last executing test programs: 1m15.605147334s ago: executing program 1 (id=178): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x15, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x8, 0x13, &(0x7f0000000940)=""/19, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000009c0)=[{0x0, 0x5, 0xa, 0x5}, {0x0, 0x3, 0xa, 0x8}, {0x4, 0x4, 0x0, 0x8}, {0x2, 0x2, 0xd, 0x8}], 0x10, 0xca}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000ac0)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000040)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0) close_range(r4, r5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000240)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd29, 0x25dfdbfb}, 0x10}}, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/215, 0xd7}, {&(0x7f0000000640)=""/221, 0xdd}], 0x2, &(0x7f0000000740)=""/193, 0xc1}, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x1) 1m14.683705252s ago: executing program 1 (id=185): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000d1000000000000000000009500000000000000240121c044a6df195431a0d0bba27ffddea4f1ea156b89748d8664108210"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000440)='mm_page_free\x00', r0, 0x0, 0x1000}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) unshare(0x22020400) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x7], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x8010) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'syztnl2\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x6, 0x9a1, {{0x16, 0x4, 0x3, 0x0, 0x58, 0x68, 0x0, 0x7, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x44, 0x6, "d1685e8b"}, @timestamp_addr={0x44, 0x3c, 0x52, 0x1, 0x4, [{@remote, 0xb}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101, 0xd}, {@loopback, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@loopback, 0xc}, {@private=0xa010102, 0x6}]}]}}}}}) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000340)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000380)="44b7e9b4bef21c6063fba4c4215d72057c24445bdf84050512b708998aecb9f7323b9a7579327446b2075d", 0x2b}, {&(0x7f0000000640)="39499383b25b04b16058a6b9bc831edd9446dc657f19835075bab9ccd86a58a83ee0133b6546433c16a8e94544aa1024512860243062b27617e5370de8ff0ea6c4d5df2e8f1aa6c1184b733b1786e6f47d533b7fe3e164f89ff2230626ce166bab3de27759b7ff50b23aedbad2b472d13d0ea928066a7645ef8047c2180b996a849920623bb39b18b2592e593ff088562e2705f5c9c1b32e34e7a8c80be8f96d4f42e0e96f", 0xa5}], 0x2, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x42}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @private=0xa010101, @multicast1}}}], 0x50}}, {{&(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000a00)=[{&(0x7f00000007c0)="9049e2a168e4576168d17c312bdb0ec54c97c54ae78560103c362a97e4c4888927abae286c561d9ab78768a68267f62300f920e12fd11754bdc5bfa220913f2fef6a205d638fd8c24c7022d6c0a9b8fc1be0858370d2d763d5229b526ea49c83fbc3803cf418b053d84aad048b39f52b9f9d269052232ea50ea395b3b5028eb3584ce96354e54401be36f6d407f42ba6cc2265c27319abf0fe180d762eb37e064e304bd55380ff37e91aa0d4456cb4e8839faf3b15d3c59cea8acd4a7184c2584224ba4751d7d90225e375bdc3caf183e3ed405d94a080f48b455c2bab4c84a4", 0xe0}, {&(0x7f00000008c0)="98bf6537c4fa192b5e5c40dd87fccaee3e6ba22182a18e57a791e0ac412c112b2d4406459c1fcb02333d13f7408e34ba713da8263624ba02d06de4bed708ce584faca8e6995365bbb31d56c6ff45338b08b643dc45b2792b6597f66d88a99e9c3ae930a6c6210add9f228d8188d9ff4de89c0b34f53e9b90b99c1d0cd102014f20f3a4eca0cbb856585cd1944436aa34ae90081d9255d3bc9dd12e", 0x9b}, {&(0x7f0000000500)="096ea5d5d71f65eeb3cdc02f505cee66f073e20e9dc032347e924d4a46ac3d641d542519f954dc338722babd44", 0x2d}, {&(0x7f0000000980)="874be54f177d80195c88c33db4e61a080ad32cc9f70a90a1bf36c90a84156cf669", 0x21}], 0x4, &(0x7f0000000b00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x84, 0x0, 0x7, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x1, 0x11, "5ac81eeda1c43ffe006a55cac66014"}]}, @ssrr={0x89, 0x1f, 0xc7, [@private=0xa010101, @private=0xa010101, @multicast2, @multicast2, @private=0xa010100, @empty, @private=0xa010102]}, @noop, @cipso={0x86, 0x20, 0xffffffffffffffff, [{0x5, 0x9, "1a0c9e4cc9d65e"}, {0x0, 0x11, "50fc2e6aca11bf2b5f50a47d061baf"}]}, @ssrr={0x89, 0xb, 0xfe, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}, @noop, @ssrr={0x89, 0x7, 0x26, [@multicast1]}, @timestamp={0x44, 0x8, 0xfb, 0x0, 0x8, [0x8]}]}}}, @ip_retopts={{0x10}}], 0x100}}], 0x2, 0x841) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x989680}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="00000007088f6700b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000953f6a2e3a445da7aa48b9d3a8ba298af7f7a6b54cfe8cce8b0b7678d604fdf31eb2bef7642ba5b13c89c774c213d28cded75d53b713f5beeefa076a97a24f8f5113d754d00810e2fa1baa0d6b6fbb1e1a2544307b9228ded021e67c08beb768fb30f7cf19753ef94b605b5a1c0f009a8e"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r8}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1ae98752ffffff00", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) close_range(r7, 0xffffffffffffffff, 0x0) 1m14.609229713s ago: executing program 1 (id=186): r0 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) fcntl$setlease(r0, 0x400, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="75c4f026"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x400c000) socket$nl_xfrm(0x10, 0x3, 0x6) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(0x0, 0x80000, 0x4c) r6 = inotify_init1(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x6b, 0x2, 0x3, 0x42, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7800, 0x5, 0x1}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex, 0x35, 0x0, 0x80000000, &(0x7f0000000580)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) close(r6) 1m13.75300608s ago: executing program 1 (id=193): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100003c}, 0x18) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41eff157cfdfcef90a6010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d5756c9e5442fa3692127266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f32a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b45ea2408d1da65a2ed8cf55a"], 0x4, 0x24e, &(0x7f0000000a00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) write$cgroup_devices(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x420f, r5, 0x0, 0xffffffffffeffffe) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000004c0)=0x10000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/fscaps', 0xa0042, 0x148) 1m13.608059403s ago: executing program 1 (id=195): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010001fff684fa02277d97d2478040000040000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280"], 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xffffdffc, 0x100, 0xfffffffd, 0x145}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000100)=""/34, 0x22}], &(0x7f0000000a80)=[0xb], 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x3, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0683, 0x0) r4 = open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fcntl$setlease(r4, 0x400, 0x1) open(&(0x7f0000000340)='./bus\x00', 0x18f03e, 0x8) open$dir(&(0x7f0000000000)='./bus\x00', 0x80000, 0x4c) close(r4) close_range(r3, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0), &(0x7f0000000100)=0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 1m13.444127016s ago: executing program 1 (id=198): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) unshare(0x6a040000) fcntl$setlease(r3, 0x400, 0x2) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r5, &(0x7f0000000000)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r9}, 0x10) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000008c0)={0x3ff, 0x101, 0x1, 'queue0\x00', 0x6}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_to_hsr\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x3, 0x2}}) 1m13.443788716s ago: executing program 32 (id=198): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) unshare(0x6a040000) fcntl$setlease(r3, 0x400, 0x2) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0) timer_gettime(r5, &(0x7f0000000000)) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r9}, 0x10) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000008c0)={0x3ff, 0x101, 0x1, 'queue0\x00', 0x6}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth0_to_hsr\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x3, 0x2}}) 1m12.658892102s ago: executing program 2 (id=206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000020000000900010073797a09"], 0x34}}, 0xc800) io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x40}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r3, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3], 0x100b) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000"], 0x48) r5 = io_uring_setup(0x3382, &(0x7f0000000000)={0x0, 0xf6a9, 0xc2, 0x0, 0x4}) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000b28000)=0x3) pause() r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r9, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="95004000ddffffff051c000000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') fcntl$setsig(r7, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r8}], 0x2c, 0xffffffffffbffff8) dup2(r7, r8) fcntl$setown(r7, 0x8, r6) tkill(r6, 0x13) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m11.786055958s ago: executing program 2 (id=209): r0 = inotify_init() ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x10) ioperm(0x0, 0x1fb, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000007c0)={r7, 0xb961, 0x1}, &(0x7f0000000800)=0x8) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200) 1m11.376394146s ago: executing program 2 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x100003c}, 0x18) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x4, 0x24e, &(0x7f0000000a00)="$eJzs3cFLk38YAPBnOtGf8GMeAkmC3ug+1OiuhII0KJId6pSkUjgTEoQ6qJ06d+pS/0Jdgq5Bh+jaPxBBWNBFO3kIFvqq07nlrLZFfj6XPez7PPt+33cv+26HPe/NM/Nz0wuLsxsba9HTk+nKjsTLgc1M9EVHdEZqNQCAf8lmuRzr5VS71wIAtIb9HwBOnsr+nzm0/2dW974TXG39ygCAZvH7HwBOnsnrNy6PFgpj19aTnoj5R0vFpWL6mI6PzsadKMVMDEYuvkeU96Txk4nC2GCy5XNfFOdXdupXloqdB+uHIhd9h+vHJwpjQ0nqYH1X9O7Uf+iNmRiOXJyqXT9cq74rIs7vmz8fuXh/KxaiFNOxVVupXx5KkktXClXzd2/nAQAAAAAAAAAAAAAAAAAAAABAM+Q7tlvnlLuTpGb/nnw+2VU1ntbv7w/0X43+QON7/YGq+/tkYyDb3mMHAAAAAAAAAAAAAAAAAACAv8Xi/QdzU6XSzL2fBXffPX9zVE6DQWZn3po53RHx+1M0GPx/7tPT+jkPj3N+/mzw+myLJ9067cetert2+/SFxf6L9XIi27Q1d/zKm/I117RL68VuMPLtyOTHk626wjurn+l/NjL1avnjl0Zfp40fSgAAAAAAAAAAAAAAAAAAcEJV/vTb7pUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtU7v9fJ8hE3aEGg9V2HyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwIAAD//8pHpIo=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0xfdfffffd, 0x5, 0x3ffd, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000300)={0x800080, 0x7ff, 0x2, 0xfff, 0xfd, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) write$cgroup_devices(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x420f, r5, 0x0, 0xffffffffffeffffe) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000004c0)=0x10000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/fscaps', 0xa0042, 0x148) 1m11.19873974s ago: executing program 2 (id=217): openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x1000)=nil, 0x1000, 0x0, 0x30, r0, 0x356be000) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x7) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x120805, 0x0, 0xa, 0x410001, 0x0, 0x800, 0x0, 0x2, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x48040) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 1m10.976010754s ago: executing program 2 (id=220): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 1m10.930056095s ago: executing program 33 (id=220): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 6.42382137s ago: executing program 5 (id=743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="580000800000000000000000010000009500000000000076"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r2, 0x6, 0x9fd, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x100000e, 0x8, 0x1) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0x200000d4, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf24a5053908589459"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES8=r5, @ANYRES8=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x3, 0x0, 0x2007) r10 = creat(0x0, 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r11, 0x2, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r10, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x2, r10}]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x6011, r7, 0x0) mlockall(0x7) 6.144241186s ago: executing program 4 (id=748): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0xffffffffffffa937, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in=@local, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r6, 0x7) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x6c, 0x2c, 0xd27, 0x4, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x84, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2d38, 0x3, 0x5}, {0x1c0, 0x3ff, 0x7, 0xde}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}}}]}]}]}}]}, 0x6c}}, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r9 = syz_open_pts(r4, 0x28101) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000100)) r11 = dup3(r9, r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) write$UHID_INPUT(r11, &(0x7f00000001c0)={0xa, {"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", 0xe00}}, 0xffffff5c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x101}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 6.046587178s ago: executing program 4 (id=749): r0 = inotify_init() ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x10) ioperm(0x0, 0x1fb, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xe, r2, 0xfffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) shutdown(r7, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x7d, &(0x7f0000000280), &(0x7f0000000180)=0x8) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x10) 5.895491951s ago: executing program 4 (id=753): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x1c33c0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) move_pages(0x0, 0x1ffffffffffffc17, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0xf840, 0x40, 0x0, 0xfffffffa, {{0xe, 0x4, 0x0, 0x1b, 0x38, 0x68, 0x0, 0x4d, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x3c}, {[@noop, @ssrr={0x89, 0x7, 0x4, [@remote]}, @timestamp_prespec={0x44, 0x4, 0x6a, 0x3, 0xa}, @timestamp={0x44, 0x18, 0xa4, 0x0, 0x5, [0x0, 0x7ff, 0x6, 0x7, 0x0]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000740)={'tunl0\x00', r4, 0x20, 0x20, 0x0, 0x7, {{0x10, 0x4, 0x3, 0x5, 0x40, 0x66, 0x0, 0x4, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0x8d, 0x3, 0x2}, @ra={0x94, 0x4, 0x1}, @end, @rr={0x7, 0x23, 0x8f, [@local, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @rand_addr=0x64010102, @broadcast, @multicast1]}]}}}}}) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x300, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd70000000000025000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r7}, 0x18) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r9, 0x0, 0x4000) bind$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(0x0, 0x9c) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0x0) 5.525276658s ago: executing program 5 (id=755): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f0000006800e97800000000000000000a000000000000000400040014000600fc000000000000000000000000000001"], 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x48, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open_tree(r5, &(0x7f0000000040)='\x00', 0x89901) move_mount(r6, 0x0, r5, 0x0, 0x46) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0x0, 0x1001f0) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc615, 0x101, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000002240)={[{@errors_remount}, {@noload}, {@mb_optimize_scan}, {@usrjquota}, {@nobarrier}]}, 0x1, 0x637, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbH4n7/smLS/vaz3YgEgL2qSJrRQRbO9S6o+bXmKTltK0KU0EUwumoDfFiwfBkwfrXyEWvPoPePDiSQpFpAcrxa7M7G4y2ewk2SS7m2Y/H5j2mZmdeZ5p883zzLPPMxNA1xpP/yhFHImIG0nEaG5fb1R3jlc+9/CP2xfTJYly+e3fk7j9cbKSP1dS/ftQ9eC/RyNJDz88/f2GfBeXb12dmZ+fu5mtDVS3Lt86ceXazOW5y3PXp1+ZPnP61OkzUyd3e3396y4n4t1vv36cTH33y/kkzsaTnsrG9Lrqjx3YVc5p3uNRrniU354W5Mwuz71f/Dm69g9bMRRJb8eKQ5MuVX8e+yLi/zEaPbn/zdH49M2OFg5oqXIStToK6DrJjuJ/cO8LArRZrR1Qu7dvdB+8UanFrRKgHR6cq3QAVGK/LyJq8d9b6RuMwaxvYPhhsq6fJ4mI3fXMVaR5/PTj+U/SJQr64YDWWLkzUO23r6//kyw2x2IwWxt+WFoX/6Xckm5/a4f5j9eti39on5U7EfFMtf7vj6bifzwX/+/vMH/xDwAAAAAAAHvn3rmIeKnR+L/S6vif/gbjf0Yi4uwe5L/193+l+9VEsgfZATkPzkW8Vjf+tzJhdnWM71hPde3f2XiAvuTSlfm5kxHxn4g4Hn0D6fpU3XnzI4RPfH74q6L88+P/0iXNvzYWsHqm+711E3FnZ5Zmdn3hQDy4E/FsNv73aHXL+vE/af2fNKj/0/i+sc08Dr9w90LRvq3jH2iV8jcRxxrO/1lrbqepyaVrNyYXGz6fYzJrD0zWWgU1ay2A5z76YqQo/03i31MkoMXS+n948/gfSPLP61ls7vzpvcTLy73lov07bf/3J+/01M6f+nBmaenmVER/8sbG7dPNlRkOqlo81OIljf/jz2/e/7fa/s/F4VBErNSfvKCH7n9PRn4tKo/2P3ROGv+zm9f/Y+vr/+YT03fHfijK/0Jx/FefzJfW/6ey9PHqMfr/IG/j8zg2ROFwNAzQjhQXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5ypYj4VySlidV0qTQxETESEf+N4dL8wuLSi5cWPrg+m+7L3v9fqr3pd7SyntTe/z+WW59evz6U5nUoIr7sGcr2T1xcmJ/1jl8AAAAAAAAAAAAAAAAAAADIjGRz/ssD9fP/U7/1bHn4WOtLCLRU7Skca/He37GyAO1Vjf/P3mv6yPLA3pcGaCdP4YLutf3472tpOYD2K47/R4/LmbYWB2gj7X/oXjuM/62/HgT2PfU/dKtt9ukNtrocQCeo/wEAAAAA4EA5dPTez0lErLw6lC2Rm/xrsD8cbKXCPWb2wkFnDC90r96FTpcA6BT3+ECymvqr4WT/4tH/SWsKBAAAAAAAAAAAAABscOyI+f/QrYrn/4ex/XDAbTL/Pwv+7NUAj8vb+DjwtCl+9Ye6Hw66Te7xvfALusRWtb35/wAAAAAAAAAAAACwDwzeujozPz93c3H56Uu8vj+K0VxiZWZfFGO3iaGIWN3ypDV59UVE56907xK9EaXtfbj2CI4OlrnDv5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBV/wQAAP//nBwg7A==") 5.180113046s ago: executing program 5 (id=758): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x8c2, 0x4, 0x2, 0x0, 0x6, 0x63b, 0x0, 0x0, 0x3, 0x0, 0xc0}, 0x0, 0x7, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$ipvs(0x0, r2) socketpair(0x2b, 0x2, 0x8, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x8c}}, 0x0) timerfd_create(0x8, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) accept4(r5, &(0x7f0000000240)=@x25, 0x0, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d"], 0xa0}}, 0x0) 4.532265278s ago: executing program 3 (id=765): socket(0x1d, 0x2, 0x6) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 4.025228539s ago: executing program 5 (id=766): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r0 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0) r1 = msgget$private(0x0, 0xffffffffffffffdc) msgrcv(r1, 0x0, 0x0, 0x1, 0x3000) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x1, @remote}, 0xa}}, 0x26) r3 = msgget$private(0x0, 0x193) msgsnd(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x8, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0], 0x8, 0x0) msgrcv(r3, &(0x7f0000000140)={0x0, ""/139}, 0xb5, 0x2, 0x2800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000000480), 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000680)={{0x3, r5, r7, r5, r6, 0x80, 0x8}, 0x0, 0x0, 0xb, 0x15, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x6, 0x9, r4, r4}) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000100)=0x28) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) read$hiddev(r9, &(0x7f0000000600)=""/98, 0x62) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) 3.95626588s ago: executing program 0 (id=767): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00'}, 0x10) syz_io_uring_setup(0x498c, &(0x7f0000000240)={0x0, 0x7102, 0x20, 0x2, 0x354}, &(0x7f0000000300), &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getitimer(0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x68f}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000c40)={[{@resgid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sb={'sb', 0x3d, 0x97}}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000900)={0x7, 0x5f6, 0x401, 0x0, 0xb}) 3.892041382s ago: executing program 0 (id=768): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="d048", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) renameat2(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x402, 0x20) openat(r1, &(0x7f0000000540)='./file1\x00', 0x1a3642, 0x75) exit(0x6) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r4, 0x5, &(0x7f00000000c0)={0x1, 0x1, 0x401, 0x401}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newchain={0x24, 0x64, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {0xf, 0xc}, {0x3, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002980)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {}, {0x1c, 0xc}}}, 0x24}}, 0x44050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x4d8}, 0x1, 0x0, 0x0, 0x20040010}, 0x54) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0xffff}, {0x10}}}, 0x24}}, 0x20000004) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010030bd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="0071756575655f696400000000000000000000000000000000000000000000000005000300030000000c000400ff00001008000600", @ANYRES32=r7, @ANYBLOB], 0x60}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) socket$inet6_udp(0xa, 0x2, 0x0) 3.658206696s ago: executing program 3 (id=770): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04040000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) memfd_create(0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) socket$key(0xf, 0x3, 0x2) getpeername$l2tp(0xffffffffffffffff, 0x0, &(0x7f00000003c0)) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000140)=[{0x0, 0x2, 0x800}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000030000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000480)='mm_page_alloc\x00', r5, 0x0, 0x10000000006}, 0x18) creat(&(0x7f0000000300)='./file0\x00', 0x28) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10808, 0x4, 0x0, 0xb, 0x7, 0xfffffffc, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd65080000000000000000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) semtimedop(r1, &(0x7f0000000000)=[{0x4, 0x2}, {0x2, 0xfb7d, 0x1000}], 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) 2.732032455s ago: executing program 3 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) close(0x3) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x7, 0x7, 0x6, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) write$P9_RREADDIR(r2, &(0x7f0000000000)={0x28, 0x29, 0x1, {0x1, [{{0x40, 0x0, 0x3}, 0x6, 0x6, 0x5, './bus'}]}}, 0x28) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mmap(&(0x7f00003f7000/0x3000)=nil, 0x3000, 0x1000008, 0xbb6e9fe6aa012c38, 0xffffffffffffffff, 0x85750000) sendfile(r3, r4, 0x0, 0x20000023896) close(r3) r5 = gettid() ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) timer_settime(r6, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400420008001d001931a0e69ee517d34460bc0600e8ea2c0000a705251e6182949a3651f60a84c9f4d4938000e70e4509c5bb937762376e5eb58a72", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 2.731480915s ago: executing program 0 (id=781): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r1, 0x1, 0x8, &(0x7f0000001040)=""/4096, &(0x7f0000002040)=0x1000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r4 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x1000, 0x80000ffc, 0x5cc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x4c, 0x0, @fd_index=0x6, 0x9, 0x6, 0x1, 0x10, 0x1, {0x2}}) io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) getdents(r3, &(0x7f0000000f40)=""/243, 0xf3) sendmsg$NFT_BATCH(r3, 0x0, 0x4) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x13) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @local}, 0xfffc, 0x5, 0x0, 0x3}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) 2.730930605s ago: executing program 5 (id=772): setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mq_open(0x0, 0x80, 0x140, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fstat(0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0x20) r1 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000000580)=""/2, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") socket(0x1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000180)=[@init={0x18, 0x84, 0x0, {0x200, 0x2, 0xb, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x3, 0x2, 0xfffffffd}}], 0x38, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="007e7bd1c2865c142c660162f20a62b138f017c8b221c9000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x1d92ae59907d5f03, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) 2.575112888s ago: executing program 6 (id=774): r0 = inotify_init() ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, 0xffffffffffffffff, 0x5}, 0x10) ioperm(0x0, 0x1fb, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x4, 0x1, 0x80, 0x4, 0x50, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x7800, 0x4}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x200) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x4e24, 0x2, 0xa, 0x60, 0x0, 0x0, r6, r7}, {0x2, 0x1, 0x8, 0x8, 0xfffffffffffffff8, 0x8, 0x8, 0x800}, {0xf, 0xbb, 0x9, 0x1}, 0x401, 0x6e6bbd, 0x2, 0x0, 0x3, 0x1}, {{@in=@empty, 0x4d3, 0x6c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3506, 0x2, 0x0, 0x9, 0x7, 0x2, 0x3}}, 0xe8) getgid() close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6000000013140100"], 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.404078522s ago: executing program 6 (id=776): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60c439a7001806ffff010000000000000000000000000001200100000000000000000000000000020000000000000000000000000000000000004e2100004e24"], 0x0) write$selinux_load(r0, 0x0, 0x44f0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}, 0x1, 0x0, 0x0, 0x20004811}, 0x8814) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r5, 0x5) writev(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1fc, 0x0, 0x5}}) 2.376110812s ago: executing program 4 (id=777): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) gettid() r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x8c2, 0x4, 0x2, 0x0, 0x6, 0x63b, 0x0, 0x0, 0x3, 0x0, 0xc0}, 0x0, 0x7, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{&(0x7f00000000c0)={0xa, 0x20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x58}}], 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$ipvs(0x0, r2) socketpair(0x2b, 0x2, 0x8, &(0x7f0000000040)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x40000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x8c}}, 0x0) timerfd_create(0x8, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x7}, 0x8) accept4(r5, &(0x7f0000000240)=@x25, 0x0, 0x80800) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d"], 0xa0}}, 0x0) 2.291335793s ago: executing program 0 (id=778): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4f0000006800e97800000000000000000a000000000000000400040014000600fc000000000000000000000000000001"], 0x30}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x48, 0x0, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10) socket$inet(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240), 0x1, 0x55f, &(0x7f0000000c80)="$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") r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = open_tree(r5, &(0x7f0000000040)='\x00', 0x89901) move_mount(r6, 0x0, r5, 0x0, 0x46) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r7, 0x0, 0x0, 0x1001f0) copy_file_range(r7, 0x0, r7, &(0x7f00000000c0)=0xc615, 0x101, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000002240)={[{@errors_remount}, {@noload}, {@mb_optimize_scan}, {@usrjquota}, {@nobarrier}]}, 0x1, 0x637, &(0x7f0000000800)="$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") 2.181312666s ago: executing program 6 (id=779): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x408202, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) fsopen(&(0x7f00000003c0)='dax\x00', 0x1) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r5}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x400) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x401}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.074169649s ago: executing program 3 (id=780): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x843) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_io_uring_setup(0x1b68, &(0x7f0000000a40)={0x0, 0x1040, 0x2, 0x1003, 0xff}, &(0x7f0000000240), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000200)=[0x8, 0xc1e], 0x2) socket$inet_udp(0x2, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) syz_clone(0xe2840480, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 2.017291039s ago: executing program 0 (id=782): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ff8}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x4, 0x8, 0x401}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000025000000b703000000000000001b000000b700000000000000950000f70000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) semop(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x2, 0x0, 0x6021, 0x1000000009}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = memfd_secret(0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='kfree\x00', r7}, 0x18) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000018c0), 0x0, 0xd7, 0x3) ftruncate(r6, 0x51a9497) r8 = semget$private(0x0, 0x2, 0x404) semop(r8, &(0x7f0000000000)=[{0x1, 0x2}], 0x1) 1.99248859s ago: executing program 6 (id=783): inotify_init1(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000001c000000180001801400020074756e6c30"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x44) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x1, 0x5) r9 = syz_pidfd_open(r3, 0x0) setns(r9, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.828401523s ago: executing program 0 (id=784): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x65, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x8, 0x0, 0x0}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x1) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)='_q', 0x2}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') chroot(&(0x7f0000002a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 254.959575ms ago: executing program 6 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15ed9d60a1471776, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) sendto$inet6(r2, 0x0, 0x0, 0x20000845, 0x0, 0x0) mmap(&(0x7f00001c3000/0x1000)=nil, 0x1000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xdfe8, 0x17510, 0x0, 0x100000}, &(0x7f0000000340), &(0x7f0000000280)) r4 = eventfd2(0xb0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x7, &(0x7f0000000140)=r4, 0x1) io_uring_enter(r3, 0x54, 0x4, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x15, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r1], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x12, r7, {0x0, 0x11}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x4, 0xfffe, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000013000000850000008600"], &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000002c0)='\x00!', 0x2}], 0x1, 0x8, 0x49d) r10 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r10, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045000014"], 0x0) 195.829586ms ago: executing program 4 (id=786): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = io_uring_setup(0x1fc5, &(0x7f0000000bc0)={0x0, 0x77a3, 0x40, 0x3, 0x104}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) statfs(&(0x7f0000000000)='./file1\x00', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3, 0xe7, 0xe, 0x4}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100627269646765000040000280080005000000000005002900010000000600270004"], 0x70}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500), 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) 194.528516ms ago: executing program 5 (id=787): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xe, r2, 0xfffffffe}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) shutdown(r7, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x7d, &(0x7f0000000280), &(0x7f0000000180)=0x8) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x10) 123.864248ms ago: executing program 3 (id=788): r0 = inotify_init() ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00'}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180011000000000000000000000000009540000000000000d438c5e15d91952fc1517252a576fd23bf3acd9b9ba0d250841e83b06d18369413a0221e99f47ac4a5dbc6123ed8ef7fe9ba058cbdbdc15e3cf767cfe6943a51dc76d4cd0a5ae87d4b51c98f4540f31f3d79823e00eb08848794634661094d87cc0099158f96fefa198147089800000000000000000000000400000000000000000000ed564bf3e0e396b075e1000000000000000000000000d021f6d67287b0687b5ef7867d7e5649380ab91278495c6ad70bf1a34190c50187318d993288874ad229eeafcc411df82799f905fdd72136ffea8b4391e3020000e12d570b4ed5923bc5818e485adc62cce78b098c3d9b640ab34c187001deb2a35b9a88fcc9331491ef4c2db8b32e9c474dd2dd670a39ddf410bc6e227c786b832844896598b1d335199aca4e4f834b9ac6be97aca76528591240f9f06c788a7bdb50c1405e10f5fe5ae8b20d4525fe41525ef3e08b6d7efe40272f61b3e36198231c1386b8a8a623c50700000000000000bb31c0a8f61314993cbf500375310f11519f97584d8a927c3c252d3b6834eec7c214d96cde0e84239e64fff8c66d9a29668a13999f7e40922ca3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, 0xffffffffffffffff, 0x5}, 0x10) ioperm(0x0, 0x1fb, 0x4) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000180)=0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r10, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @remote, @remote}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000c00)={0x204, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x40011}, 0x10) unshare(0x42000000) kernel console output (not intermixed with test programs): 014 comm="syz.6.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.133197][ T29] audit: type=1326 audit(1757450694.628:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 70.156607][ T29] audit: type=1326 audit(1757450694.628:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 70.179844][ T29] audit: type=1326 audit(1757450694.638:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.3.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 70.233727][ T29] audit: type=1326 audit(1757450694.848:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5028 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 70.302723][ T5025] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 70.365389][ T5025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 70.551405][ T5009] tipc: Disabling bearer [ 70.573725][ T5036] loop4: detected capacity change from 0 to 512 [ 70.581242][ T5036] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.629391][ T5036] EXT4-fs (loop4): 1 truncate cleaned up [ 70.669040][ T5036] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.688876][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.693976][ T5036] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.289: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 70.759032][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.763646][ T5046] loop5: detected capacity change from 0 to 512 [ 70.776344][ T5046] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 70.802817][ T5046] EXT4-fs (loop5): 1 truncate cleaned up [ 70.811538][ T5046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.978293][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.989752][ T3387] IPVS: starting estimator thread 0... [ 70.995589][ T5052] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 71.014912][ T5057] hub 9-0:1.0: USB hub found [ 71.030530][ T5057] hub 9-0:1.0: 8 ports detected [ 71.074008][ T5063] loop0: detected capacity change from 0 to 512 [ 71.080585][ T5058] IPVS: using max 2400 ests per chain, 120000 per kthread [ 71.087851][ T5061] __nla_validate_parse: 30 callbacks suppressed [ 71.087867][ T5061] netlink: 36 bytes leftover after parsing attributes in process `syz.5.295'. [ 71.124684][ T5063] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #4: comm syz.0.298: iget: bogus i_mode (4200) [ 71.156897][ T5072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 71.170657][ T5063] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.298: Bad quota inode: 4, type: 1 [ 71.190676][ T5063] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.226550][ T5063] EXT4-fs (loop0): mount failed [ 71.296302][ T5063] loop0: detected capacity change from 0 to 1024 [ 71.326953][ T5063] EXT4-fs: Ignoring removed bh option [ 71.350032][ T5063] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.367159][ T5055] lo speed is unknown, defaulting to 1000 [ 71.397144][ T5055] lo speed is unknown, defaulting to 1000 [ 71.405518][ T5063] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 71.427671][ T5063] System zones: 0-1, 3-12 [ 71.443462][ T5063] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.298: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.453437][ T5095] netlink: 16 bytes leftover after parsing attributes in process `syz.5.300'. [ 71.467936][ T5095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.300'. [ 71.480030][ T5063] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.298: Failed to acquire dquot type 0 [ 71.515096][ T5063] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.298: Freeing blocks not in datazone - block = 0, count = 4096 [ 71.580023][ T5063] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.298: Invalid inode bitmap blk 0 in block_group 0 [ 71.593014][ T3875] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.614394][ T5063] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 71.648213][ T3875] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:15: Failed to release dquot type 0 [ 71.663656][ T5063] EXT4-fs (loop0): 1 orphan inode deleted [ 71.686715][ T5063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.720029][ T5116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.303'. [ 71.803267][ T5129] loop6: detected capacity change from 0 to 1024 [ 71.822550][ T5129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.884750][ T5140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=5140 comm=syz.3.305 [ 71.976630][ T5063] netlink: 'syz.0.298': attribute type 21 has an invalid length. [ 72.019779][ T5167] openvswitch: netlink: Message has 6 unknown bytes. [ 72.022072][ T5063] netlink: 156 bytes leftover after parsing attributes in process `syz.0.298'. [ 72.035709][ T5063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.298'. [ 72.060566][ T5171] netlink: 36 bytes leftover after parsing attributes in process `syz.3.308'. [ 72.096059][ T5175] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 72.158888][ T5063] capability: warning: `syz.0.298' uses 32-bit capabilities (legacy support in use) [ 72.195947][ T5173] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 72.261068][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.315355][ T5187] program syz.3.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.727905][ T5193] lo speed is unknown, defaulting to 1000 [ 72.734793][ T5193] lo speed is unknown, defaulting to 1000 [ 72.917327][ T5197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.312'. [ 72.929597][ T5197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.312'. [ 73.029220][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.115567][ T5205] netlink: 'syz.0.315': attribute type 13 has an invalid length. [ 73.294498][ T5217] siw: device registration error -23 [ 73.656446][ T1002] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.668270][ T1002] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.677484][ T1002] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.687351][ T1002] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.719453][ T5223] loop3: detected capacity change from 0 to 164 [ 73.733877][ T5223] iso9660: Unknown parameter 'kfree' [ 73.818882][ T5229] loop0: detected capacity change from 0 to 512 [ 73.842056][ T5229] EXT4-fs: Ignoring removed nobh option [ 73.869790][ T5229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.882782][ T5229] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.975126][ T5236] loop4: detected capacity change from 0 to 1024 [ 74.012505][ T5236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.032176][ T5236] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.047299][ T5241] loop6: detected capacity change from 0 to 1024 [ 74.056150][ T5241] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 74.140194][ T5236] SELinux: Context system_u:object is not valid (left unmapped). [ 74.380101][ T5261] openvswitch: netlink: Message has 6 unknown bytes. [ 74.597117][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.615209][ T5263] loop0: detected capacity change from 0 to 128 [ 74.653057][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/174.tmp-b7:0' failed: Read-only file system [ 74.657609][ T3492] udevd[3492]: symlink '../../loop3' '/dev/disk/by-diskseq/168.tmp-b7:3' failed: Read-only file system [ 74.669227][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 74.687995][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:0' failed: Read-only file system [ 74.700475][ T5266] netlink: 'syz.3.333': attribute type 13 has an invalid length. [ 74.752163][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 74.768846][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 74.787309][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 74.789760][ T5266] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.805534][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/175.tmp-b7:0' failed: Read-only file system [ 74.816880][ T5266] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.984131][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 74.984192][ T29] audit: type=1326 audit(1757450699.598:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 75.014349][ T29] audit: type=1326 audit(1757450699.598:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5267 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 75.074528][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/173.tmp-b7:6' failed: Read-only file system [ 75.135002][ T29] audit: type=1400 audit(1757450699.728:4682): avc: denied { mount } for pid=5283 comm="syz.6.335" name="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 75.157940][ T29] audit: type=1400 audit(1757450699.728:4683): avc: denied { search } for pid=5283 comm="syz.6.335" name="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.180053][ T29] audit: type=1400 audit(1757450699.758:4684): avc: denied { search } for pid=5283 comm="syz.6.335" name="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.202163][ T29] audit: type=1400 audit(1757450699.758:4685): avc: denied { search } for pid=5283 comm="syz.6.335" name="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.224464][ T29] audit: type=1400 audit(1757450699.768:4686): avc: denied { read open } for pid=5283 comm="syz.6.335" path="/" dev="configfs" ino=826 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.268527][ T3514] syz1: Port: 1 Link DOWN [ 75.273118][ T3869] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.296945][ T3492] udevd[3492]: symlink '../../loop5' '/dev/disk/by-diskseq/160.tmp-b7:5' failed: Read-only file system [ 75.354207][ T3869] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.377243][ T5290] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 75.424030][ T29] audit: type=1400 audit(1757450700.058:4687): avc: denied { watch watch_reads } for pid=5295 comm="syz.6.340" path="/15/file0" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.455924][ T5290] team1: entered promiscuous mode [ 75.461041][ T5290] team1: entered allmulticast mode [ 75.466309][ T3869] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.519269][ T29] audit: type=1326 audit(1757450700.148:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 75.542770][ T29] audit: type=1326 audit(1757450700.148:4689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 75.591597][ T3869] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.609067][ T5290] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.643081][ T5311] loop0: detected capacity change from 0 to 128 [ 75.682491][ T5290] wireguard0: entered promiscuous mode [ 75.688020][ T5290] wireguard0: entered allmulticast mode [ 75.746859][ T5315] hub 6-0:1.0: USB hub found [ 75.751645][ T5315] hub 6-0:1.0: 8 ports detected [ 75.999603][ T5329] lo speed is unknown, defaulting to 1000 [ 76.005996][ T5329] lo speed is unknown, defaulting to 1000 [ 76.160352][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.168168][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.175728][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.183157][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.190592][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.198006][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.205436][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.212962][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.220452][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.227858][ T3380] hid-generic 0008:0006:0007.0001: unknown main item tag 0x0 [ 76.236090][ T3380] hid-generic 0008:0006:0007.0001: hidraw0: HID v0.0b Device [syz1] on syz1 [ 76.268437][ T5362] __nla_validate_parse: 9 callbacks suppressed [ 76.268449][ T5362] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 76.288952][ T5362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.351'. [ 76.305813][ T5364] netlink: 14 bytes leftover after parsing attributes in process `syz.4.352'. [ 76.315113][ T5360] fido_id[5360]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.471708][ T5383] loop3: detected capacity change from 0 to 128 [ 76.837275][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 76.869964][ T5388] netlink: 'syz.5.356': attribute type 8 has an invalid length. [ 76.900343][ T5388] loop5: detected capacity change from 0 to 512 [ 76.922936][ T5388] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.981928][ T5388] EXT4-fs (loop5): mount failed [ 77.035515][ T5417] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.042738][ T5417] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.095327][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.106920][ T5417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.129124][ T5373] loop4: detected capacity change from 0 to 2048 [ 77.152789][ T787] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.162065][ T787] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.170855][ T3884] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.179320][ T3884] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.193972][ T5373] EXT4-fs (loop4): failed to initialize system zone (-117) [ 77.226348][ T5373] EXT4-fs (loop4): mount failed [ 77.251474][ T5431] netlink: 152 bytes leftover after parsing attributes in process `syz.6.362'. [ 77.260638][ T5431] netlink: 6 bytes leftover after parsing attributes in process `syz.6.362'. [ 77.348617][ T5433] netlink: 16 bytes leftover after parsing attributes in process `syz.6.363'. [ 77.373687][ T5433] netlink: 24 bytes leftover after parsing attributes in process `syz.6.363'. [ 77.432278][ T5435] loop6: detected capacity change from 0 to 512 [ 77.449232][ T5435] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 77.472490][ T5437] netlink: 'syz.5.365': attribute type 4 has an invalid length. [ 77.492373][ T5437] netlink: 'syz.5.365': attribute type 4 has an invalid length. [ 77.503024][ T5279] lo speed is unknown, defaulting to 1000 [ 77.508895][ T5279] syz0: Port: 1 Link ACTIVE [ 77.531125][ T5435] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.364: invalid indirect mapped block 4294967295 (level 1) [ 77.567613][ T5441] tipc: Enabled bearer , priority 0 [ 77.574917][ T5441] syzkaller0: entered promiscuous mode [ 77.580439][ T5441] syzkaller0: entered allmulticast mode [ 77.589995][ T5441] tipc: Resetting bearer [ 77.597052][ T5440] tipc: Resetting bearer [ 77.604856][ T5440] tipc: Disabling bearer [ 77.612798][ T5435] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.364: invalid indirect mapped block 4294967295 (level 1) [ 77.657852][ T5435] EXT4-fs (loop6): 2 truncates cleaned up [ 77.666551][ T5435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.683843][ T5435] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.364: bg 0: block 5: invalid block bitmap [ 77.725392][ T5445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.368'. [ 77.738089][ T5446] loop0: detected capacity change from 0 to 128 [ 77.767205][ T5364] syz.4.352 (5364) used greatest stack depth: 7512 bytes left [ 77.782310][ T5445] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5445 comm=syz.5.368 [ 77.796057][ T5445] netlink: 'syz.5.368': attribute type 1 has an invalid length. [ 77.852218][ T5446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 77.860063][ T5446] FAT-fs (loop0): Filesystem has been set read-only [ 77.867133][ T5446] bio_check_eod: 84 callbacks suppressed [ 77.867145][ T5446] syz.0.367: attempt to access beyond end of device [ 77.867145][ T5446] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 77.890135][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.893163][ T5446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 77.907013][ T5446] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 77.916172][ T5453] syz.0.367: attempt to access beyond end of device [ 77.916172][ T5453] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 77.929396][ T5453] Buffer I/O error on dev loop0, logical block 2065, async page read [ 77.950157][ T5453] syz.0.367: attempt to access beyond end of device [ 77.950157][ T5453] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 77.963525][ T5453] Buffer I/O error on dev loop0, logical block 2066, async page read [ 77.972660][ T5453] syz.0.367: attempt to access beyond end of device [ 77.972660][ T5453] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 77.985943][ T5453] Buffer I/O error on dev loop0, logical block 2067, async page read [ 77.995209][ T5453] syz.0.367: attempt to access beyond end of device [ 77.995209][ T5453] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 78.008436][ T5453] Buffer I/O error on dev loop0, logical block 2068, async page read [ 78.017293][ T5453] syz.0.367: attempt to access beyond end of device [ 78.017293][ T5453] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 78.030822][ T5453] Buffer I/O error on dev loop0, logical block 2069, async page read [ 78.062910][ T5453] syz.0.367: attempt to access beyond end of device [ 78.062910][ T5453] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 78.076170][ T5453] Buffer I/O error on dev loop0, logical block 2070, async page read [ 78.085334][ T5453] syz.0.367: attempt to access beyond end of device [ 78.085334][ T5453] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 78.098552][ T5453] Buffer I/O error on dev loop0, logical block 2071, async page read [ 78.108738][ T5453] syz.0.367: attempt to access beyond end of device [ 78.108738][ T5453] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 78.121957][ T5453] Buffer I/O error on dev loop0, logical block 2072, async page read [ 78.130334][ T5446] syz.0.367: attempt to access beyond end of device [ 78.130334][ T5446] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 78.143628][ T5446] Buffer I/O error on dev loop0, logical block 2065, async page read [ 78.154036][ T5462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 78.163194][ T5446] Buffer I/O error on dev loop0, logical block 2066, async page read [ 78.208935][ T5461] wireguard0: entered promiscuous mode [ 78.214474][ T5461] wireguard0: entered allmulticast mode [ 78.235551][ T5468] 0{X: renamed from gretap0 [ 78.251114][ T5468] 0{X: entered allmulticast mode [ 78.270003][ T5468] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 78.790004][ T5483] loop0: detected capacity change from 0 to 128 [ 78.889320][ T5494] loop0: detected capacity change from 0 to 128 [ 78.901423][ T5487] loop5: detected capacity change from 0 to 512 [ 78.938528][ T5487] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.382: bad orphan inode 11862016 [ 78.970938][ T5487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 79.014214][ T5487] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.182279][ T3873] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.195978][ T5279] hid-generic 0008:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 79.217065][ T3873] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.228999][ T3873] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.239773][ T3873] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.280606][ T5508] fido_id[5508]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.324953][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 79.425899][ T5519] bridge0: port 3(vlan2) entered blocking state [ 79.432463][ T5519] bridge0: port 3(vlan2) entered disabled state [ 79.439185][ T5519] vlan2: entered allmulticast mode [ 79.444774][ T5519] bridge0: entered allmulticast mode [ 79.454034][ T5519] vlan2: left allmulticast mode [ 79.459143][ T5519] bridge0: left allmulticast mode [ 79.483814][ T5521] vlan2: entered allmulticast mode [ 79.592650][ T5528] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 79.599251][ T5528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.606948][ T5528] vhci_hcd vhci_hcd.0: Device attached [ 79.624312][ T5528] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 79.630850][ T5528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.638536][ T5528] vhci_hcd vhci_hcd.0: Device attached [ 79.649194][ T5528] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 79.655718][ T5528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.663174][ T5528] vhci_hcd vhci_hcd.0: Device attached [ 79.720749][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/181.tmp-b7:3' failed: Read-only file system [ 79.733531][ T3492] udevd[3492]: symlink '../../loop4' '/dev/disk/by-diskseq/185.tmp-b7:4' failed: Read-only file system [ 79.802834][ T5540] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 79.817207][ T5528] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(14) [ 79.823829][ T5528] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.831625][ T5528] vhci_hcd vhci_hcd.0: Device attached [ 79.860527][ T5528] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(16) [ 79.867148][ T5528] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 79.870485][ T3480] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 79.874623][ T5528] vhci_hcd vhci_hcd.0: Device attached [ 79.915022][ T5542] vhci_hcd: connection closed [ 79.915240][ T3884] vhci_hcd: stop threads [ 79.924324][ T3884] vhci_hcd: release socket [ 79.928839][ T3884] vhci_hcd: disconnect device [ 79.930270][ T5531] vhci_hcd: connection closed [ 79.935089][ T5529] vhci_hcd: connection reset by peer [ 79.945364][ T5533] vhci_hcd: connection closed [ 79.947927][ T5544] vhci_hcd: connection closed [ 79.954962][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/188.tmp-b7:6' failed: Read-only file system [ 79.955231][ T3884] vhci_hcd: stop threads [ 79.975050][ T3884] vhci_hcd: release socket [ 79.979491][ T3884] vhci_hcd: disconnect device [ 79.985975][ T3884] vhci_hcd: stop threads [ 79.990418][ T3884] vhci_hcd: release socket [ 79.995005][ T3884] vhci_hcd: disconnect device [ 80.010506][ T29] kauditd_printk_skb: 908 callbacks suppressed [ 80.010522][ T29] audit: type=1326 audit(1757450704.618:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.6.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 80.041565][ T3884] vhci_hcd: stop threads [ 80.045917][ T3884] vhci_hcd: release socket [ 80.050358][ T3884] vhci_hcd: disconnect device [ 80.081553][ T29] audit: type=1326 audit(1757450704.718:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.6.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 80.104982][ T29] audit: type=1326 audit(1757450704.718:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.6.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 80.129016][ T29] audit: type=1326 audit(1757450704.768:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.6.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 80.152372][ T29] audit: type=1326 audit(1757450704.768:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.6.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 80.175759][ T29] audit: type=1326 audit(1757450704.768:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.6.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 80.183006][ T3884] vhci_hcd: stop threads [ 80.199172][ T29] audit: type=1326 audit(1757450704.768:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.6.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 80.203434][ T3884] vhci_hcd: release socket [ 80.203466][ T3884] vhci_hcd: disconnect device [ 80.241135][ T5549] IPv6: sit1: Disabled Multicast RS [ 80.247470][ T5549] sit1: entered allmulticast mode [ 80.478575][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/194.tmp-b7:0' failed: Read-only file system [ 80.621437][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/185.tmp-b7:4' failed: Read-only file system [ 80.630457][ T29] audit: type=1400 audit(1757450705.108:5604): avc: denied { create } for pid=5551 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 80.653229][ T29] audit: type=1400 audit(1757450705.138:5605): avc: denied { bind } for pid=5551 comm="syz.0.397" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 80.673730][ T29] audit: type=1400 audit(1757450705.138:5606): avc: denied { listen } for pid=5551 comm="syz.0.397" path=2F37312FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 80.722473][ T3492] udevd[3492]: symlink '../../loop5' '/dev/disk/by-diskseq/195.tmp-b7:5' failed: Read-only file system [ 80.737902][ T5557] random: crng reseeded on system resumption [ 80.749080][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/181.tmp-b7:3' failed: Read-only file system [ 80.762455][ T5557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.779392][ T5557] loop4: detected capacity change from 0 to 1024 [ 80.786276][ T5557] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.818669][ T5561] bridge_slave_0: left allmulticast mode [ 80.824405][ T5561] bridge_slave_0: left promiscuous mode [ 80.830138][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.858770][ T5561] bridge_slave_1: left allmulticast mode [ 80.864480][ T5561] bridge_slave_1: left promiscuous mode [ 80.870173][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.905405][ T5561] bond0: (slave bond_slave_0): Releasing backup interface [ 80.922751][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/196.tmp-b7:4' failed: Read-only file system [ 80.926839][ T3492] udevd[3492]: symlink '../../loop6' '/dev/disk/by-diskseq/188.tmp-b7:6' failed: Read-only file system [ 80.941399][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 80.946990][ T5557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.973664][ T5561] bond0: (slave bond_slave_1): Releasing backup interface [ 80.986843][ T5561] team0: Port device team_slave_0 removed [ 80.995122][ T5557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.018254][ T5561] team0: Port device team_slave_1 removed [ 81.029973][ T5562] IPVS: Unknown mcast interface: vcan0 [ 81.093188][ T5573] wireguard0: entered promiscuous mode [ 81.098714][ T5573] wireguard0: entered allmulticast mode [ 81.216313][ T5552] lo speed is unknown, defaulting to 1000 [ 81.274328][ T5552] lo speed is unknown, defaulting to 1000 [ 81.296336][ T5560] lo speed is unknown, defaulting to 1000 [ 81.331717][ T5560] lo speed is unknown, defaulting to 1000 [ 81.753271][ T5587] loop5: detected capacity change from 0 to 512 [ 81.797285][ T5587] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.838717][ T5587] EXT4-fs (loop5): 1 truncate cleaned up [ 81.850863][ T5587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.890066][ T5586] netlink: 'syz.0.404': attribute type 10 has an invalid length. [ 81.959999][ T5587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.050611][ T5586] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 82.082707][ T5594] __nla_validate_parse: 10 callbacks suppressed [ 82.082724][ T5594] netlink: 36 bytes leftover after parsing attributes in process `syz.3.409'. [ 82.199467][ T5600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.411'. [ 82.215942][ T5602] loop6: detected capacity change from 0 to 1024 [ 82.222896][ T5602] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.239853][ T5597] loop0: detected capacity change from 0 to 8192 [ 82.254519][ T5602] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 82.292083][ T5597] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 82.299882][ T5597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 82.309617][ T5602] System zones: 0-1, 3-36 [ 82.310205][ T5606] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5606 comm=syz.3.411 [ 82.332992][ T5602] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.412: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 82.351667][ T5597] batman_adv: batadv0: Adding interface: macvlan0 [ 82.358096][ T5597] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.391052][ T5602] EXT4-fs error (device loop6): ext4_quota_enable:7131: comm syz.6.412: Bad quota inode: 3, type: 0 [ 82.395106][ T5597] batman_adv: batadv0: Interface activated: macvlan0 [ 82.410063][ T5602] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 82.424923][ T5600] netlink: 'syz.3.411': attribute type 1 has an invalid length. [ 82.445199][ T5602] EXT4-fs (loop6): mount failed [ 82.508288][ T5602] netlink: 'syz.6.412': attribute type 32 has an invalid length. [ 82.583108][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 82.617883][ T5615] netlink: 'syz.6.415': attribute type 1 has an invalid length. [ 82.653017][ T5619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.416'. [ 82.665796][ T5615] bond1: entered promiscuous mode [ 82.670927][ T5615] bond1: entered allmulticast mode [ 82.688621][ T5619] serio: Serial port ptm0 [ 82.697445][ T5621] geneve2: entered allmulticast mode [ 82.708997][ T5621] bond1: (slave geneve2): making interface the new active one [ 82.716656][ T5621] geneve2: entered promiscuous mode [ 82.731486][ T5621] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 82.742077][ T5622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 82.752892][ T5584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.407'. [ 82.761873][ T5584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.407'. [ 82.765757][ T5609] netlink: 'syz.3.413': attribute type 3 has an invalid length. [ 82.772292][ T787] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.778521][ T5609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.413'. [ 82.790647][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.416'. [ 82.805534][ T787] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.819711][ T787] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.838274][ T787] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.839890][ T5615] loop6: detected capacity change from 0 to 512 [ 82.855842][ T5615] EXT4-fs: Ignoring removed nobh option [ 82.861507][ T5615] EXT4-fs: inline encryption not supported [ 82.874362][ T5615] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 82.885313][ T5615] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.415: invalid indirect mapped block 2683928664 (level 1) [ 82.905913][ T5615] EXT4-fs (loop6): 1 truncate cleaned up [ 82.912189][ T5615] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.947139][ T5615] bond1: left promiscuous mode [ 82.952222][ T5615] geneve2: left promiscuous mode [ 82.966306][ T5615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.999396][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.083739][ T5625] netlink: 'syz.3.418': attribute type 8 has an invalid length. [ 83.106810][ T5625] loop3: detected capacity change from 0 to 512 [ 83.134876][ T5625] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 83.150072][ T5625] EXT4-fs (loop3): mount failed [ 83.383334][ T5637] loop5: detected capacity change from 0 to 512 [ 83.391788][ T5637] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.408627][ T5637] EXT4-fs (loop5): 1 truncate cleaned up [ 83.417079][ T5637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.433704][ T5639] loop0: detected capacity change from 0 to 512 [ 83.452345][ T5639] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.420: bad orphan inode 11862016 [ 83.464539][ T5639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.477416][ T5639] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.692101][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.749668][ T5650] sg_read: process 239 (syz.0.423) changed security contexts after opening file descriptor, this is not allowed. [ 83.999648][ T5663] netlink: 'syz.3.428': attribute type 10 has an invalid length. [ 84.008739][ T5663] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.060545][ T5656] lo speed is unknown, defaulting to 1000 [ 84.072148][ T5656] lo speed is unknown, defaulting to 1000 [ 84.154094][ T5670] bond0: (slave dummy0): Releasing backup interface [ 84.167000][ T5670] batman_adv: batadv0: Interface deactivated: macvlan0 [ 84.174036][ T5670] batman_adv: batadv0: Removing interface: macvlan0 [ 84.212540][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.271716][ T5674] loop3: detected capacity change from 0 to 2048 [ 84.385034][ T5674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.433572][ T5685] openvswitch: netlink: Message has 6 unknown bytes. [ 84.652216][ T5691] loop8: detected capacity change from 16384 to 0 [ 84.698127][ T5690] netlink: 'syz.0.437': attribute type 8 has an invalid length. [ 84.713814][ T5701] netlink: 'syz.5.440': attribute type 10 has an invalid length. [ 84.723719][ T5701] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 84.733059][ T5690] loop0: detected capacity change from 0 to 512 [ 84.751874][ T3492] udevd[3492]: symlink '../../loop5' '/dev/disk/by-diskseq/212.tmp-b7:5' failed: Read-only file system [ 84.766705][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/213.tmp-b7:0' failed: Read-only file system [ 84.780032][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 84.788189][ T5690] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 84.810779][ T5690] EXT4-fs (loop0): mount failed [ 84.857770][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 84.872959][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/213.tmp-b7:0' failed: Read-only file system [ 84.877187][ T3492] udevd[3492]: symlink '../../loop5' '/dev/disk/by-diskseq/212.tmp-b7:5' failed: Read-only file system [ 84.888918][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/213.tmp-b7:0' failed: Read-only file system [ 84.912621][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/214.tmp-b7:0' failed: Read-only file system [ 84.972361][ T3480] usb 11-1: enqueue for inactive port 0 [ 84.982440][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/212.tmp-b7:5' failed: Read-only file system [ 84.994877][ T3480] usb 11-1: enqueue for inactive port 0 [ 85.021027][ T29] kauditd_printk_skb: 837 callbacks suppressed [ 85.021041][ T29] audit: type=1326 audit(1757450709.658:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b39155ba7 code=0x7ffc0000 [ 85.070519][ T3480] vhci_hcd: vhci_device speed not set [ 85.077404][ T29] audit: type=1326 audit(1757450709.658:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b390fadb9 code=0x7ffc0000 [ 85.100801][ T29] audit: type=1326 audit(1757450709.658:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 85.124124][ T29] audit: type=1400 audit(1757450709.658:6445): avc: denied { create } for pid=5709 comm="syz.5.443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.143707][ T29] audit: type=1400 audit(1757450709.658:6446): avc: denied { setopt } for pid=5709 comm="syz.5.443" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 85.164228][ T29] audit: type=1326 audit(1757450709.688:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b39155ba7 code=0x7ffc0000 [ 85.187488][ T29] audit: type=1326 audit(1757450709.688:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b390fadb9 code=0x7ffc0000 [ 85.210727][ T29] audit: type=1326 audit(1757450709.688:6449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 85.234084][ T29] audit: type=1326 audit(1757450709.688:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3b39155ba7 code=0x7ffc0000 [ 85.257405][ T29] audit: type=1326 audit(1757450709.688:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5689 comm="syz.0.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3b390fadb9 code=0x7ffc0000 [ 85.315110][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/197.tmp-b7:4' failed: Read-only file system [ 85.337202][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.373895][ T5715] loop3: detected capacity change from 0 to 128 [ 85.442424][ T5722] smc: net device bond0 applied user defined pnetid SYZ0 [ 85.454463][ T5722] smc: net device bond0 erased user defined pnetid SYZ0 [ 85.685148][ T5738] syzkaller1: entered promiscuous mode [ 85.690773][ T5738] syzkaller1: entered allmulticast mode [ 85.807017][ T5740] loop5: detected capacity change from 0 to 512 [ 85.860680][ T5740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.880620][ T5740] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.916563][ T5740] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.455: corrupted inode contents [ 85.960409][ T5740] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #4: comm syz.5.455: mark_inode_dirty error [ 85.990778][ T5740] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.455: corrupted inode contents [ 86.010213][ T5740] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.455: mark_inode_dirty error [ 86.036632][ T5751] loop4: detected capacity change from 0 to 2048 [ 86.063470][ T5740] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.455: Failed to acquire dquot type 1 [ 86.079545][ T5751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.093564][ T5748] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.455: corrupted inode contents [ 86.129919][ T5748] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #4: comm syz.5.455: mark_inode_dirty error [ 86.160774][ T5748] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #4: comm syz.5.455: corrupted inode contents [ 86.181066][ T5748] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.455: mark_inode_dirty error [ 86.193829][ T5748] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.455: Failed to acquire dquot type 1 [ 86.242321][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.311595][ T5761] loop0: detected capacity change from 0 to 512 [ 86.326505][ T5761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.342251][ T5761] EXT4-fs (loop0): 1 truncate cleaned up [ 86.356725][ T5761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.407344][ T5761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.722601][ T5771] usb usb8: usbfs: process 5771 (syz.3.463) did not claim interface 0 before use [ 86.802131][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.156003][ T5770] netlink: 'syz.6.461': attribute type 8 has an invalid length. [ 87.176890][ T5770] loop6: detected capacity change from 0 to 512 [ 87.211452][ T5770] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.227542][ T5770] EXT4-fs (loop6): mount failed [ 87.352509][ T5761] __nla_validate_parse: 4 callbacks suppressed [ 87.352527][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 87.367840][ T5761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.459'. [ 87.482579][ T5781] netlink: 20 bytes leftover after parsing attributes in process `syz.5.466'. [ 87.492592][ T5781] netlink: 168 bytes leftover after parsing attributes in process `syz.5.466'. [ 87.501891][ T5781] C: renamed from team_slave_0 [ 87.519983][ T5781] can0: slcan on ttyS3. [ 87.562138][ T5790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.469'. [ 87.580625][ T5781] can0 (unregistered): slcan off ttyS3. [ 87.599019][ T5781] can0: slcan on ttyS3. [ 87.680764][ T5780] can0 (unregistered): slcan off ttyS3. [ 87.772434][ T5821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.782126][ T5821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.796986][ T5821] loop0: detected capacity change from 0 to 1024 [ 88.021477][ T5827] netlink: 404 bytes leftover after parsing attributes in process `syz.0.470'. [ 88.082690][ T5829] loop6: detected capacity change from 0 to 512 [ 88.090992][ T5829] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.399875][ T5829] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 88.418092][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.3.475'. [ 88.444495][ T5829] EXT4-fs (loop6): 1 truncate cleaned up [ 88.450604][ T5837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.475'. [ 88.467791][ T5829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.623112][ T5849] loop3: detected capacity change from 0 to 128 [ 88.642854][ T5849] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.677306][ T5849] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.692423][ T5849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.703152][ T5849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.918246][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.951079][ T5857] netlink: 36 bytes leftover after parsing attributes in process `syz.6.481'. [ 88.978238][ T5859] loop5: detected capacity change from 0 to 2048 [ 89.014165][ T5859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.236504][ T3317] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.288787][ T5876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.487'. [ 89.451249][ T4600] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 89.467434][ T4600] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 89.480939][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.569695][ T5884] loop3: detected capacity change from 0 to 512 [ 89.580324][ T5884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.598459][ T5884] EXT4-fs (loop3): 1 truncate cleaned up [ 89.613466][ T5884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.746671][ T5887] IPv6: sit1: Disabled Multicast RS [ 89.753164][ T5887] sit1: entered allmulticast mode [ 89.873021][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.936593][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/223.tmp-b7:4' failed: Read-only file system [ 90.043997][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/230.tmp-b7:6' failed: Read-only file system [ 90.173889][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 90.173908][ T29] audit: type=1400 audit(1757450714.738:7060): avc: denied { execute } for pid=5888 comm="syz.4.493" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=12155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 90.218198][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/234.tmp-b7:3' failed: Read-only file system [ 90.238853][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/234.tmp-b7:3' failed: Read-only file system [ 90.253411][ T29] audit: type=1400 audit(1757450714.888:7061): avc: denied { read write } for pid=5893 comm="syz.3.492" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.257023][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/235.tmp-b7:3' failed: Read-only file system [ 90.277594][ T29] audit: type=1400 audit(1757450714.888:7062): avc: denied { open } for pid=5893 comm="syz.3.492" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.317456][ T29] audit: type=1400 audit(1757450714.948:7063): avc: denied { connect } for pid=5893 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.336990][ T29] audit: type=1400 audit(1757450714.948:7064): avc: denied { name_connect } for pid=5893 comm="syz.3.492" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.362852][ T29] audit: type=1400 audit(1757450714.988:7065): avc: denied { write } for pid=5893 comm="syz.3.492" laddr=fe80::29 lport=57200 faddr=fc00::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.386830][ T29] audit: type=1400 audit(1757450714.988:7066): avc: denied { name_connect } for pid=5893 comm="syz.3.492" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 90.408563][ T29] audit: type=1400 audit(1757450714.998:7067): avc: denied { create } for pid=5893 comm="syz.3.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.450805][ T29] audit: type=1326 audit(1757450715.078:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 90.474275][ T29] audit: type=1326 audit(1757450715.078:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5893 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 90.485382][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/233.tmp-b7:5' failed: Read-only file system [ 90.528690][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/233.tmp-b7:5' failed: Read-only file system [ 90.551303][ T5900] netlink: 'syz.5.496': attribute type 46 has an invalid length. [ 90.566337][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/230.tmp-b7:6' failed: Read-only file system [ 90.633047][ T5900] netlink: 'syz.5.496': attribute type 1 has an invalid length. [ 90.642643][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/223.tmp-b7:4' failed: Read-only file system [ 90.657695][ T5904] loop6: detected capacity change from 0 to 512 [ 90.668951][ T5904] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.690107][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/236.tmp-b7:6' failed: Read-only file system [ 90.706757][ T5904] EXT4-fs (loop6): 1 truncate cleaned up [ 90.742488][ T5904] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.758590][ T5904] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.188416][ T5906] loop4: detected capacity change from 0 to 1024 [ 91.197022][ T5906] EXT4-fs: Ignoring removed nobh option [ 91.218287][ T5906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.428842][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.564081][ T5933] IPv6: sit1: Disabled Multicast RS [ 91.570611][ T5933] sit1: entered allmulticast mode [ 93.410960][ T5913] lo speed is unknown, defaulting to 1000 [ 93.425123][ T5913] lo speed is unknown, defaulting to 1000 [ 93.647846][ T5953] loop4: detected capacity change from 0 to 512 [ 93.716828][ T5954] loop0: detected capacity change from 0 to 1024 [ 94.139396][ T5960] siw: device registration error -23 [ 94.145188][ T5960] futex_wake_op: syz.6.511 tries to shift op by 144; fix this program [ 94.189172][ T5953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.241719][ T5966] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 94.304711][ T5953] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.331281][ T5954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.403585][ T5966] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 94.483378][ T5954] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.503132][ T5966] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 94.535623][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.557684][ T5970] loop4: detected capacity change from 0 to 128 [ 94.572210][ T5966] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 94.626794][ T5973] __nla_validate_parse: 7 callbacks suppressed [ 94.626812][ T5973] netlink: 36 bytes leftover after parsing attributes in process `syz.4.516'. [ 94.661894][ T787] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 94.692673][ T787] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 94.721096][ T787] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 94.738115][ T787] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 94.837790][ T5980] 9pnet_fd: Insufficient options for proto=fd [ 95.575649][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 95.575663][ T29] audit: type=1400 audit(1757450720.208:7216): avc: denied { read } for pid=5979 comm="syz.0.519" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.604978][ T29] audit: type=1400 audit(1757450720.208:7217): avc: denied { open } for pid=5979 comm="syz.0.519" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.794504][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/245.tmp-b7:4' failed: Read-only file system [ 95.947940][ T3493] udevd[3493]: symlink '../../loop0' '/dev/disk/by-diskseq/242.tmp-b7:0' failed: Read-only file system [ 95.959443][ T29] audit: type=1326 audit(1757450720.448:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 95.983208][ T29] audit: type=1326 audit(1757450720.448:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 95.996756][ T3492] udevd[3492]: symlink '../../loop3' '/dev/disk/by-diskseq/235.tmp-b7:3' failed: Read-only file system [ 96.006524][ T29] audit: type=1326 audit(1757450720.448:7220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 96.041012][ T29] audit: type=1326 audit(1757450720.448:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 96.048270][ T5994] IPv6: sit1: Disabled Multicast RS [ 96.064566][ T29] audit: type=1326 audit(1757450720.448:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 96.070711][ T5994] sit1: entered allmulticast mode [ 96.093183][ T29] audit: type=1326 audit(1757450720.448:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 96.121503][ T29] audit: type=1326 audit(1757450720.458:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 96.144819][ T29] audit: type=1326 audit(1757450720.458:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5991 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 96.170781][ T5996] loop4: detected capacity change from 0 to 1024 [ 96.189385][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/246.tmp-b7:4' failed: Read-only file system [ 96.202316][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 96.214265][ T5996] EXT4-fs: Ignoring removed orlov option [ 96.219937][ T5996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.246278][ T5996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.273420][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/235.tmp-b7:3' failed: Read-only file system [ 96.507997][ T5996] Illegal XDP return value 53 on prog (id 576) dev N/A, expect packet loss! [ 96.539610][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.762349][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/237.tmp-b7:6' failed: Read-only file system [ 96.909568][ T3492] udevd[3492]: symlink '../../loop0' '/dev/disk/by-diskseq/242.tmp-b7:0' failed: Read-only file system [ 96.939461][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 97.039606][ T3492] udevd[3492]: symlink '../../loop5' '/dev/disk/by-diskseq/233.tmp-b7:5' failed: Read-only file system [ 97.052794][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/246.tmp-b7:4' failed: Read-only file system [ 97.082395][ T6015] loop7: detected capacity change from 0 to 16384 [ 97.113329][ T6020] loop0: detected capacity change from 0 to 512 [ 97.160537][ T6019] loop7: detected capacity change from 16384 to 0 [ 97.207625][ T6020] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.525: error while reading EA inode 32 err=-116 [ 97.343524][ T6020] EXT4-fs (loop0): Remounting filesystem read-only [ 97.350106][ T6020] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 97.367951][ T6020] EXT4-fs (loop0): 1 orphan inode deleted [ 97.383555][ T6020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.422881][ T6029] netlink: 36 bytes leftover after parsing attributes in process `syz.5.530'. [ 97.474212][ T6020] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.800091][ T6036] lo speed is unknown, defaulting to 1000 [ 97.806527][ T6036] lo speed is unknown, defaulting to 1000 [ 97.967598][ T6038] can0: slcan on ttyS3. [ 98.080321][ T6042] loop5: detected capacity change from 0 to 128 [ 98.110493][ T6033] can0 (unregistered): slcan off ttyS3. [ 98.408352][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.5.549'. [ 98.528660][ T6087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.540'. [ 98.594074][ T6087] loop4: detected capacity change from 0 to 512 [ 98.605811][ T6089] loop5: detected capacity change from 0 to 512 [ 98.630975][ T6089] EXT4-fs: Ignoring removed nobh option [ 98.678788][ T6087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.715710][ T6089] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.541: corrupted inode contents [ 98.762516][ T6102] netlink: 36 bytes leftover after parsing attributes in process `syz.0.543'. [ 98.777015][ T6087] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.540: corrupted inode contents [ 98.824811][ T6089] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.541: mark_inode_dirty error [ 98.856571][ T6087] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.540: mark_inode_dirty error [ 98.869061][ T6087] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.540: corrupted inode contents [ 98.891838][ T6089] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.541: corrupted inode contents [ 98.913407][ T6087] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.540: mark_inode_dirty error [ 98.936271][ T6089] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.541: mark_inode_dirty error [ 98.956918][ T6089] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.541: Failed to acquire dquot type 0 [ 98.970226][ T6087] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.540: Failed to acquire dquot type 1 [ 98.971907][ T6104] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.540: corrupted inode contents [ 98.972713][ T6104] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.540: mark_inode_dirty error [ 98.991318][ T6089] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.541: corrupted inode contents [ 99.003910][ T6104] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.540: corrupted inode contents [ 99.016009][ T6089] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.541: mark_inode_dirty error [ 99.039712][ T6104] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.540: mark_inode_dirty error [ 99.059477][ T6104] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.540: Failed to acquire dquot type 1 [ 99.080669][ T6089] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.541: corrupted inode contents [ 99.108483][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.119481][ T6089] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.541: mark_inode_dirty error [ 99.147030][ T6089] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.541: corrupted inode contents [ 99.180192][ T6089] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 99.196520][ T6089] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.541: corrupted inode contents [ 99.219918][ T6112] 9pnet_fd: Insufficient options for proto=fd [ 99.246558][ T6089] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.541: mark_inode_dirty error [ 99.261757][ T6089] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 99.285992][ T6089] EXT4-fs (loop5): 1 truncate cleaned up [ 99.299662][ T6089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.407931][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.690158][ T6134] netlink: 36 bytes leftover after parsing attributes in process `syz.5.553'. [ 99.945591][ T6136] loop3: detected capacity change from 0 to 1024 [ 100.191218][ T6136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.205766][ T6143] support for cryptoloop has been removed. Use dm-crypt instead. [ 100.222028][ T6143] loop6: detected capacity change from 0 to 764 [ 100.286956][ T6143] Symlink component flag not implemented [ 100.292673][ T6143] Symlink component flag not implemented [ 100.340468][ T6143] Symlink component flag not implemented (128) [ 100.346667][ T6143] Symlink component flag not implemented (122) [ 100.588479][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 100.588493][ T29] audit: type=1326 audit(100.560:8026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 100.706052][ T6158] netlink: 32 bytes leftover after parsing attributes in process `syz.6.559'. [ 100.727040][ T6135] lo speed is unknown, defaulting to 1000 [ 100.804013][ T5279] IPVS: starting estimator thread 0... [ 100.813774][ T3493] udevd[3493]: symlink '../../loop5' '/dev/disk/by-diskseq/256.tmp-b7:5' failed: Read-only file system [ 100.847702][ T6158] loop6: detected capacity change from 0 to 512 [ 100.854361][ T29] audit: type=1326 audit(100.610:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 100.877322][ T29] audit: type=1326 audit(100.610:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 100.900087][ T29] audit: type=1326 audit(100.610:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 100.902172][ T6135] lo speed is unknown, defaulting to 1000 [ 100.922900][ T29] audit: type=1326 audit(100.610:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 100.951346][ T29] audit: type=1326 audit(100.610:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 100.974068][ T29] audit: type=1326 audit(100.610:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 100.996879][ T29] audit: type=1326 audit(100.610:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 101.019692][ T29] audit: type=1326 audit(100.620:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 101.020465][ T6160] IPVS: using max 2448 ests per chain, 122400 per kthread [ 101.042454][ T29] audit: type=1326 audit(100.620:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6157 comm="syz.6.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 101.093510][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/260.tmp-b7:6' failed: Read-only file system [ 101.108402][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 101.148765][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/260.tmp-b7:6' failed: Read-only file system [ 101.161999][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 101.182563][ T6158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.249637][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/250.tmp-b7:0' failed: Read-only file system [ 101.260782][ T6158] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.559: corrupted inode contents [ 101.297890][ T6166] netlink: 'syz.5.572': attribute type 10 has an invalid length. [ 101.344726][ T6158] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #4: comm syz.6.559: mark_inode_dirty error [ 101.349376][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/256.tmp-b7:5' failed: Read-only file system [ 101.389329][ T6158] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.559: corrupted inode contents [ 101.403500][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.404996][ T6158] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #4: comm syz.6.559: mark_inode_dirty error [ 101.425911][ T6158] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.559: Failed to acquire dquot type 1 [ 101.437796][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.559: corrupted inode contents [ 101.462456][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 101.490423][ T6159] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #4: comm syz.6.559: mark_inode_dirty error [ 101.502808][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/257.tmp-b7:3' failed: Read-only file system [ 101.517685][ T6178] netlink: 14 bytes leftover after parsing attributes in process `syz.3.564'. [ 101.528878][ T3492] udevd[3492]: symlink '../../loop5' '/dev/disk/by-diskseq/256.tmp-b7:5' failed: Read-only file system [ 101.542032][ T6159] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #4: comm syz.6.559: corrupted inode contents [ 101.564015][ T6159] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #4: comm syz.6.559: mark_inode_dirty error [ 101.575339][ T6178] hsr_slave_0: left promiscuous mode [ 101.585778][ T6178] hsr_slave_1: left promiscuous mode [ 101.595807][ T6159] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.559: Failed to acquire dquot type 1 [ 101.628579][ T6182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.564'. [ 101.663051][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.914273][ T6189] serio: Serial port ptm0 [ 101.927962][ T6180] loop5: detected capacity change from 0 to 764 [ 101.948953][ T6180] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 102.075677][ T6198] loop4: detected capacity change from 0 to 128 [ 103.022078][ T6207] lo speed is unknown, defaulting to 1000 [ 103.028365][ T6207] lo speed is unknown, defaulting to 1000 [ 103.457063][ T6215] netlink: 'syz.5.577': attribute type 4 has an invalid length. [ 103.541940][ T6218] loop4: detected capacity change from 0 to 256 [ 103.582137][ T6219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.580'. [ 103.632422][ T5274] IPVS: starting estimator thread 0... [ 103.661346][ T6219] loop0: detected capacity change from 0 to 512 [ 103.725968][ T6219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.738610][ T6221] IPVS: using max 1968 ests per chain, 98400 per kthread [ 103.809465][ T6219] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.580: corrupted inode contents [ 103.898258][ T6219] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.580: mark_inode_dirty error [ 103.917296][ T6231] netlink: 132 bytes leftover after parsing attributes in process `syz.6.584'. [ 103.940844][ T6219] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.580: corrupted inode contents [ 103.954272][ T6219] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.580: mark_inode_dirty error [ 103.954467][ T6219] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.580: Failed to acquire dquot type 1 [ 103.954884][ T6237] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.580: corrupted inode contents [ 103.954982][ T6237] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.580: mark_inode_dirty error [ 103.955132][ T6237] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.580: corrupted inode contents [ 103.955358][ T6237] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.580: mark_inode_dirty error [ 103.955532][ T6237] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.580: Failed to acquire dquot type 1 [ 104.039990][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.356794][ T6214] lo speed is unknown, defaulting to 1000 [ 104.363157][ T6214] lo speed is unknown, defaulting to 1000 [ 104.447168][ T6257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.592'. [ 104.633056][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.6.593'. [ 104.971305][ T6277] loop3: detected capacity change from 0 to 1764 [ 104.978624][ T6277] iso9660: Bad value for 'uid' [ 104.983452][ T6277] iso9660: Bad value for 'uid' [ 105.199247][ T6268] lo speed is unknown, defaulting to 1000 [ 105.271890][ T6268] lo speed is unknown, defaulting to 1000 [ 105.283924][ T6278] loop6: detected capacity change from 0 to 1024 [ 105.317059][ T6282] support for cryptoloop has been removed. Use dm-crypt instead. [ 105.366959][ T6282] loop0: detected capacity change from 0 to 764 [ 105.382261][ T6282] Symlink component flag not implemented [ 105.387938][ T6282] Symlink component flag not implemented [ 105.393674][ T6282] Symlink component flag not implemented (128) [ 105.399876][ T6282] Symlink component flag not implemented (122) [ 105.417231][ T6278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.632442][ T6269] lo speed is unknown, defaulting to 1000 [ 105.716388][ T6274] lo speed is unknown, defaulting to 1000 [ 105.722461][ T6274] lo speed is unknown, defaulting to 1000 [ 106.767251][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 106.767305][ T29] audit: type=1400 audit(106.420:8516): avc: denied { bind } for pid=6292 comm="syz.5.603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 106.815896][ T6269] lo speed is unknown, defaulting to 1000 [ 107.484034][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/275.tmp-b7:0' failed: Read-only file system [ 107.760581][ T6300] lo speed is unknown, defaulting to 1000 [ 107.766629][ T6300] lo speed is unknown, defaulting to 1000 [ 107.773314][ T29] audit: type=1326 audit(106.790:8517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 107.796155][ T29] audit: type=1326 audit(106.790:8518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 107.818936][ T29] audit: type=1326 audit(106.790:8519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 107.841619][ T29] audit: type=1326 audit(107.050:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 107.864370][ T29] audit: type=1326 audit(107.050:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f72beb314a5 code=0x7ffc0000 [ 107.887136][ T29] audit: type=1326 audit(107.050:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 107.910002][ T29] audit: type=1326 audit(107.100:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 107.932736][ T29] audit: type=1326 audit(107.100:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72beafebe9 code=0x7ffc0000 [ 107.955470][ T29] audit: type=1326 audit(107.100:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6301 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72bea9adb9 code=0x7ffc0000 [ 108.108283][ T6294] lo speed is unknown, defaulting to 1000 [ 108.114503][ T6294] lo speed is unknown, defaulting to 1000 [ 108.213325][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/272.tmp-b7:3' failed: Read-only file system [ 108.275638][ T3492] udevd[3492]: symlink '../../loop4' '/dev/disk/by-diskseq/269.tmp-b7:4' failed: Read-only file system [ 108.297363][ T3493] udevd[3493]: symlink '../../loop5' '/dev/disk/by-diskseq/264.tmp-b7:5' failed: Read-only file system [ 108.311552][ T6318] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 108.311552][ T6318] program syz.5.609 not setting count and/or reply_len properly [ 108.333627][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/272.tmp-b7:3' failed: Read-only file system [ 108.438096][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/275.tmp-b7:0' failed: Read-only file system [ 108.468232][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/269.tmp-b7:4' failed: Read-only file system [ 108.483050][ T6278] lo speed is unknown, defaulting to 1000 [ 108.483638][ T6325] netlink: 36 bytes leftover after parsing attributes in process `syz.4.611'. [ 108.489374][ T6278] lo speed is unknown, defaulting to 1000 [ 108.540901][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/264.tmp-b7:5' failed: Read-only file system [ 108.575799][ T6327] netlink: 'syz.5.612': attribute type 10 has an invalid length. [ 108.591737][ T3492] udevd[3492]: symlink '../../loop0' '/dev/disk/by-diskseq/275.tmp-b7:0' failed: Read-only file system [ 108.601509][ T6320] netlink: 24 bytes leftover after parsing attributes in process `syz.3.608'. [ 108.659650][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/264.tmp-b7:5' failed: Read-only file system [ 108.733278][ T6334] random: crng reseeded on system resumption [ 108.787168][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.888907][ T6338] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 108.895464][ T6338] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.903165][ T6338] vhci_hcd vhci_hcd.0: Device attached [ 108.937740][ T6343] vhci_hcd: unknown pdu 2 [ 108.955106][ T6346] loop3: detected capacity change from 0 to 512 [ 108.968334][ T3869] vhci_hcd: stop threads [ 108.972675][ T3869] vhci_hcd: release socket [ 108.977112][ T3869] vhci_hcd: disconnect device [ 108.982464][ T6346] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 109.018843][ T6346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102] [ 109.052067][ T6346] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.617: corrupted in-inode xattr: e_value size too large [ 109.075935][ T6346] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.617: couldn't read orphan inode 15 (err -117) [ 109.102334][ T6346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.156723][ T6352] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 109.929653][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.053469][ T6375] netlink: 5 bytes leftover after parsing attributes in process `syz.4.619'. [ 110.053594][ T6375] 0XD: renamed from gretap0 [ 110.055075][ T6375] 0XD: entered allmulticast mode [ 110.071017][ T6375] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 110.079122][ T6374] loop5: detected capacity change from 0 to 1024 [ 110.079515][ T6374] EXT4-fs: Ignoring removed oldalloc option [ 110.079647][ T6374] EXT4-fs: Ignoring removed orlov option [ 110.211792][ T6374] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 110.231167][ T6374] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.256771][ T6374] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.623: Allocating blocks 497-513 which overlap fs metadata [ 110.366391][ T6379] netlink: 'syz.6.624': attribute type 10 has an invalid length. [ 110.436733][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.459610][ T6379] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.541426][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.626'. [ 110.552083][ T6388] netlink: 'syz.5.625': attribute type 10 has an invalid length. [ 110.598778][ T6393] syzkaller1: entered promiscuous mode [ 110.604469][ T6393] syzkaller1: entered allmulticast mode [ 110.688155][ T6397] loop6: detected capacity change from 0 to 128 [ 110.794093][ T6403] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.816588][ T6402] vlan0: entered allmulticast mode [ 110.827299][ T6403] loop6: detected capacity change from 0 to 256 [ 110.833966][ T6402] dummy0: entered allmulticast mode [ 110.983761][ T6409] futex_wake_op: syz.5.628 tries to shift op by 144; fix this program [ 111.074601][ T6404] loop4: detected capacity change from 0 to 2048 [ 111.132596][ T6408] tipc: Cannot configure node identity twice [ 111.233474][ T6404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback. [ 111.362292][ T6421] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 111.371645][ T6404] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:169: inode #12: comm syz.4.632: inline data xattr refers to an external xattr inode [ 111.422674][ T6425] netlink: 'syz.3.636': attribute type 5 has an invalid length. [ 111.463219][ T6404] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 111.478876][ T6404] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1558 with error 28 [ 111.491447][ T6404] EXT4-fs (loop4): This should not happen!! Data will be lost [ 111.491447][ T6404] [ 111.501187][ T6404] EXT4-fs (loop4): Total free blocks count 0 [ 111.507235][ T6404] EXT4-fs (loop4): Free/Dirty block details [ 111.513179][ T6404] EXT4-fs (loop4): free_blocks=2415919104 [ 111.519001][ T6404] EXT4-fs (loop4): dirty_blocks=1568 [ 111.524364][ T6404] EXT4-fs (loop4): Block reservation details [ 111.530413][ T6404] EXT4-fs (loop4): i_reserved_data_blocks=98 [ 111.763339][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 111.829098][ T6435] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 111.862340][ T6437] IPVS: Error connecting to the multicast addr [ 111.870569][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 111.870583][ T29] audit: type=1400 audit(111.850:9004): avc: denied { connect } for pid=6436 comm="syz.4.640" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.901081][ T29] audit: type=1400 audit(111.870:9005): avc: denied { write } for pid=6436 comm="syz.4.640" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.933721][ T6437] loop4: detected capacity change from 0 to 2048 [ 112.024082][ T3491] loop4: unable to read partition table [ 112.029849][ T3491] loop4: partition table beyond EOD, truncated [ 112.054811][ T6439] loop0: detected capacity change from 0 to 128 [ 112.096805][ T6437] loop4: unable to read partition table [ 112.114727][ T6437] loop4: partition table beyond EOD, truncated [ 112.121009][ T6437] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 112.275449][ T29] audit: type=1326 audit(112.250:9006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6443 comm="syz.3.643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72beafebe9 code=0x0 [ 112.384339][ T6452] usb usb8: usbfs: process 6452 (syz.0.642) did not claim interface 0 before use [ 112.538300][ T6452] lo speed is unknown, defaulting to 1000 [ 112.545283][ T6452] lo speed is unknown, defaulting to 1000 [ 112.714249][ T3492] udevd[3492]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 112.733433][ T29] audit: type=1326 audit(112.250:9007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 112.737861][ T3493] udevd[3493]: symlink '../../loop6' '/dev/disk/by-diskseq/286.tmp-b7:6' failed: Read-only file system [ 112.756385][ T29] audit: type=1326 audit(112.250:9008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 112.790528][ T29] audit: type=1326 audit(112.250:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 112.813306][ T29] audit: type=1326 audit(112.250:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f03df3cd550 code=0x7ffc0000 [ 112.836087][ T29] audit: type=1326 audit(112.250:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 112.858875][ T29] audit: type=1326 audit(112.250:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 112.881594][ T29] audit: type=1326 audit(112.250:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6446 comm="syz.4.645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 112.952419][ T6458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.648'. [ 112.963177][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/291.tmp-b7:4' failed: Read-only file system [ 113.028912][ T6460] netlink: 'syz.6.649': attribute type 1 has an invalid length. [ 113.042248][ T3492] udevd[3492]: symlink '../../loop6' '/dev/disk/by-diskseq/286.tmp-b7:6' failed: Read-only file system [ 113.063032][ T6458] loop4: detected capacity change from 0 to 512 [ 113.068784][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/290.tmp-b7:0' failed: Read-only file system [ 113.087951][ T3492] udevd[3492]: symlink '../../loop4' '/dev/disk/by-diskseq/292.tmp-b7:4' failed: Read-only file system [ 113.094389][ T6460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.102375][ T6458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.119415][ T3492] udevd[3492]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 113.119992][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.649'. [ 113.136971][ T6458] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.648: corrupted inode contents [ 113.151801][ T6458] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.648: mark_inode_dirty error [ 113.163400][ T6458] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.648: corrupted inode contents [ 113.165392][ T6467] bond2 (unregistering): Released all slaves [ 113.175859][ T6458] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.648: mark_inode_dirty error [ 113.193043][ T6458] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.648: Failed to acquire dquot type 1 [ 113.213514][ T6462] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 113.230676][ T6469] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.648: corrupted inode contents [ 113.242735][ T6469] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #4: comm syz.4.648: mark_inode_dirty error [ 113.279244][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/290.tmp-b7:0' failed: Read-only file system [ 113.296688][ T6469] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #4: comm syz.4.648: corrupted inode contents [ 113.320461][ T6469] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #4: comm syz.4.648: mark_inode_dirty error [ 113.338162][ T6471] 9pnet_fd: Insufficient options for proto=fd [ 113.344606][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/286.tmp-b7:6' failed: Read-only file system [ 113.355540][ T6474] loop6: detected capacity change from 0 to 128 [ 113.364292][ T3492] udevd[3492]: symlink '../../loop3' '/dev/disk/by-diskseq/278.tmp-b7:3' failed: Read-only file system [ 113.380285][ T6474] msdos: Unknown parameter '0x00000000000000030x0000000000000000' [ 113.389573][ T6469] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.648: Failed to acquire dquot type 1 [ 113.470717][ T6474] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.652'. [ 113.482217][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.532658][ T6483] netlink: 'syz.6.656': attribute type 13 has an invalid length. [ 113.541686][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.654'. [ 113.853525][ T3869] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.903743][ T3869] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.017483][ T3869] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.128766][ T3869] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.452595][ T6496] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 114.578569][ T6502] SELinux: failed to load policy [ 114.645334][ T6506] loop0: detected capacity change from 0 to 512 [ 114.663138][ T6504] netlink: 'syz.4.662': attribute type 10 has an invalid length. [ 114.674425][ T6508] loop5: detected capacity change from 0 to 512 [ 114.756598][ T6508] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.671: bad orphan inode 17 [ 114.772855][ T6508] ext4_test_bit(bit=16, block=4) = 1 [ 114.778175][ T6508] is_bad_inode(inode)=0 [ 114.782379][ T6508] NEXT_ORPHAN(inode)=0 [ 114.786523][ T6508] max_ino=32 [ 114.789721][ T6508] i_nlink=1 [ 114.795483][ T6508] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.960497][ T6511] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 115.153950][ T6514] loop4: detected capacity change from 0 to 128 [ 115.165946][ T6514] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.189327][ T6514] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.296704][ T37] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.297271][ T6515] lo speed is unknown, defaulting to 1000 [ 115.330196][ T6515] lo speed is unknown, defaulting to 1000 [ 115.448774][ T6518] lo speed is unknown, defaulting to 1000 [ 115.455958][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.471944][ T6518] lo speed is unknown, defaulting to 1000 [ 115.695459][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.6.669'. [ 115.707081][ T6537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.114069][ T6540] netlink: 36 bytes leftover after parsing attributes in process `syz.5.673'. [ 116.158035][ T6542] netlink: 'syz.4.674': attribute type 10 has an invalid length. [ 116.230778][ T6544] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6544 comm=syz.3.675 [ 116.564585][ T6557] loop4: detected capacity change from 0 to 512 [ 116.648938][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.669154][ T6557] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.676: bg 0: block 328: padding at end of block bitmap is not set [ 116.928067][ T6563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.679'. [ 117.043092][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.679'. [ 117.267440][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 117.267457][ T29] audit: type=1400 audit(117.240:9441): avc: denied { create } for pid=6564 comm="syz.5.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 117.457159][ T29] audit: type=1400 audit(117.280:9442): avc: denied { ioctl } for pid=6562 comm="syz.3.679" path="socket:[16435]" dev="sockfs" ino=16435 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 117.974770][ T29] audit: type=1326 audit(117.930:9443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 117.997631][ T29] audit: type=1326 audit(117.930:9444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 118.020477][ T29] audit: type=1326 audit(117.930:9445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0803870b07 code=0x7ffc0000 [ 118.043259][ T29] audit: type=1326 audit(117.930:9446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0803870a7c code=0x7ffc0000 [ 118.065924][ T29] audit: type=1326 audit(117.930:9447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08038709b4 code=0x7ffc0000 [ 118.088604][ T29] audit: type=1326 audit(117.930:9448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f08038709b4 code=0x7ffc0000 [ 118.111232][ T29] audit: type=1326 audit(117.930:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f080386d84a code=0x7ffc0000 [ 118.133785][ T29] audit: type=1326 audit(117.940:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.6.681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 118.233820][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/278.tmp-b7:3' failed: Read-only file system [ 118.309628][ T3492] udevd[3492]: symlink '../../loop5' '/dev/disk/by-diskseq/301.tmp-b7:5' failed: Read-only file system [ 118.332102][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/294.tmp-b7:6' failed: Read-only file system [ 118.432124][ T6576] netlink: 'syz.5.684': attribute type 10 has an invalid length. [ 118.495082][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/301.tmp-b7:5' failed: Read-only file system [ 118.561402][ T3492] udevd[3492]: symlink '../../loop0' '/dev/disk/by-diskseq/298.tmp-b7:0' failed: Read-only file system [ 118.590033][ T3493] udevd[3493]: symlink '../../loop6' '/dev/disk/by-diskseq/294.tmp-b7:6' failed: Read-only file system [ 118.608897][ T6584] loop5: detected capacity change from 0 to 2048 [ 118.639186][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/303.tmp-b7:5' failed: Read-only file system [ 118.653272][ T6584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.659770][ T6583] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 118.666996][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 118.715043][ T3492] udevd[3492]: symlink '../../loop6' '/dev/disk/by-diskseq/294.tmp-b7:6' failed: Read-only file system [ 118.737727][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/303.tmp-b7:5' failed: Read-only file system [ 119.238096][ T6601] lo speed is unknown, defaulting to 1000 [ 119.244875][ T6601] lo speed is unknown, defaulting to 1000 [ 119.426026][ T4600] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 119.442254][ T4600] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 119.489188][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.567770][ T6606] loop3: detected capacity change from 0 to 8192 [ 119.602753][ T6606] netlink: 'syz.3.692': attribute type 10 has an invalid length. [ 119.610640][ T6606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.692'. [ 119.622904][ T6606] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 119.845189][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.6.693'. [ 119.864544][ T6615] loop0: detected capacity change from 0 to 512 [ 119.890161][ T6619] loop6: detected capacity change from 0 to 736 [ 119.911638][ T6615] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.952983][ T6619] rock: directory entry would overflow storage [ 119.959165][ T6619] rock: sig=0x3b10, size=4, remaining=3 [ 119.976304][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.066080][ T6619] netlink: 'syz.6.693': attribute type 27 has an invalid length. [ 120.090810][ T6619] 0{X: left allmulticast mode [ 120.101466][ T6619] sit1: left allmulticast mode [ 120.106514][ T6619] bond1: left allmulticast mode [ 120.111681][ T6619] geneve2: left allmulticast mode [ 120.210867][ T6619] syz_tun: entered allmulticast mode [ 120.244988][ T6618] syz_tun: left allmulticast mode [ 120.375676][ T6635] netlink: 'syz.6.700': attribute type 10 has an invalid length. [ 120.457169][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.701'. [ 120.466195][ T6637] IPVS: Error joining to the multicast group [ 120.626678][ T6642] netlink: 36 bytes leftover after parsing attributes in process `syz.6.703'. [ 120.656168][ T6617] loop3: detected capacity change from 0 to 764 [ 120.691009][ T6617] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 121.194946][ T3305] block device autoloading is deprecated and will be removed. [ 121.220398][ T6660] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 121.226967][ T6660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.234511][ T6660] vhci_hcd vhci_hcd.0: Device attached [ 121.264653][ T6660] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 121.271285][ T6660] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.278855][ T6660] vhci_hcd vhci_hcd.0: Device attached [ 121.435534][ T6664] loop0: detected capacity change from 0 to 8192 [ 121.564429][ T6672] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.593102][ T6667] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 121.593369][ T6660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.599744][ T6667] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 121.615425][ T6667] vhci_hcd vhci_hcd.0: Device attached [ 121.622435][ T6664] netlink: 'syz.0.706': attribute type 10 has an invalid length. [ 121.630240][ T6664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.706'. [ 121.660769][ T6664] batman_adv: batadv0: Adding interface: macvlan0 [ 121.667231][ T6664] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.692973][ T6670] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 121.693051][ T6660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.707724][ T6670] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.715336][ T6670] vhci_hcd vhci_hcd.0: Device attached [ 121.721264][ T6664] batman_adv: batadv0: Interface activated: macvlan0 [ 121.730228][ T6660] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(24) [ 121.736868][ T6660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.744568][ T6660] vhci_hcd vhci_hcd.0: Device attached [ 121.744981][ T6679] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 121.799097][ T6668] vhci_hcd: connection closed [ 121.799463][ T6661] vhci_hcd: connection closed [ 121.804329][ T6673] vhci_hcd: connection closed [ 121.805902][ T787] vhci_hcd: stop threads [ 121.809030][ T6680] vhci_hcd: connection closed [ 121.813719][ T787] vhci_hcd: release socket [ 121.822686][ T6678] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.709'. [ 121.830452][ T6665] vhci_hcd: connection closed [ 121.836266][ T787] vhci_hcd: disconnect device [ 121.856019][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.874954][ T6678] netlink: 14 bytes leftover after parsing attributes in process `syz.6.709'. [ 121.885816][ T787] vhci_hcd: stop threads [ 121.890081][ T787] vhci_hcd: release socket [ 121.894539][ T787] vhci_hcd: disconnect device [ 121.938986][ T787] vhci_hcd: stop threads [ 121.943362][ T787] vhci_hcd: release socket [ 121.947804][ T787] vhci_hcd: disconnect device [ 121.993102][ T787] vhci_hcd: stop threads [ 121.997389][ T787] vhci_hcd: release socket [ 122.001889][ T787] vhci_hcd: disconnect device [ 122.006990][ T6678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.039214][ T787] vhci_hcd: stop threads [ 122.043517][ T787] vhci_hcd: release socket [ 122.047936][ T787] vhci_hcd: disconnect device [ 122.083444][ T6678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.093375][ T6690] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 122.104206][ T6678] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 122.122355][ T6678] bond0 (unregistering): Released all slaves [ 122.278002][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 122.278018][ T29] audit: type=1326 audit(122.250:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 122.320742][ T6671] Set syz1 is full, maxelem 65536 reached [ 122.332687][ T6692] netlink: 32 bytes leftover after parsing attributes in process `syz.0.712'. [ 122.346656][ T6692] loop0: detected capacity change from 0 to 512 [ 122.356296][ T29] audit: type=1326 audit(122.290:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.6.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 122.379159][ T29] audit: type=1326 audit(122.290:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6677 comm="syz.6.709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f080386ebe9 code=0x7ffc0000 [ 122.402419][ T29] audit: type=1326 audit(122.300:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 122.422896][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.6.714'. [ 122.425194][ T29] audit: type=1326 audit(122.300:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6693 comm="syz.4.713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03df3cebe9 code=0x7ffc0000 [ 122.457039][ T29] audit: type=1326 audit(122.300:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 122.480255][ T29] audit: type=1326 audit(122.300:9778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 122.503143][ T29] audit: type=1326 audit(122.300:9779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 122.525976][ T29] audit: type=1326 audit(122.300:9780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 122.536801][ T6699] loop9: detected capacity change from 0 to 7 [ 122.548729][ T29] audit: type=1326 audit(122.300:9781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.0.712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3915ebe9 code=0x7ffc0000 [ 122.578575][ T6699] buffer_io_error: 31158 callbacks suppressed [ 122.578588][ T6699] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.591936][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 122.606428][ T6703] loop5: detected capacity change from 0 to 128 [ 122.622150][ T6699] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.630046][ T6699] loop9: unable to read partition table [ 122.642010][ T6699] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 122.642010][ T6699] ) failed (rc=-5) [ 122.664738][ T3491] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.680589][ T3491] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.709202][ T6705] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6705 comm=syz.3.715 [ 122.723241][ T3491] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.735295][ T3491] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.775671][ T3491] Buffer I/O error on dev loop9, logical block 0, async page read [ 122.791656][ T6709] sd 0:0:1:0: device reset [ 122.830125][ T6692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.846190][ T6692] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.712: corrupted inode contents [ 122.859925][ T6692] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.712: mark_inode_dirty error [ 122.876206][ T6692] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.712: corrupted inode contents [ 122.901351][ T6692] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.712: mark_inode_dirty error [ 122.913531][ T6692] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.712: Failed to acquire dquot type 1 [ 122.929982][ T6718] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.712: corrupted inode contents [ 122.944913][ T6714] loop5: detected capacity change from 0 to 512 [ 122.952081][ T6718] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #4: comm syz.0.712: mark_inode_dirty error [ 122.966112][ T6718] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #4: comm syz.0.712: corrupted inode contents [ 122.969074][ T6714] msdos: Unknown parameter '' [ 122.980763][ T6718] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.712: mark_inode_dirty error [ 123.005514][ T6718] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.712: Failed to acquire dquot type 1 [ 123.044920][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.104453][ T6701] loop6: detected capacity change from 0 to 764 [ 123.122647][ T6701] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 123.295945][ T6726] netlink: 'syz.5.723': attribute type 10 has an invalid length. [ 123.330801][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/323.tmp-b7:5' failed: Read-only file system [ 123.362642][ T3492] udevd[3492]: symlink '../../loop0' '/dev/disk/by-diskseq/324.tmp-b7:0' failed: Read-only file system [ 123.412760][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/312.tmp-b7:3' failed: Read-only file system [ 123.552744][ T3492] udevd[3492]: symlink '../../loop0' '/dev/disk/by-diskseq/324.tmp-b7:0' failed: Read-only file system [ 123.789100][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/316.tmp-b7:4' failed: Read-only file system [ 123.816499][ T6740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.347407][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/324.tmp-b7:0' failed: Read-only file system [ 124.528578][ T6753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6753 comm=syz.0.730 [ 124.655370][ T3491] udevd[3491]: symlink '../../loop4' '/dev/disk/by-diskseq/316.tmp-b7:4' failed: Read-only file system [ 124.836693][ T6757] : renamed from wg2 [ 124.855069][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/326.tmp-b7:6' failed: Read-only file system [ 124.952515][ T6738] Set syz1 is full, maxelem 65536 reached [ 124.973901][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/312.tmp-b7:3' failed: Read-only file system [ 125.017890][ T3492] udevd[3492]: symlink '../../loop4' '/dev/disk/by-diskseq/316.tmp-b7:4' failed: Read-only file system [ 125.121465][ T6765] netlink: 'syz.4.736': attribute type 10 has an invalid length. [ 125.347579][ T6766] loop0: detected capacity change from 0 to 764 [ 125.476965][ T6766] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 125.538008][ T6779] __nla_validate_parse: 1 callbacks suppressed [ 125.538025][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.6.740'. [ 126.071673][ T6786] 9pnet_fd: Insufficient options for proto=fd [ 126.269719][ T6791] netlink: 'syz.5.743': attribute type 1 has an invalid length. [ 126.284931][ T6799] loop6: detected capacity change from 0 to 512 [ 126.318024][ T6799] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.746: casefold flag without casefold feature [ 126.335990][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 126.346194][ T6805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.748'. [ 126.386774][ T6799] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.746: couldn't read orphan inode 15 (err -117) [ 126.399567][ T6799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.452614][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.557203][ T6814] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 126.647989][ T6820] loop6: detected capacity change from 0 to 764 [ 126.681115][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.753'. [ 126.713821][ T6817] lo speed is unknown, defaulting to 1000 [ 126.720511][ T6817] lo speed is unknown, defaulting to 1000 [ 126.792433][ T6825] smc: net device bond0 applied user defined pnetid SYZ0 [ 126.880423][ T6821] lo speed is unknown, defaulting to 1000 [ 126.900680][ T6821] lo speed is unknown, defaulting to 1000 [ 126.990794][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.755'. [ 126.999990][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.5.755'. [ 127.016725][ T6830] loop5: detected capacity change from 0 to 1024 [ 127.025064][ T6828] loop0: detected capacity change from 0 to 2048 [ 127.045332][ T6828] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.061697][ T6830] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.094569][ T6830] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 127.107078][ T6830] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.107078][ T6830] [ 127.116923][ T6830] EXT4-fs (loop5): Total free blocks count 0 [ 127.123261][ T6830] EXT4-fs (loop5): Free/Dirty block details [ 127.129360][ T6830] EXT4-fs (loop5): free_blocks=0 [ 127.134552][ T6830] EXT4-fs (loop5): dirty_blocks=0 [ 127.139758][ T6830] EXT4-fs (loop5): Block reservation details [ 127.146048][ T6830] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 127.314878][ T4600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.331508][ T6841] SELinux: failed to load policy [ 127.344761][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.757'. [ 127.369151][ T6841] macsec1: entered allmulticast mode [ 127.374687][ T6841] bridge0: entered allmulticast mode [ 127.380719][ T6841] bridge0: port 1(macsec1) entered blocking state [ 127.387403][ T6841] bridge0: port 1(macsec1) entered disabled state [ 127.396284][ T6841] bridge0: left allmulticast mode [ 127.422524][ T29] kauditd_printk_skb: 885 callbacks suppressed [ 127.422537][ T29] audit: type=1326 audit(127.306:10662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a82ebe9 code=0x7ffc0000 [ 127.455201][ T29] audit: type=1326 audit(127.315:10663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a82ebe9 code=0x7ffc0000 [ 127.502040][ T6846] netlink: 36 bytes leftover after parsing attributes in process `syz.3.759'. [ 127.511671][ T3305] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 127.532210][ T6848] loop3: detected capacity change from 0 to 128 [ 127.555204][ T29] audit: type=1326 audit(127.343:10664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe71a830b07 code=0x7ffc0000 [ 127.578120][ T29] audit: type=1326 audit(127.343:10665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe71a830a7c code=0x7ffc0000 [ 127.600872][ T29] audit: type=1326 audit(127.343:10666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe71a8309b4 code=0x7ffc0000 [ 127.623669][ T29] audit: type=1326 audit(127.343:10667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe71a8309b4 code=0x7ffc0000 [ 127.646505][ T29] audit: type=1326 audit(127.343:10668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe71a82d84a code=0x7ffc0000 [ 127.659474][ T3305] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 127.669201][ T29] audit: type=1326 audit(127.343:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a82ebe9 code=0x7ffc0000 [ 127.669229][ T29] audit: type=1326 audit(127.343:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a82ebe9 code=0x7ffc0000 [ 127.723464][ T29] audit: type=1326 audit(127.343:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.5.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe71a82ebe9 code=0x7ffc0000 [ 127.753867][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.929685][ T6859] batman_adv: batadv0: Interface deactivated: macvlan0 [ 127.936610][ T6859] batman_adv: batadv0: Removing interface: macvlan0 [ 127.971265][ T6859] netlink: 64 bytes leftover after parsing attributes in process `syz.0.760'. [ 128.024650][ T6859] team0: Failed to send options change via netlink (err -105) [ 128.032284][ T6859] team0: Mode changed to "loadbalance" [ 128.260991][ T6863] lo speed is unknown, defaulting to 1000 [ 128.268126][ T6863] lo speed is unknown, defaulting to 1000 [ 128.537125][ T6871] loop0: detected capacity change from 0 to 1024 [ 128.561535][ T6871] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 128.566452][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/339.tmp-b7:0' failed: Read-only file system [ 128.581682][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 128.616393][ T6862] lo speed is unknown, defaulting to 1000 [ 128.623928][ T6862] lo speed is unknown, defaulting to 1000 [ 128.664379][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/339.tmp-b7:0' failed: Read-only file system [ 128.706447][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/339.tmp-b7:0' failed: Read-only file system [ 128.728418][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/339.tmp-b7:0' failed: Read-only file system [ 128.837197][ T3492] udevd[3492]: symlink '../../loop3' '/dev/disk/by-diskseq/337.tmp-b7:3' failed: Read-only file system [ 128.840902][ T3491] udevd[3491]: symlink '../../loop6' '/dev/disk/by-diskseq/336.tmp-b7:6' failed: Read-only file system [ 128.939141][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.769'. [ 129.394073][ T3491] udevd[3491]: symlink '../../loop5' '/dev/disk/by-diskseq/334.tmp-b7:5' failed: Read-only file system [ 129.535967][ T3491] udevd[3491]: symlink '../../loop0' '/dev/disk/by-diskseq/340.tmp-b7:0' failed: Read-only file system [ 129.764565][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/337.tmp-b7:3' failed: Read-only file system [ 129.856203][ T6892] loop5: detected capacity change from 0 to 764 [ 129.872775][ T6893] loop6: detected capacity change from 0 to 128 [ 129.924227][ T6886] loop3: detected capacity change from 0 to 2048 [ 129.962987][ T6890] lo speed is unknown, defaulting to 1000 [ 129.973369][ T6890] lo speed is unknown, defaulting to 1000 [ 130.018398][ T6886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.179335][ T6906] loop6: detected capacity change from 0 to 512 [ 130.222210][ T6906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.245818][ T6911] loop0: detected capacity change from 0 to 1024 [ 130.289477][ T6911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.312768][ T4708] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.342935][ T6911] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 130.355299][ T6911] EXT4-fs (loop0): This should not happen!! Data will be lost [ 130.355299][ T6911] [ 130.365158][ T6911] EXT4-fs (loop0): Total free blocks count 0 [ 130.371161][ T6911] EXT4-fs (loop0): Free/Dirty block details [ 130.377106][ T6911] EXT4-fs (loop0): free_blocks=0 [ 130.377122][ T6911] EXT4-fs (loop0): dirty_blocks=0 [ 130.377137][ T6911] EXT4-fs (loop0): Block reservation details [ 130.393076][ T6911] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 130.424057][ T3317] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 130.446123][ T3317] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 130.460994][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.471909][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.607766][ T6934] lo speed is unknown, defaulting to 1000 [ 131.613865][ T6934] lo speed is unknown, defaulting to 1000 [ 132.183924][ T6928] lo speed is unknown, defaulting to 1000 [ 132.189938][ T6928] lo speed is unknown, defaulting to 1000 [ 132.426054][ T6945] __nla_validate_parse: 6 callbacks suppressed [ 132.426075][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.786'. [ 132.519391][ T2997] ================================================================== [ 132.527231][ T6947] netlink: 'syz.5.787': attribute type 10 has an invalid length. [ 132.527532][ T2997] BUG: KCSAN: data-race in d_delete / step_into [ 132.527584][ T2997] [ 132.527591][ T2997] read-write to 0xffff888107edc9c0 of 4 bytes by task 3491 on cpu 1: [ 132.527612][ T2997] d_delete+0x15a/0x180 [ 132.527645][ T2997] d_delete_notify+0x32/0x100 [ 132.527670][ T2997] vfs_unlink+0x30b/0x420 [ 132.527689][ T2997] do_unlinkat+0x24e/0x480 [ 132.527713][ T2997] __x64_sys_unlink+0x2e/0x40 [ 132.527739][ T2997] x64_sys_call+0x2dc0/0x2ff0 [ 132.527765][ T2997] do_syscall_64+0xd2/0x200 [ 132.527803][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.527829][ T2997] [ 132.527835][ T2997] read to 0xffff888107edc9c0 of 4 bytes by task 2997 on cpu 0: [ 132.527854][ T2997] step_into+0x12f/0x820 [ 132.527882][ T2997] walk_component+0x162/0x220 [ 132.527910][ T2997] path_lookupat+0xfe/0x2a0 [ 132.527944][ T2997] filename_lookup+0x147/0x340 [ 132.527978][ T2997] do_readlinkat+0x7d/0x320 [ 132.527994][ T2997] __x64_sys_readlink+0x47/0x60 [ 132.528028][ T2997] x64_sys_call+0x28da/0x2ff0 [ 132.528055][ T2997] do_syscall_64+0xd2/0x200 [ 132.528092][ T2997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.528115][ T2997] [ 132.528119][ T2997] value changed: 0x00300180 -> 0x00004080 [ 132.528132][ T2997] [ 132.528137][ T2997] Reported by Kernel Concurrency Sanitizer on: [ 132.528150][ T2997] CPU: 0 UID: 0 PID: 2997 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.528180][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.528194][ T2997] ================================================================== [ 132.782939][ T6962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.790'. [ 132.793975][ T6962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 133.139288][ T6970] lo speed is unknown, defaulting to 1000 [ 133.146300][ T6970] lo speed is unknown, defaulting to 1000 [ 133.296529][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 133.296550][ T29] audit: type=1400 audit(132.466:11010): avc: denied { write } for pid=6957 comm="syz.3.789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.287955][ T3491] udevd[3491]: symlink '../../loop3' '/dev/disk/by-diskseq/348.tmp-b7:3' failed: Read-only file system