267] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 48.006294][ T4279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.247'. [ 48.040852][ T4281] loop2: detected capacity change from 0 to 2048 [ 48.063998][ T4281] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.084655][ T4281] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.248: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 48.112450][ T4281] EXT4-fs (loop2): Remounting filesystem read-only [ 48.123058][ T4289] loop4: detected capacity change from 0 to 512 [ 48.129713][ T4289] EXT4-fs: Ignoring removed oldalloc option [ 48.137020][ T4289] EXT4-fs: Mount option(s) incompatible with ext2 [ 48.175208][ T4296] lo speed is unknown, defaulting to 1000 [ 48.181374][ T4296] tunl0 speed is unknown, defaulting to 1000 [ 48.251405][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.260958][ T4289] loop4: detected capacity change from 0 to 1024 [ 48.268732][ T4289] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 48.279125][ T4289] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.250: inode #98: comm syz.4.250: iget: illegal inode # [ 48.315635][ T4289] EXT4-fs (loop4): no journal found [ 48.320943][ T4289] EXT4-fs (loop4): can't get journal size [ 48.349538][ T4289] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 48.419291][ T4289] EXT4-fs (loop4): failed to initialize system zone (-22) [ 48.456233][ T4289] EXT4-fs (loop4): mount failed [ 48.506230][ T4321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 48.515190][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.256'. [ 48.568811][ T4332] loop4: detected capacity change from 0 to 128 [ 48.626091][ T4335] loop4: detected capacity change from 0 to 512 [ 48.642192][ T4330] mmap: syz.5.258 (4330) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.655908][ T4335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.670281][ T4335] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.702575][ T4335] EXT4-fs error (device loop4): ext4_get_first_dir_block:3541: inode #12: comm syz.4.260: Attempting to read directory block (0) that is past i_size (3) [ 48.748885][ T4343] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 48.759080][ T4343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.774081][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.820801][ T4357] loop1: detected capacity change from 0 to 1024 [ 48.828997][ T4357] EXT4-fs: Ignoring removed nobh option [ 48.834722][ T4357] EXT4-fs: Ignoring removed bh option [ 48.847095][ T4357] EXT4-fs (loop1): can't mount with both data=journal and delalloc [ 48.869941][ T4357] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'. [ 48.894867][ C1] hrtimer: interrupt took 17913 ns [ 48.904873][ T4362] syz.4.267 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.908371][ T4366] 9pnet_fd: Insufficient options for proto=fd [ 48.918622][ T4362] 9pnet_fd: Insufficient options for proto=fd [ 49.022332][ T4381] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 49.022332][ T4381] The task syz.1.272 (4381) triggered the difference, watch for misbehavior. [ 49.626013][ T4405] 9pnet_fd: Insufficient options for proto=fd [ 49.792715][ T4407] netlink: 'syz.5.282': attribute type 1 has an invalid length. [ 49.945177][ T4418] netlink: 'syz.1.286': attribute type 4 has an invalid length. [ 50.007336][ T4434] loop2: detected capacity change from 0 to 512 [ 50.020392][ T4434] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 50.042326][ T4434] EXT4-fs (loop2): mount failed [ 50.047358][ T4428] loop1: detected capacity change from 0 to 8192 [ 50.379326][ T4450] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.491662][ T4450] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.561638][ T4450] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.621788][ T4450] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.708400][ T4450] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.741096][ T4450] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.762669][ T4450] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.785536][ T4450] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.840166][ T4468] netlink: 'syz.2.298': attribute type 4 has an invalid length. [ 50.901533][ T4472] loop1: detected capacity change from 0 to 512 [ 50.931846][ T4472] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 50.941223][ T4472] EXT4-fs (loop1): mount failed [ 51.178295][ T4490] loop4: detected capacity change from 0 to 512 [ 51.192367][ T4490] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.303: corrupted in-inode xattr: invalid ea_ino [ 51.341393][ T4490] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.303: couldn't read orphan inode 15 (err -117) [ 51.372136][ T4490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.422798][ T29] kauditd_printk_skb: 1473 callbacks suppressed [ 51.422815][ T29] audit: type=1400 audit(1740436163.259:12825): avc: denied { setattr } for pid=4489 comm="syz.4.303" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.492756][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.523383][ T4499] loop4: detected capacity change from 0 to 128 [ 51.531832][ T4500] __nla_validate_parse: 3 callbacks suppressed [ 51.531849][ T4500] netlink: 72 bytes leftover after parsing attributes in process `syz.2.307'. [ 51.551471][ T4499] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.573812][ T4499] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.664008][ T29] audit: type=1400 audit(1740436163.499:12826): avc: denied { read append open } for pid=4497 comm="syz.4.306" path="/59/mnt/blkio.bfq.idle_time" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.666759][ T4500] bridge0: port 3(syz_tun) entered blocking state [ 51.695540][ T4500] bridge0: port 3(syz_tun) entered disabled state [ 51.705413][ T29] audit: type=1400 audit(1740436163.499:12827): avc: denied { setattr } for pid=4497 comm="syz.4.306" path="/59/mnt/blkio.bfq.idle_time" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.729782][ T4500] syz_tun: entered allmulticast mode [ 51.746812][ T29] audit: type=1400 audit(1740436163.569:12828): avc: denied { ioctl } for pid=4497 comm="syz.4.306" path="/59/mnt/blkio.bfq.idle_time" dev="loop4" ino=12 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.772064][ T29] audit: type=1400 audit(1740436163.569:12829): avc: denied { create } for pid=4497 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 51.792786][ T29] audit: type=1400 audit(1740436163.569:12830): avc: denied { write } for pid=4497 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 51.813497][ T29] audit: type=1400 audit(1740436163.569:12831): avc: denied { create } for pid=4497 comm="syz.4.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.835607][ T4500] syz_tun: entered promiscuous mode [ 51.841609][ T4500] bridge0: port 3(syz_tun) entered blocking state [ 51.842406][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.848085][ T4500] bridge0: port 3(syz_tun) entered forwarding state [ 51.906024][ T4506] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.944324][ T4508] loop2: detected capacity change from 0 to 512 [ 51.964017][ T4508] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.975730][ T4506] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.050402][ T4508] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.310: invalid indirect mapped block 83886080 (level 1) [ 52.075458][ T4506] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.091598][ T4508] EXT4-fs (loop2): Remounting filesystem read-only [ 52.099437][ T4508] EXT4-fs (loop2): 1 orphan inode deleted [ 52.105254][ T4508] EXT4-fs (loop2): 1 truncate cleaned up [ 52.135199][ T4508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.149655][ T4506] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.177920][ T4508] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 52.240309][ T4508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.257958][ T4506] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.269835][ T4506] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.281918][ T4506] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.291295][ T4512] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 52.295303][ T4506] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.320655][ T4512] lo speed is unknown, defaulting to 1000 [ 52.326815][ T4512] tunl0 speed is unknown, defaulting to 1000 [ 52.381287][ T4520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.402336][ T29] audit: type=1326 audit(1740436164.239:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.5.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 52.461667][ T29] audit: type=1326 audit(1740436164.269:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.5.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 52.485126][ T29] audit: type=1326 audit(1740436164.269:12834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4515 comm="syz.5.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 52.586107][ T4533] loop4: detected capacity change from 0 to 512 [ 52.603579][ T4533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.624359][ T4541] loop1: detected capacity change from 0 to 512 [ 52.630274][ T4533] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.652046][ T4534] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.319: corrupted inode contents [ 52.667832][ T4541] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.681022][ T4543] x_tables: duplicate underflow at hook 3 [ 52.702371][ T4534] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.319: mark_inode_dirty error [ 52.725210][ T4541] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.745111][ T4534] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.319: corrupted inode contents [ 52.759511][ T4533] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.319: corrupted inode contents [ 52.767085][ T4550] loop2: detected capacity change from 0 to 512 [ 52.785320][ T4533] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.319: mark_inode_dirty error [ 52.800180][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.811048][ T4550] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 52.822176][ T4533] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.319: corrupted inode contents [ 52.827569][ T4550] EXT4-fs (loop2): mount failed [ 52.835134][ T4533] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.319: mark_inode_dirty error [ 52.851327][ T4533] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.319: corrupted inode contents [ 52.863771][ T4533] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.319: mark_inode_dirty error [ 52.875671][ T4556] netlink: 28 bytes leftover after parsing attributes in process `)-#-&[(é(ß'. [ 52.884751][ T4556] netlink: 28 bytes leftover after parsing attributes in process `)-#-&[(é(ß'. [ 52.911448][ T4544] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.319: corrupted inode contents [ 52.962216][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.265661][ T4587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 53.488261][ T4599] loop4: detected capacity change from 0 to 512 [ 53.522646][ T4599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.337: bg 0: block 248: padding at end of block bitmap is not set [ 53.541692][ T4599] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.337: Failed to acquire dquot type 1 [ 53.596024][ T4599] EXT4-fs (loop4): 1 truncate cleaned up [ 53.610506][ T4599] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.674373][ T4599] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.696094][ T4599] syz.4.337 (4599) used greatest stack depth: 9504 bytes left [ 53.734924][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.858591][ T4615] netlink: 'syz.1.331': attribute type 29 has an invalid length. [ 53.871945][ T4615] netlink: 'syz.1.331': attribute type 29 has an invalid length. [ 53.893139][ T4615] loop1: detected capacity change from 0 to 512 [ 53.972890][ T4620] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 54.034497][ T4620] loop4: detected capacity change from 0 to 8192 [ 54.079902][ T4583] syz.1.331 (4583) used greatest stack depth: 6376 bytes left [ 54.080992][ T4620] loop4: p1 < > p2 < p5 > p3 p4 [ 54.093805][ T4620] loop4: p3 start 83890176 is beyond EOD, truncated [ 54.100466][ T4620] loop4: p4 size 16776960 extends beyond EOD, truncated [ 54.108791][ T4620] loop4: p5 size 16776960 extends beyond EOD, truncated [ 54.128465][ T4634] Cannot find set identified by id 0 to match [ 54.153356][ T4636] loop1: detected capacity change from 0 to 512 [ 54.160436][ T4636] EXT4-fs (loop1): first meta block group too large: 127 (group descriptor block count 1) [ 54.196550][ T4638] loop1: detected capacity change from 0 to 512 [ 54.203461][ T4638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.215277][ T4638] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.347: invalid indirect mapped block 83886080 (level 1) [ 54.229366][ T4638] EXT4-fs (loop1): Remounting filesystem read-only [ 54.236078][ T4638] EXT4-fs (loop1): 1 orphan inode deleted [ 54.241871][ T4638] EXT4-fs (loop1): 1 truncate cleaned up [ 54.248236][ T4638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.260999][ T4638] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 54.268011][ T4638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.354578][ T4644] netlink: 60 bytes leftover after parsing attributes in process `syz.5.349'. [ 54.363943][ T4644] unsupported nlmsg_type 40 [ 54.528198][ T4646] lo speed is unknown, defaulting to 1000 [ 54.534570][ T4646] tunl0 speed is unknown, defaulting to 1000 [ 55.260144][ T4673] lo speed is unknown, defaulting to 1000 [ 55.266295][ T4673] tunl0 speed is unknown, defaulting to 1000 [ 55.328522][ T4689] loop4: detected capacity change from 0 to 512 [ 55.351432][ T4689] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.387130][ T4689] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.359: invalid indirect mapped block 83886080 (level 1) [ 55.418368][ T4689] EXT4-fs (loop4): Remounting filesystem read-only [ 55.439722][ T4689] EXT4-fs (loop4): 1 orphan inode deleted [ 55.445648][ T4689] EXT4-fs (loop4): 1 truncate cleaned up [ 55.480665][ T4689] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.532529][ T4689] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 55.555847][ T4689] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.572012][ T4698] netlink: 'syz.3.361': attribute type 13 has an invalid length. [ 55.579990][ T4699] netlink: 'syz.3.361': attribute type 13 has an invalid length. [ 55.643010][ T4706] loop4: detected capacity change from 0 to 1024 [ 55.651523][ T4706] EXT4-fs: Ignoring removed orlov option [ 55.657293][ T4706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.682945][ T4706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.719184][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.825851][ T4698] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.834463][ T4698] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.842888][ T4698] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.851454][ T4698] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.862836][ T4713] loop4: detected capacity change from 0 to 512 [ 55.969437][ T4698] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.978212][ T4698] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.986773][ T4698] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 55.991434][ T4713] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.364: casefold flag without casefold feature [ 55.995310][ T4698] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 56.018785][ T802] tunl0 speed is unknown, defaulting to 1000 [ 56.071345][ T4718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.078871][ T4718] batadv_slave_0: entered promiscuous mode [ 56.084799][ T4718] batadv_slave_0: entered allmulticast mode [ 56.124025][ T4718] loop1: detected capacity change from 0 to 2048 [ 56.136667][ T4718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.365'. [ 56.145581][ T4718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.365'. [ 56.154530][ T4718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.365'. [ 56.172634][ T802] tunl0 speed is unknown, defaulting to 1000 [ 56.183301][ T4713] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.364: couldn't read orphan inode 15 (err -117) [ 56.218676][ T4718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.365'. [ 56.319449][ T4713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.470130][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 56.470151][ T29] audit: type=1400 audit(1740436168.279:13975): avc: denied { create } for pid=4711 comm="syz.4.364" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 56.818741][ T4726] lo speed is unknown, defaulting to 1000 [ 56.836763][ T4726] tunl0 speed is unknown, defaulting to 1000 [ 56.974047][ T4712] __nla_validate_parse: 5 callbacks suppressed [ 56.974123][ T4712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 57.012797][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.030348][ T29] audit: type=1326 audit(1740436168.859:13976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 57.053810][ T29] audit: type=1326 audit(1740436168.859:13977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4662 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7fc00000 [ 57.171047][ T4738] loop4: detected capacity change from 0 to 128 [ 57.193900][ T4739] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.239680][ T4745] SELinux: syz.2.373 (4745) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 57.288933][ T4751] netlink: 'syz.2.373': attribute type 4 has an invalid length. [ 57.333471][ T29] audit: type=1400 audit(1740436169.169:13978): avc: denied { mounton } for pid=4753 comm="syz.4.375" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 57.402735][ T29] audit: type=1400 audit(1740436169.209:13979): avc: denied { relabelfrom } for pid=4752 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.422843][ T29] audit: type=1400 audit(1740436169.209:13980): avc: denied { relabelto } for pid=4752 comm="syz.2.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 57.472212][ T4758] loop4: detected capacity change from 0 to 128 [ 57.502015][ T4758] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 57.509947][ T4758] FAT-fs (loop4): Filesystem has been set read-only [ 57.595004][ T4760] lo speed is unknown, defaulting to 1000 [ 57.622271][ T29] audit: type=1400 audit(1740436169.449:13981): avc: denied { create } for pid=4757 comm="syz.4.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 57.651442][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 57.660394][ T4763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.378'. [ 57.684498][ T4766] loop1: detected capacity change from 0 to 512 [ 57.697910][ T4767] 9pnet_fd: Insufficient options for proto=fd [ 57.713820][ T4766] EXT4-fs: Ignoring removed bh option [ 57.730752][ T4766] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 57.760372][ T4760] tunl0 speed is unknown, defaulting to 1000 [ 57.833760][ T4766] EXT4-fs (loop1): 1 truncate cleaned up [ 57.839899][ T4766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.083453][ T4776] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 58.156141][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.417694][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 58.591921][ T29] audit: type=1400 audit(1740436170.429:13982): avc: denied { getopt } for pid=4790 comm="syz.2.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.684261][ T4803] loop4: detected capacity change from 0 to 512 [ 58.697191][ T4803] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.723307][ T4803] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.391: invalid indirect mapped block 83886080 (level 1) [ 58.724728][ T4808] loop1: detected capacity change from 0 to 512 [ 58.745765][ T4808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.755690][ T4803] EXT4-fs (loop4): Remounting filesystem read-only [ 58.763329][ T4808] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.769829][ T4808] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 58.784441][ T4808] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 58.791108][ T4808] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.392: bad orphan inode 768 [ 58.803010][ T4803] EXT4-fs (loop4): 1 orphan inode deleted [ 58.808781][ T4803] EXT4-fs (loop4): 1 truncate cleaned up [ 58.815100][ T4803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.829114][ T4808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.842611][ T4803] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 58.849546][ T4803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.859532][ T29] audit: type=1400 audit(1740436170.699:13983): avc: denied { remount } for pid=4807 comm="syz.1.392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 58.881085][ T4808] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 58.902812][ T4808] EXT4-fs warning (device loop1): ext4_enable_quotas:7145: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 58.927255][ T29] audit: type=1326 audit(1740436170.759:13984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4811 comm="syz.4.393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3577aad169 code=0x7ffc0000 [ 58.971093][ T9] IPVS: starting estimator thread 0... [ 58.978842][ T4819] netlink: 'syz.4.394': attribute type 1 has an invalid length. [ 58.991400][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.010015][ T4822] netlink: 16 bytes leftover after parsing attributes in process `syz.5.396'. [ 59.060647][ T4820] IPVS: using max 2400 ests per chain, 120000 per kthread [ 59.081630][ T4831] pim6reg1: entered promiscuous mode [ 59.086987][ T4831] pim6reg1: entered allmulticast mode [ 59.111929][ T4827] lo speed is unknown, defaulting to 1000 [ 59.118330][ T4827] tunl0 speed is unknown, defaulting to 1000 [ 59.807403][ T4854] netlink: 'syz.2.407': attribute type 13 has an invalid length. [ 60.011954][ T4864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 60.031684][ T4863] loop4: detected capacity change from 0 to 512 [ 60.069246][ T4863] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 60.080244][ T4863] EXT4-fs (loop4): mount failed [ 60.085945][ T4867] bond2: entered promiscuous mode [ 60.091038][ T4867] bond2: entered allmulticast mode [ 60.130437][ T4867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.152833][ T4867] bond2 (unregistering): Released all slaves [ 60.153203][ T4873] random: crng reseeded on system resumption [ 60.167295][ T4872] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 60.243311][ T4881] IPVS: stopping master sync thread 4883 ... [ 60.243860][ T4883] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.417951][ T4904] loop1: detected capacity change from 0 to 128 [ 60.558103][ T4915] syz.2.427: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 60.572936][ T4915] CPU: 1 UID: 0 PID: 4915 Comm: syz.2.427 Not tainted 6.14.0-rc4-syzkaller #0 [ 60.572964][ T4915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 60.572982][ T4915] Call Trace: [ 60.572988][ T4915] [ 60.573039][ T4915] dump_stack_lvl+0xf2/0x150 [ 60.573077][ T4915] dump_stack+0x15/0x1a [ 60.573100][ T4915] warn_alloc+0x145/0x1b0 [ 60.573130][ T4915] ? __vmalloc_node_range_noprof+0x88/0xe70 [ 60.573306][ T4915] ? common_lsm_audit+0x91f/0x10c0 [ 60.573332][ T4915] ? cgroup_rstat_updated+0x9f/0x570 [ 60.573374][ T4915] __vmalloc_node_range_noprof+0xaa/0xe70 [ 60.573459][ T4915] ? arch_scale_cpu_capacity+0x15/0x70 [ 60.573490][ T4915] ? update_curr+0x18c/0x410 [ 60.573525][ T4915] ? pick_task_fair+0xca/0x120 [ 60.573573][ T4915] ? xskq_create+0x36/0xd0 [ 60.573604][ T4915] vmalloc_user_noprof+0x59/0x70 [ 60.573631][ T4915] ? xskq_create+0x79/0xd0 [ 60.573740][ T4915] xskq_create+0x79/0xd0 [ 60.573824][ T4915] xsk_init_queue+0x82/0xd0 [ 60.573853][ T4915] xsk_setsockopt+0x388/0x520 [ 60.573882][ T4915] ? __pfx_xsk_setsockopt+0x10/0x10 [ 60.573910][ T4915] __sys_setsockopt+0x187/0x200 [ 60.573980][ T4915] __x64_sys_setsockopt+0x66/0x80 [ 60.574003][ T4915] x64_sys_call+0x282e/0x2dc0 [ 60.574073][ T4915] do_syscall_64+0xc9/0x1c0 [ 60.574103][ T4915] ? clear_bhb_loop+0x55/0xb0 [ 60.574161][ T4915] ? clear_bhb_loop+0x55/0xb0 [ 60.574209][ T4915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.574308][ T4915] RIP: 0033:0x7f87e793d169 [ 60.574333][ T4915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.574353][ T4915] RSP: 002b:00007f87e5fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.574378][ T4915] RAX: ffffffffffffffda RBX: 00007f87e7b55fa0 RCX: 00007f87e793d169 [ 60.574392][ T4915] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 60.574404][ T4915] RBP: 00007f87e79be2a0 R08: 0000000000000004 R09: 0000000000000000 [ 60.574465][ T4915] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.574477][ T4915] R13: 0000000000000000 R14: 00007f87e7b55fa0 R15: 00007ffe808acf38 [ 60.574497][ T4915] [ 60.574503][ T4915] Mem-Info: [ 60.762729][ T9] IPVS: starting estimator thread 0... [ 60.766211][ T4915] active_anon:66591 inactive_anon:4 isolated_anon:0 [ 60.766211][ T4915] active_file:10731 inactive_file:12278 isolated_file:0 [ 60.766211][ T4915] unevictable:0 dirty:238 writeback:0 [ 60.766211][ T4915] slab_reclaimable:3013 slab_unreclaimable:31702 [ 60.766211][ T4915] mapped:34101 shmem:55726 pagetables:890 [ 60.766211][ T4915] sec_pagetables:0 bounce:0 [ 60.766211][ T4915] kernel_misc_reclaimable:0 [ 60.766211][ T4915] free:1812646 free_pcp:7004 free_cma:0 [ 60.830770][ T4919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.846915][ T4915] Node 0 active_anon:254300kB inactive_anon:16kB active_file:42924kB inactive_file:49112kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136404kB dirty:952kB writeback:0kB shmem:210840kB writeback_tmp:0kB kernel_stack:2992kB pagetables:3560kB sec_pagetables:0kB all_unreclaimable? no [ 60.856494][ T4919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.883346][ T4915] Node 0 [ 60.891282][ T4918] IPVS: using max 1968 ests per chain, 98400 per kthread [ 60.891211][ T4915] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 60.927575][ T4915] lowmem_reserve[]: 0 2885 7863 0 [ 60.932781][ T4915] Node 0 DMA32 free:2950848kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954380kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 60.961319][ T4915] lowmem_reserve[]: 0 0 4978 0 [ 60.966147][ T4915] Node 0 Normal free:4284376kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:245948kB inactive_anon:16kB active_file:42924kB inactive_file:49112kB unevictable:0kB writepending:952kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:44792kB local_pcp:6908kB free_cma:0kB [ 60.996576][ T4915] lowmem_reserve[]: 0 0 0 0 [ 61.001222][ T4915] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 61.014022][ T4915] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950848kB [ 61.030395][ T4915] Node 0 Normal: 2*4kB (ME) 2*8kB (UE) 1*16kB (M) 2*32kB (UE) 2*64kB (UE) 17*128kB (UM) 14*256kB (UM) 16*512kB (UME) 12*1024kB (UE) 19*2048kB (UE) 1030*4096kB (UM) = 4284264kB [ 61.048128][ T4915] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 61.057562][ T4915] 71144 total pagecache pages [ 61.062278][ T4915] 38 pages in swap cache [ 61.066545][ T4915] Free swap = 124532kB [ 61.070733][ T4915] Total swap = 124996kB [ 61.074917][ T4915] 2097051 pages RAM [ 61.078768][ T4915] 0 pages HighMem/MovableOnly [ 61.083488][ T4915] 80064 pages reserved [ 61.254195][ T4927] rdma_op ffff888117faa580 conn xmit_rdma 0000000000000000 [ 61.377146][ T4942] loop4: detected capacity change from 0 to 2048 [ 61.393381][ T4924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.402118][ T4924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.403261][ T4942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.426469][ T4942] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.436: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 61.443237][ T4945] netlink: 12 bytes leftover after parsing attributes in process `syz.5.437'. [ 61.445167][ T4942] EXT4-fs (loop4): Remounting filesystem read-only [ 61.472755][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.544766][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 61.544784][ T29] audit: type=1400 audit(1740436173.379:14157): avc: denied { getopt } for pid=4958 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 61.589330][ T29] audit: type=1400 audit(1740436173.419:14158): avc: denied { name_bind } for pid=4960 comm="syz.5.442" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 61.630947][ T4974] loop4: detected capacity change from 0 to 128 [ 61.639180][ T4974] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.651499][ T4974] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.663465][ T29] audit: type=1400 audit(1740436173.499:14159): avc: denied { write } for pid=4973 comm="syz.4.445" path="/88/file0/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.689014][ T29] audit: type=1400 audit(1740436173.499:14160): avc: denied { block_suspend } for pid=4973 comm="syz.4.445" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.711865][ T29] audit: type=1400 audit(1740436173.549:14161): avc: denied { connect } for pid=4973 comm="syz.4.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.744687][ T4978] netlink: 96 bytes leftover after parsing attributes in process `syz.3.447'. [ 61.764399][ T3296] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.769811][ T4978] lo speed is unknown, defaulting to 1000 [ 61.779763][ T4978] tunl0 speed is unknown, defaulting to 1000 [ 61.791065][ T4982] loop4: detected capacity change from 0 to 256 [ 61.798299][ T4982] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 61.811809][ T4982] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.849803][ T4983] tipc: Started in network mode [ 61.854827][ T4983] tipc: Node identity da814f3f18d9, cluster identity 4711 [ 61.862425][ T4983] tipc: Enabled bearer , priority 0 [ 61.869417][ T29] audit: type=1400 audit(1740436173.679:14162): avc: denied { write } for pid=4987 comm="syz.4.449" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 62.076371][ T5006] syzkaller1: entered promiscuous mode [ 62.082114][ T5006] syzkaller1: entered allmulticast mode [ 62.097965][ T29] audit: type=1400 audit(1740436173.929:14163): avc: denied { write } for pid=5000 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 62.219679][ T5008] loop2: detected capacity change from 0 to 256 [ 62.228463][ T5008] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.304285][ T5015] netlink: 'syz.3.458': attribute type 4 has an invalid length. [ 62.415130][ T29] audit: type=1400 audit(1740436174.249:14164): avc: denied { mounton } for pid=5007 comm="syz.2.456" path="/93/file1/file0" dev="loop2" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 62.438135][ T29] audit: type=1400 audit(1740436174.249:14165): avc: denied { mount } for pid=5007 comm="syz.2.456" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.460325][ T29] audit: type=1400 audit(1740436174.249:14166): avc: denied { unmount } for pid=5007 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 62.522574][ T5008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 62.539599][ T5024] netlink: 'syz.3.462': attribute type 1 has an invalid length. [ 62.555834][ T5024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.579213][ T5024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.586569][ T5024] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 62.599105][ T5024] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 62.624727][ T4979] tipc: Resetting bearer [ 62.673866][ T4979] tipc: Disabling bearer [ 62.742578][ T5041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.465'. [ 62.754660][ T5041] team0: entered promiscuous mode [ 62.759742][ T5041] team_slave_0: entered promiscuous mode [ 62.766137][ T5041] team_slave_1: entered promiscuous mode [ 62.774019][ T5041] batadv_slave_1: entered promiscuous mode [ 62.795262][ T5047] team0: Device gtp0 is of different type [ 62.888079][ T5061] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 62.905782][ T5064] veth0_to_bond: entered promiscuous mode [ 62.913337][ T5064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.473'. [ 62.913743][ T5061] netlink: 308 bytes leftover after parsing attributes in process `syz.4.472'. [ 62.932456][ T5064] veth0_to_bond (unregistering): left promiscuous mode [ 62.941127][ T5064] bond0: (slave bond_slave_0): Releasing backup interface [ 62.988518][ T5070] loop4: detected capacity change from 0 to 512 [ 62.996328][ T5070] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 63.005157][ T5070] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.012027][ T5070] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.028245][ T5070] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 63.036686][ T5070] ------------[ cut here ]------------ [ 63.042286][ T5070] bad length passed for symlink [ [ 63.042286][ T5070] ó] (got 9000, expected 3) [ 63.042520][ T5070] WARNING: CPU: 0 PID: 5070 at ./include/linux/fs.h:803 inode_set_cached_link+0xc4/0xd0 [ 63.062057][ T5070] Modules linked in: [ 63.065969][ T5070] CPU: 0 UID: 0 PID: 5070 Comm: syz.4.475 Not tainted 6.14.0-rc4-syzkaller #0 [ 63.074884][ T5070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 63.085091][ T5070] RIP: 0010:inode_set_cached_link+0xc4/0xd0 [ 63.091139][ T5070] Code: ff 48 c7 c7 1d f5 b2 86 e8 39 62 c4 ff c6 05 8f 72 0b 05 01 90 48 c7 c7 d0 30 1b 86 4c 89 f6 89 ea 44 89 f9 e8 ed b6 8c ff 90 <0f> 0b 90 90 eb 84 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 [ 63.111434][ T5070] RSP: 0018:ffffc900011ffa00 EFLAGS: 00010246 [ 63.117543][ T5070] RAX: 186b961cbf0e6600 RBX: ffff8881095e1328 RCX: 0000000000080000 [ 63.125726][ T5070] RDX: ffffc900031c4000 RSI: 000000000000691e RDI: 000000000000691f [ 63.133868][ T5070] RBP: 0000000000002328 R08: ffffffff81343af7 R09: 0000000000000000 [ 63.141906][ T5070] R10: 0001ffffffffffff R11: ffff8881047b6300 R12: ffff8881095e1328 [ 63.149917][ T5070] R13: ffff8881095e1350 R14: ffff8881095e1200 R15: 0000000000000003 [ 63.157985][ T5070] FS: 00007f35761176c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 63.166939][ T5070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.173554][ T5070] CR2: 0000000000000000 CR3: 0000000120a2a000 CR4: 00000000003506f0 [ 63.181553][ T5070] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.189527][ T5070] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 63.197586][ T5070] Call Trace: [ 63.200919][ T5070] [ 63.203913][ T5070] ? __warn+0x141/0x350 [ 63.208115][ T5070] ? report_bug+0x315/0x420 [ 63.212671][ T5070] ? inode_set_cached_link+0xc4/0xd0 [ 63.218098][ T5070] ? handle_bug+0x60/0x90 [ 63.222464][ T5070] ? exc_invalid_op+0x1a/0x50 [ 63.227156][ T5070] ? asm_exc_invalid_op+0x1a/0x20 [ 63.232216][ T5070] ? __warn_printk+0x167/0x1b0 [ 63.236985][ T5070] ? inode_set_cached_link+0xc4/0xd0 [ 63.242309][ T5070] __ext4_iget+0x1bb5/0x1e20 [ 63.246928][ T5070] ext4_orphan_get+0x140/0x3e0 [ 63.251891][ T5070] ext4_orphan_cleanup+0x5df/0x9e0 [ 63.257127][ T5070] ? ext4_register_li_request+0xf2/0x660 [ 63.262885][ T5070] ext4_fill_super+0x32ec/0x3630 [ 63.267915][ T5070] ? set_blocksize+0x196/0x270 [ 63.272735][ T5070] ? sb_set_blocksize+0x95/0xb0 [ 63.277661][ T5070] ? setup_bdev_super+0x318/0x370 [ 63.282719][ T5070] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.288016][ T5070] get_tree_bdev_flags+0x29f/0x310 [ 63.293220][ T5070] ? __pfx_ext4_fill_super+0x10/0x10 [ 63.298518][ T5070] get_tree_bdev+0x1f/0x30 [ 63.303004][ T5070] ext4_get_tree+0x1c/0x30 [ 63.307486][ T5070] vfs_get_tree+0x56/0x1e0 [ 63.311971][ T5070] do_new_mount+0x227/0x690 [ 63.316552][ T5070] path_mount+0x49b/0xb30 [ 63.321058][ T5070] __se_sys_mount+0x27f/0x2d0 [ 63.325765][ T5070] __x64_sys_mount+0x67/0x80 [ 63.330446][ T5070] x64_sys_call+0x2c84/0x2dc0 [ 63.335140][ T5070] do_syscall_64+0xc9/0x1c0 [ 63.339656][ T5070] ? clear_bhb_loop+0x55/0xb0 [ 63.344444][ T5070] ? clear_bhb_loop+0x55/0xb0 [ 63.349132][ T5070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.355109][ T5070] RIP: 0033:0x7f3577aae90a [ 63.359539][ T5070] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.379192][ T5070] RSP: 002b:00007f3576116e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 63.387683][ T5070] RAX: ffffffffffffffda RBX: 00007f3576116ef0 RCX: 00007f3577aae90a [ 63.395693][ T5070] RDX: 0000400000000080 RSI: 0000400000000000 RDI: 00007f3576116eb0 [ 63.403689][ T5070] RBP: 0000400000000080 R08: 00007f3576116ef0 R09: 000000000200801f [ 63.411688][ T5070] R10: 000000000200801f R11: 0000000000000246 R12: 0000400000000000 [ 63.419660][ T5070] R13: 00007f3576116eb0 R14: 00000000000004fb R15: 00004000000002c0 [ 63.427714][ T5070] [ 63.430837][ T5070] ---[ end trace 0000000000000000 ]--- [ 63.436778][ T5070] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #16: comm syz.4.475: corrupted xattr block 31: invalid header [ 63.450437][ T5070] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 63.459667][ T5070] EXT4-fs (loop4): 1 orphan inode deleted [ 63.465903][ T5070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.586753][ T5082] loop2: detected capacity change from 0 to 512 [ 63.594629][ T5082] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.606095][ T5082] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.612991][ T5082] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.479: Failed to acquire dquot type 1 [ 63.625977][ T5082] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.479: bg 0: block 40: padding at end of block bitmap is not set [ 63.641499][ T5082] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 63.666040][ T5082] EXT4-fs (loop2): 1 truncate cleaned up [ 63.715248][ T5082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.759088][ T5097] xt_bpf: check failed: parse error [ 63.768446][ T5082] lo speed is unknown, defaulting to 1000 [ 63.776295][ T5082] tunl0 speed is unknown, defaulting to 1000 [ 63.809876][ T5100] loop1: detected capacity change from 0 to 512 [ 63.828929][ T5100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.860254][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.911207][ T5102] 9pnet_fd: Insufficient options for proto=fd [ 63.919879][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.933815][ T5108] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=49 sclass=netlink_tcpdiag_socket pid=5108 comm=syz.5.488 [ 63.940398][ T5100] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.485: invalid indirect mapped block 83886080 (level 1) [ 63.996460][ T5107] 9pnet_fd: Insufficient options for proto=fd [ 64.006948][ T5100] EXT4-fs (loop1): Remounting filesystem read-only [ 64.032867][ T5100] EXT4-fs (loop1): 1 orphan inode deleted [ 64.038653][ T5100] EXT4-fs (loop1): 1 truncate cleaned up [ 64.049367][ T5100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.062281][ T5100] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 64.070602][ T5100] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.207518][ T5145] vlan2: entered allmulticast mode [ 64.229901][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.502'. [ 64.238953][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.502'. [ 64.247883][ T5150] netlink: 'syz.5.502': attribute type 20 has an invalid length. [ 64.432025][ T5158] netlink: 'syz.1.504': attribute type 21 has an invalid length. [ 64.439846][ T5158] netlink: 'syz.1.504': attribute type 6 has an invalid length. [ 64.447549][ T5158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.504'. [ 64.559916][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.513'. [ 64.569794][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.577986][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.585492][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.753059][ T5211] netlink: 'syz.3.522': attribute type 1 has an invalid length. [ 64.767068][ T5211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.836222][ T5221] loop1: detected capacity change from 0 to 128 [ 64.857795][ T5221] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.870712][ T5221] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.924102][ T5228] lo speed is unknown, defaulting to 1000 [ 64.930722][ T5228] tunl0 speed is unknown, defaulting to 1000 [ 64.981499][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.119779][ T5241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.532'. [ 65.176435][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 65.221924][ T5258] lo speed is unknown, defaulting to 1000 [ 65.228646][ T5258] lo speed is unknown, defaulting to 1000 [ 65.256111][ T5258] lo speed is unknown, defaulting to 1000 [ 65.339225][ T5258] infiniband sz1: set active [ 65.344031][ T5258] infiniband sz1: added lo [ 65.348657][ T3373] lo speed is unknown, defaulting to 1000 [ 65.359433][ T5258] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 65.359933][ T5258] infiniband sz1: Couldn't open port 1 [ 65.379325][ T5258] RDS/IB: sz1: added [ 65.383385][ T5258] smc: adding ib device sz1 with port count 1 [ 65.389633][ T5258] smc: ib device sz1 port 1 has pnetid [ 65.395802][ T35] lo speed is unknown, defaulting to 1000 [ 65.401897][ T5258] lo speed is unknown, defaulting to 1000 [ 65.462602][ T5258] lo speed is unknown, defaulting to 1000 [ 65.494567][ T5258] lo speed is unknown, defaulting to 1000 [ 65.529684][ T5258] lo speed is unknown, defaulting to 1000 [ 65.567543][ T5258] lo speed is unknown, defaulting to 1000 [ 65.689164][ T5285] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 65.705786][ T3373] lo speed is unknown, defaulting to 1000 [ 65.856804][ T5303] netlink: 'syz.5.551': attribute type 4 has an invalid length. [ 65.892438][ T5307] loop1: detected capacity change from 0 to 512 [ 65.903235][ T5307] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.320797][ T5347] 9pnet_fd: Insufficient options for proto=fd [ 66.478700][ T5343] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 66.582186][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 66.582205][ T29] audit: type=1400 audit(1740436178.419:14349): avc: denied { ioctl } for pid=5353 comm="syz.1.568" path="socket:[11811]" dev="sockfs" ino=11811 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 66.680424][ T29] audit: type=1400 audit(1740436178.519:14350): avc: denied { create } for pid=5363 comm="syz.1.570" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.709706][ T29] audit: type=1400 audit(1740436178.539:14351): avc: denied { unlink } for pid=3295 comm="syz-executor" name="file0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 66.738580][ T5366] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.793939][ T5366] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.831544][ T5366] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.881915][ T5366] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.924060][ T5373] xt_NFQUEUE: number of total queues is 0 [ 66.939216][ T5366] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.951315][ T5366] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.964103][ T5366] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.975627][ T5366] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.084271][ T29] audit: type=1326 audit(1740436178.919:14352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 67.129750][ T29] audit: type=1326 audit(1740436178.939:14353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 67.153244][ T29] audit: type=1326 audit(1740436178.939:14354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 67.176671][ T29] audit: type=1326 audit(1740436178.939:14355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 67.200246][ T29] audit: type=1326 audit(1740436178.939:14356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 67.223958][ T29] audit: type=1326 audit(1740436178.939:14357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 67.247583][ T29] audit: type=1326 audit(1740436178.939:14358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5388 comm="syz.5.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f4b9d169 code=0x7ffc0000 [ 67.620771][ T5423] 9pnet_fd: Insufficient options for proto=fd [ 67.725977][ T5435] loop2: detected capacity change from 0 to 512 [ 67.732936][ T5435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.745501][ T5435] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.594: invalid indirect mapped block 83886080 (level 1) [ 67.762427][ T5435] EXT4-fs (loop2): Remounting filesystem read-only [ 67.769246][ T5435] EXT4-fs (loop2): 1 orphan inode deleted [ 67.770614][ T5421] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 67.775096][ T5435] EXT4-fs (loop2): 1 truncate cleaned up [ 67.792285][ T5435] EXT4-fs mount: 2 callbacks suppressed [ 67.792329][ T5435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.810801][ T5435] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 67.821521][ T5435] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.857045][ T5445] __nla_validate_parse: 8 callbacks suppressed [ 67.857060][ T5445] netlink: 112 bytes leftover after parsing attributes in process `syz.1.597'. [ 67.873741][ T5445] netlink: 112 bytes leftover after parsing attributes in process `syz.1.597'. [ 67.949525][ T5460] 9pnet_fd: Insufficient options for proto=fd [ 67.973078][ T5456] bond0: entered allmulticast mode [ 68.002181][ T5468] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 68.002181][ T5468] program syz.2.605 not setting count and/or reply_len properly [ 68.082435][ T5479] loop2: detected capacity change from 0 to 512 [ 68.089298][ T5479] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.096070][ T5481] netlink: 112 bytes leftover after parsing attributes in process `syz.1.610'. [ 68.102198][ T5479] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.609: invalid indirect mapped block 83886080 (level 1) [ 68.109699][ T5481] netlink: 112 bytes leftover after parsing attributes in process `syz.1.610'. [ 68.123911][ T5479] EXT4-fs (loop2): Remounting filesystem read-only [ 68.137582][ T5479] EXT4-fs (loop2): 1 orphan inode deleted [ 68.143404][ T5479] EXT4-fs (loop2): 1 truncate cleaned up [ 68.151123][ T5479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.164320][ T5479] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 68.171513][ T5479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.210465][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 68.219382][ T5489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.613'. [ 68.382613][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 68.476076][ T5516] netlink: 112 bytes leftover after parsing attributes in process `syz.4.621'. [ 68.487239][ T5516] netlink: 112 bytes leftover after parsing attributes in process `syz.4.621'. [ 68.745596][ T5550] netlink: 64 bytes leftover after parsing attributes in process `syz.5.631'. [ 68.867776][ T5539] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 69.074636][ T5569] loop2: detected capacity change from 0 to 2048 [ 69.103257][ T5569] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.635: bad orphan inode 8192 [ 69.114043][ T5569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.148420][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.491930][ T5582] netlink: 'syz.4.639': attribute type 4 has an invalid length. [ 69.592960][ T5589] 9pnet_fd: Insufficient options for proto=fd [ 70.033861][ T5612] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 70.055324][ T5614] loop2: detected capacity change from 0 to 2048 [ 70.074336][ T5614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.095716][ T5614] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.649: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 70.131158][ T5614] EXT4-fs (loop2): Remounting filesystem read-only [ 70.173970][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.449119][ T5642] loop2: detected capacity change from 0 to 512 [ 70.457011][ T5642] EXT4-fs: Ignoring removed oldalloc option [ 70.474294][ T5642] EXT4-fs: Mount option(s) incompatible with ext2 [ 70.496821][ T5642] loop2: detected capacity change from 0 to 1024 [ 70.504878][ T5642] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 70.514999][ T5642] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.658: inode #98: comm syz.2.658: iget: illegal inode # [ 70.538563][ T5642] EXT4-fs (loop2): no journal found [ 70.543867][ T5642] EXT4-fs (loop2): can't get journal size [ 70.556246][ T5642] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 70.564801][ T5642] EXT4-fs (loop2): failed to initialize system zone (-22) [ 70.576986][ T5642] EXT4-fs (loop2): mount failed [ 70.686353][ T5665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.694938][ T5665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.882604][ T5672] 9pnet_fd: Insufficient options for proto=fd [ 71.238891][ T5685] team0 (unregistering): Port device team_slave_0 removed [ 71.248787][ T5685] team0 (unregistering): Port device team_slave_1 removed [ 71.592254][ T29] kauditd_printk_skb: 2877 callbacks suppressed [ 71.592271][ T29] audit: type=1326 audit(1740436183.429:17236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 71.621930][ T29] audit: type=1326 audit(1740436183.429:17237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87e78d9359 code=0x7ffc0000 [ 71.645258][ T29] audit: type=1326 audit(1740436183.429:17238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 71.679243][ T29] audit: type=1326 audit(1740436183.489:17239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 71.702657][ T29] audit: type=1326 audit(1740436183.489:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87e78d9359 code=0x7ffc0000 [ 71.726061][ T29] audit: type=1326 audit(1740436183.489:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 71.749493][ T29] audit: type=1326 audit(1740436183.499:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 71.772914][ T29] audit: type=1326 audit(1740436183.499:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87e78d9359 code=0x7ffc0000 [ 71.782841][ T5699] batadv_slave_1: entered promiscuous mode [ 71.796231][ T29] audit: type=1326 audit(1740436183.499:17244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 71.796269][ T29] audit: type=1326 audit(1740436183.509:17245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5686 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f87e7934127 code=0x7ffc0000 [ 71.885558][ T5698] batadv_slave_1: left promiscuous mode [ 71.969646][ T5707] lo speed is unknown, defaulting to 1000 [ 71.976382][ T5707] tunl0 speed is unknown, defaulting to 1000 [ 72.033093][ T5707] lo speed is unknown, defaulting to 1000 [ 72.144998][ T5720] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.197846][ T5720] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.255434][ T5720] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.276096][ T5733] netlink: 'syz.4.687': attribute type 4 has an invalid length. [ 72.334033][ T5720] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.419175][ T5720] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.431898][ T5720] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.444645][ T5720] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456864][ T5720] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.092713][ T5765] __nla_validate_parse: 46 callbacks suppressed [ 73.092729][ T5765] netlink: 112 bytes leftover after parsing attributes in process `syz.3.697'. [ 73.119217][ T5761] lo speed is unknown, defaulting to 1000 [ 73.126345][ T5761] tunl0 speed is unknown, defaulting to 1000 [ 73.145623][ T5765] netlink: 112 bytes leftover after parsing attributes in process `syz.3.697'. [ 73.234719][ T5771] loop2: detected capacity change from 0 to 512 [ 73.241989][ T5761] lo speed is unknown, defaulting to 1000 [ 73.251510][ T5771] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.254082][ T5774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5774 comm=syz.1.701 [ 73.312735][ T5777] netlink: 'syz.4.702': attribute type 7 has an invalid length. [ 73.320496][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 73.330078][ T5771] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.699: invalid indirect mapped block 83886080 (level 1) [ 73.344630][ T5771] EXT4-fs (loop2): Remounting filesystem read-only [ 73.351778][ T5771] EXT4-fs (loop2): 1 orphan inode deleted [ 73.357597][ T5771] EXT4-fs (loop2): 1 truncate cleaned up [ 73.363825][ T5771] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.376745][ T5771] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 73.383849][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.417316][ T5790] 9pnet_fd: Insufficient options for proto=fd [ 73.480137][ T5775] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 73.503891][ T5803] netlink: 112 bytes leftover after parsing attributes in process `syz.4.710'. [ 73.515344][ T5803] netlink: 112 bytes leftover after parsing attributes in process `syz.4.710'. [ 73.571544][ T5806] lo speed is unknown, defaulting to 1000 [ 73.578053][ T5806] tunl0 speed is unknown, defaulting to 1000 [ 73.627698][ T5806] lo speed is unknown, defaulting to 1000 [ 73.683903][ T5806] lo speed is unknown, defaulting to 1000 [ 73.689956][ T5806] tunl0 speed is unknown, defaulting to 1000 [ 73.719547][ T5806] lo speed is unknown, defaulting to 1000 [ 73.785946][ T5806] lo speed is unknown, defaulting to 1000 [ 73.793117][ T5806] tunl0 speed is unknown, defaulting to 1000 [ 73.826200][ T5806] lo speed is unknown, defaulting to 1000 [ 73.890987][ T5806] lo speed is unknown, defaulting to 1000 [ 73.897282][ T5806] tunl0 speed is unknown, defaulting to 1000 [ 73.926726][ T5806] lo speed is unknown, defaulting to 1000 [ 74.001071][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 74.010005][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 74.018897][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.714'. [ 74.118367][ T5806] lo speed is unknown, defaulting to 1000 [ 74.143064][ T5806] tunl0 speed is unknown, defaulting to 1000 [ 74.348871][ T5806] lo speed is unknown, defaulting to 1000 [ 74.535128][ T5828] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 74.708511][ T5836] netlink: 112 bytes leftover after parsing attributes in process `syz.5.722'. [ 74.718511][ T5836] netlink: 112 bytes leftover after parsing attributes in process `syz.5.722'. [ 74.779632][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.787204][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.795327][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.802865][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.563951][ T5857] 9pnet: Could not find request transport: nd [ 75.713367][ T5875] SELinux: syz.2.734 (5875) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 75.728043][ T5875] netlink: 'syz.2.734': attribute type 4 has an invalid length. [ 75.940222][ T5883] vlan2: entered promiscuous mode [ 75.945365][ T5883] vlan2: entered allmulticast mode [ 75.950640][ T5883] hsr_slave_1: entered allmulticast mode [ 75.974642][ T5883] hsr_slave_1 (unregistering): left allmulticast mode [ 75.984921][ T5883] hsr_slave_1 (unregistering): left promiscuous mode [ 76.175628][ T5908] SELinux: policydb version -616626377 does not match my version range 15-34 [ 76.198548][ T5908] SELinux: failed to load policy [ 76.206263][ T5908] loop2: detected capacity change from 0 to 128 [ 76.217537][ T5908] vfat: Unknown parameter 'ÿÿÿÿ' [ 76.432069][ T5912] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 76.463520][ T5917] SELinux: syz.2.746 (5917) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 76.479619][ T5917] netlink: 'syz.2.746': attribute type 4 has an invalid length. [ 76.647367][ T29] kauditd_printk_skb: 1905 callbacks suppressed [ 76.647385][ T29] audit: type=1326 audit(1740436188.469:19151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.677318][ T29] audit: type=1326 audit(1740436188.469:19152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.700879][ T29] audit: type=1326 audit(1740436188.469:19153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.724432][ T29] audit: type=1326 audit(1740436188.469:19154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.747955][ T29] audit: type=1326 audit(1740436188.469:19155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.771440][ T29] audit: type=1326 audit(1740436188.469:19156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.795111][ T29] audit: type=1326 audit(1740436188.469:19157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.818523][ T29] audit: type=1326 audit(1740436188.469:19158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.842179][ T29] audit: type=1326 audit(1740436188.469:19159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 76.865608][ T29] audit: type=1326 audit(1740436188.469:19160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5921 comm="syz.2.748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7fc00000 [ 77.019459][ T5936] netlink: 'syz.4.751': attribute type 3 has an invalid length. [ 77.245233][ T5950] netlink: 'syz.4.757': attribute type 4 has an invalid length. [ 77.268886][ T5952] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 77.392022][ T5960] lo speed is unknown, defaulting to 1000 [ 77.398060][ T5960] tunl0 speed is unknown, defaulting to 1000 [ 77.428577][ T5960] lo speed is unknown, defaulting to 1000 [ 77.594450][ T5983] netlink: '': attribute type 2 has an invalid length. [ 77.601505][ T5983] netlink: '': attribute type 2 has an invalid length. [ 77.608406][ T5983] netlink: '': attribute type 2 has an invalid length. [ 77.863140][ T6010] netlink: 'syz.4.781': attribute type 4 has an invalid length. [ 77.896349][ T6012] lo speed is unknown, defaulting to 1000 [ 77.902514][ T6012] tunl0 speed is unknown, defaulting to 1000 [ 77.945564][ T6012] lo speed is unknown, defaulting to 1000 [ 78.332984][ T6034] loop2: detected capacity change from 0 to 1024 [ 78.362248][ T6034] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.378336][ T6034] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.786: Allocating blocks 481-513 which overlap fs metadata [ 78.417004][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.497912][ T6052] __nla_validate_parse: 7 callbacks suppressed [ 78.497946][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'. [ 78.529417][ T6059] netlink: 268 bytes leftover after parsing attributes in process `syz.1.794'. [ 78.538510][ T6059] unsupported nla_type 65024 [ 79.084979][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 79.093891][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 79.102731][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.803'. [ 79.253020][ T6107] futex_wake_op: syz.3.808 tries to shift op by -1; fix this program [ 79.331005][ T6112] loop2: detected capacity change from 0 to 512 [ 79.341113][ T6112] EXT4-fs (loop2): too many log groups per flexible block group [ 79.348874][ T6112] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 79.355892][ T6112] EXT4-fs (loop2): mount failed [ 79.384977][ T6120] loop2: detected capacity change from 0 to 164 [ 79.392436][ T6120] ISOFS: unable to read i-node block [ 79.397799][ T6120] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 79.458177][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.814'. [ 79.473454][ T6124] bridge_slave_1: left allmulticast mode [ 79.479133][ T6124] bridge_slave_1: left promiscuous mode [ 79.484856][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.502319][ T6124] bridge_slave_0: left allmulticast mode [ 79.508055][ T6124] bridge_slave_0: left promiscuous mode [ 79.513813][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.562609][ T6133] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.631452][ T6133] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.663058][ T6141] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.676604][ T6140] lo speed is unknown, defaulting to 1000 [ 79.684384][ T6133] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.695326][ T6140] tunl0 speed is unknown, defaulting to 1000 [ 79.696134][ T6143] netlink: 'syz.4.820': attribute type 1 has an invalid length. [ 79.709173][ T6143] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.820'. [ 79.720598][ T6141] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.752458][ T6140] lo speed is unknown, defaulting to 1000 [ 79.772090][ T6133] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.811874][ T6141] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.851026][ T6154] : renamed from bond0 (while UP) [ 79.868187][ T6133] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.895677][ T6141] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.911931][ T6133] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.935472][ T6133] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.953946][ T6133] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.975366][ T6141] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.988016][ T6141] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.017630][ T6141] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.065716][ T6141] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.811792][ T6182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 80.834336][ T6182] Cannot find del_set index 0 as target [ 80.877870][ T6189] lo speed is unknown, defaulting to 1000 [ 80.885351][ T6189] tunl0 speed is unknown, defaulting to 1000 [ 80.898729][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.835'. [ 80.933710][ T6189] lo speed is unknown, defaulting to 1000 [ 80.963284][ T6203] pimreg: entered allmulticast mode [ 80.972150][ T6203] pimreg: left allmulticast mode [ 81.039999][ T6215] sch_tbf: burst 9895 is lower than device lo mtu (65550) ! [ 81.042063][ T6216] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37657 sclass=netlink_route_socket pid=6216 comm=syz.5.840 [ 81.084509][ T6222] netlink: 'syz.5.842': attribute type 4 has an invalid length. [ 81.335599][ T6243] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 81.642729][ T6266] loop2: detected capacity change from 0 to 2048 [ 81.674267][ T6266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.687704][ T6266] EXT4-fs error (device loop2): ext4_find_extent:938: inode #2: comm syz.2.855: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 81.691491][ T6273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.857'. [ 81.704914][ T6266] EXT4-fs (loop2): Remounting filesystem read-only [ 81.735414][ T29] kauditd_printk_skb: 3517 callbacks suppressed [ 81.735434][ T29] audit: type=1400 audit(1740436193.559:22678): avc: denied { read } for pid=6265 comm="syz.2.855" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.765281][ T29] audit: type=1400 audit(1740436193.559:22679): avc: denied { open } for pid=6265 comm="syz.2.855" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.789442][ T29] audit: type=1400 audit(1740436193.559:22680): avc: denied { ioctl } for pid=6265 comm="syz.2.855" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 81.816384][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.878229][ T29] audit: type=1400 audit(1740436193.709:22681): avc: denied { block_suspend } for pid=6272 comm="syz.4.857" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.900784][ T29] audit: type=1326 audit(1740436193.709:22682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 81.924308][ T29] audit: type=1326 audit(1740436193.709:22683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 81.947976][ T29] audit: type=1326 audit(1740436193.709:22684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 81.971439][ T29] audit: type=1326 audit(1740436193.709:22685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 81.995175][ T29] audit: type=1326 audit(1740436193.709:22686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 82.018683][ T29] audit: type=1326 audit(1740436193.709:22687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6274 comm="syz.2.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e793d169 code=0x7ffc0000 [ 82.328765][ T6303] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.432092][ T6303] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.455920][ T6313] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.489519][ T6303] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.522708][ T6313] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.651445][ T6303] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.721744][ T6313] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.801882][ T6313] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.869114][ T6313] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.902470][ T6313] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.935368][ T6313] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.954113][ T6313] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.968296][ T6319] loop2: detected capacity change from 0 to 512 [ 82.996611][ T6319] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 83.017147][ T6319] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.871: invalid indirect mapped block 83886080 (level 1) [ 83.041285][ T6319] EXT4-fs (loop2): Remounting filesystem read-only [ 83.048011][ T6319] EXT4-fs (loop2): 1 orphan inode deleted [ 83.053881][ T6319] EXT4-fs (loop2): 1 truncate cleaned up [ 83.061471][ T6319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.074266][ T6319] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 83.081728][ T6319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.113292][ T6324] SELinux: syz.2.873 (6324) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 83.128277][ T6324] netlink: 'syz.2.873': attribute type 4 has an invalid length. [ 83.231798][ T6331] loop2: detected capacity change from 0 to 512 [ 83.255879][ T6331] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 83.262781][ T6331] EXT4-fs (loop2): mount failed [ 83.538470][ T6303] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.560512][ T6303] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.572483][ T6303] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.590271][ T6303] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784402][ T6383] loop2: detected capacity change from 0 to 256 [ 84.054815][ T6412] lo: entered promiscuous mode [ 84.059722][ T6414] lo: entered allmulticast mode [ 84.070820][ T6414] lo: left allmulticast mode [ 84.075476][ T6414] lo: left promiscuous mode [ 84.559820][ T3375] IPVS: starting estimator thread 0... [ 84.650373][ T6444] IPVS: using max 2064 ests per chain, 103200 per kthread [ 85.187643][ T6490] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.203647][ T6478] lo speed is unknown, defaulting to 1000 [ 85.209916][ T6478] tunl0 speed is unknown, defaulting to 1000 [ 85.217843][ T6490] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.230891][ T6498] __nla_validate_parse: 2 callbacks suppressed [ 85.230906][ T6498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.911'. [ 85.252799][ T6498] veth1_macvtap: left promiscuous mode [ 85.264994][ T6490] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.275770][ T6478] lo speed is unknown, defaulting to 1000 [ 85.353708][ T6490] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.635060][ T6525] xt_hashlimit: max too large, truncated to 1048576 [ 85.740846][ T6522] xt_hashlimit: max too large, truncated to 1048576 [ 86.062626][ T6545] x_tables: duplicate underflow at hook 1 [ 86.724124][ T6490] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.745289][ T6490] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.766989][ T29] kauditd_printk_skb: 854 callbacks suppressed [ 86.767008][ T29] audit: type=1326 audit(1740436198.599:23542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fa4bd169 code=0x7ffc0000 [ 86.773694][ T6490] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.820421][ T29] audit: type=1326 audit(1740436198.599:23543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6577 comm="syz.3.936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30fa4bd169 code=0x7ffc0000 [ 86.850347][ T6490] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.991025][ T29] audit: type=1400 audit(1740436198.829:23544): avc: denied { mount } for pid=6593 comm="syz.1.942" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 87.035051][ T6596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6596 comm=syz.5.944 [ 87.059207][ T29] audit: type=1400 audit(1740436198.889:23545): avc: denied { write } for pid=6604 comm="syz.4.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 87.104663][ T6603] lo speed is unknown, defaulting to 1000 [ 87.131772][ T29] audit: type=1326 audit(1740436198.969:23546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6613 comm="syz.1.948" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83321fd169 code=0x0 [ 87.138931][ T6603] tunl0 speed is unknown, defaulting to 1000 [ 87.184665][ T6622] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.195848][ T6621] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 87.232569][ T29] audit: type=1400 audit(1740436199.059:23547): avc: denied { execute } for pid=6616 comm="syz.5.950" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17720 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 87.267382][ T6603] lo speed is unknown, defaulting to 1000 [ 87.300617][ T6622] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.372051][ T6622] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.462563][ T6622] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.527881][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.4.958'. [ 87.536929][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.544576][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.552360][ T6643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.559835][ T6643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.579654][ T6650] loop2: detected capacity change from 0 to 2048 [ 87.591488][ T29] audit: type=1400 audit(1740436199.429:23548): avc: denied { getopt } for pid=6640 comm="syz.4.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.613000][ T29] audit: type=1400 audit(1740436199.449:23549): avc: denied { lock } for pid=6640 comm="syz.4.958" path="socket:[17049]" dev="sockfs" ino=17049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 87.731514][ T6657] loop2: detected capacity change from 0 to 4096 [ 87.740392][ T6657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.765185][ T6657] lo speed is unknown, defaulting to 1000 [ 87.771391][ T6657] tunl0 speed is unknown, defaulting to 1000 [ 87.803298][ T6657] lo speed is unknown, defaulting to 1000 [ 87.817605][ T29] audit: type=1400 audit(1740436199.649:23550): avc: denied { read } for pid=6656 comm="syz.2.962" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.843528][ T29] audit: type=1400 audit(1740436199.679:23551): avc: denied { open } for pid=6656 comm="syz.2.962" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.887092][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.972981][ T6667] loop2: detected capacity change from 0 to 512 [ 87.979921][ T6667] EXT4-fs: Ignoring removed oldalloc option [ 87.991097][ T6667] EXT4-fs: Mount option(s) incompatible with ext2 [ 88.009052][ T6667] loop2: detected capacity change from 0 to 1024 [ 88.016610][ T6667] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 88.026367][ T6667] EXT4-fs error (device loop2): ext4_get_journal_inode:5798: comm syz.2.965: inode #98: comm syz.2.965: iget: illegal inode # [ 88.039848][ T6667] EXT4-fs (loop2): no journal found [ 88.045266][ T6667] EXT4-fs (loop2): can't get journal size [ 88.052195][ T6667] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e12d, mo2=0002] [ 88.060351][ T6667] EXT4-fs (loop2): failed to initialize system zone (-22) [ 88.067584][ T6667] EXT4-fs (loop2): mount failed [ 88.095521][ T6673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.967'. [ 88.135047][ T6674] loop2: detected capacity change from 0 to 8192 [ 88.141810][ T6674] vfat: Unknown parameter '' [ 88.232195][ T6678] loop2: detected capacity change from 0 to 2048 [ 88.238732][ T6678] ext4: Unknown parameter 'obj_user' [ 88.334856][ T6691] loop2: detected capacity change from 0 to 4096 [ 88.355395][ T6693] lo speed is unknown, defaulting to 1000 [ 88.356758][ T6691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.361769][ T6693] tunl0 speed is unknown, defaulting to 1000 [ 88.377664][ T6691] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.410551][ T6693] lo speed is unknown, defaulting to 1000 [ 88.548415][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.979'. [ 88.745981][ T6719] loop2: detected capacity change from 0 to 512 [ 88.753863][ T6719] EXT4-fs (loop2): orphan cleanup on readonly fs [ 88.760986][ T6719] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.982: bg 0: block 248: padding at end of block bitmap is not set [ 88.775761][ T6719] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.982: Failed to acquire dquot type 1 [ 88.787609][ T6719] EXT4-fs (loop2): 1 truncate cleaned up [ 88.793974][ T6719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.817514][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.836961][ T6722] loop2: detected capacity change from 0 to 512 [ 88.843813][ T6722] EXT4-fs: Ignoring removed nobh option [ 88.846687][ T6724] 9pnet: p9_errstr2errno: server reported unknown error  [ 88.850596][ T6722] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 88.863135][ T6722] EXT4-fs (loop2): mount failed [ 88.935601][ T6731] loop2: detected capacity change from 0 to 4096 [ 88.944115][ T6731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.973044][ T6731] lo speed is unknown, defaulting to 1000 [ 88.979170][ T6731] tunl0 speed is unknown, defaulting to 1000 [ 89.014424][ T6731] lo speed is unknown, defaulting to 1000 [ 89.087491][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.186472][ T6752] program syz.2.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.213531][ T6755] ================================================================== [ 89.221714][ T6755] BUG: KCSAN: data-race in do_timerfd_settime / do_timerfd_settime [ 89.229631][ T6755] [ 89.231947][ T6755] write to 0xffff88811560f3d4 of 1 bytes by task 6754 on cpu 0: [ 89.239569][ T6755] do_timerfd_settime+0x94a/0xa30 [ 89.244592][ T6755] __x64_sys_timerfd_settime+0xb9/0x140 [ 89.250135][ T6755] x64_sys_call+0x2b76/0x2dc0 [ 89.254835][ T6755] do_syscall_64+0xc9/0x1c0 [ 89.259368][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.265261][ T6755] [ 89.267574][ T6755] read to 0xffff88811560f3d4 of 1 bytes by task 6755 on cpu 1: [ 89.275113][ T6755] do_timerfd_settime+0x867/0xa30 [ 89.280136][ T6755] __x64_sys_timerfd_settime+0xb9/0x140 [ 89.285679][ T6755] x64_sys_call+0x2b76/0x2dc0 [ 89.290361][ T6755] do_syscall_64+0xc9/0x1c0 [ 89.294867][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.300759][ T6755] [ 89.303072][ T6755] value changed: 0x00 -> 0x01 [ 89.307737][ T6755] [ 89.310051][ T6755] Reported by Kernel Concurrency Sanitizer on: [ 89.316208][ T6755] CPU: 1 UID: 0 PID: 6755 Comm: syz.2.994 Tainted: G W 6.14.0-rc4-syzkaller #0 [ 89.326530][ T6755] Tainted: [W]=WARN [ 89.330322][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 89.340374][ T6755] ================================================================== [ 89.379537][ T6755] netlink: 'syz.2.994': attribute type 10 has an invalid length. [ 90.306882][ T6622] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.318259][ T6622] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.329828][ T6622] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.341419][ T6622] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0