last executing test programs: 4.078640345s ago: executing program 1 (id=43): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x8000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xbed985694cd1e417, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) dup3(r1, r0, 0x0) 3.958308934s ago: executing program 1 (id=44): open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 3.943742446s ago: executing program 1 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket(0x400000000010, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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") 3.866018621s ago: executing program 1 (id=46): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) 2.945507775s ago: executing program 1 (id=59): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @value=r1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000980)={0x2d, 0x7, 0x2, {{0x15, '/dev/bus/usb/00#/00#\x00'}, 0x7f}}, 0x22) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f00000024c0)={0x6, 0x118, 0xfa00, {{0x3, 0x800, "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", 0x9, 0x40, 0xd0, 0xa, 0x50, 0x4, 0xd}}}, 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") 2.055518546s ago: executing program 1 (id=67): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x5, 0x4) getdents(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe(&(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.027381538s ago: executing program 4 (id=68): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(0x0, 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.979064982s ago: executing program 4 (id=70): mkdir(&(0x7f0000000580)='./file0\x00', 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) 1.470279883s ago: executing program 3 (id=74): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.363759241s ago: executing program 0 (id=75): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000003c0), &(0x7f0000000540)=ANY=[], 0xb0, 0x2) 1.308036456s ago: executing program 0 (id=76): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.298845836s ago: executing program 3 (id=77): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x4c, 0x26, 0x122, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xe, 0x8}, {0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) 1.273167948s ago: executing program 2 (id=78): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x8000) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xbed985694cd1e417, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000400000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) dup3(r1, r0, 0x0) 1.241312531s ago: executing program 0 (id=79): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2=0x10, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c0003801400010076657468305f746f5f626f6e64000000140001007665746830000000000000000000000008000140000000000900020073797a300000000014000000110001"], 0x94}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unlink(0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x900, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r6, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000580)=""/104, 0x68}], 0x1}, 0x3}, {{0x0, 0x0, 0x0}, 0xf}], 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x5, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x800000000000008, 0x6}, 0x111044, 0x10000, 0x0, 0x1, 0x10000000008, 0x20005, 0xb, 0x0, 0xbf, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_pgetevents(0x0, 0x7f, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.232615372s ago: executing program 3 (id=80): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.173994416s ago: executing program 2 (id=81): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x6, [@union={0x5, 0x6, 0x0, 0x5, 0x1, 0x5, [{0xc, 0x5, 0x1}, {0x10, 0x1, 0xffffffff}, {0x10, 0x5, 0x8}, {0x8, 0x800003, 0xf}, {0x7, 0x4, 0x401}, {0x4, 0x3, 0xb}]}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x1, [{0xe, 0x5, 0xa239eee}, {0xe, 0x4}, {0x9, 0x4, 0x3}, {0xe, 0x4, 0x10}]}]}, {0x0, [0x0, 0x6f, 0x2e, 0x61]}}, &(0x7f0000000040)=""/41, 0xc6, 0x29, 0x1, 0xfffffff8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @value=r1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x80000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RLERRORu(r8, &(0x7f0000000980)={0x2d, 0x7, 0x2, {{0x15, '/dev/bus/usb/00#/00#\x00'}, 0x7f}}, 0x22) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000024c0)={0x6, 0x118, 0xfa00, {{0x3, 0x800, "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", 0x9, 0x40, 0xd0, 0xa, 0x50, 0x4, 0xd}}}, 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000400)={0xa}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x8, 0xd, 0x3, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x64, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x6, [{@rand_addr=0x64010100}, {@loopback, 0x1}, {@loopback}, {@multicast2, 0x100}, {@remote, 0x7f}]}, @end, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "5b09fbc87fb9072a"}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x2, 0x0}, 0x8) r11 = socket(0x15, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2717, 0x0, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) nanosleep(&(0x7f0000000a00)={r12, r13+10000000}, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="0800000000000000300800f0ffffff950000000000000000000000000000000082f652a55fb3709e0b0afcfe408cf0795783382047946f8d253a7e0a7e7ed8bee7c370b9822dffd401174ad93831892d4adeb23c63003eec774b8313d43f1ee29b522d5171e2ffd962260b3d9d32e511f67d1dcdd8e22f6c6282dd898250f2dab052bb303135ea03691a966273d9254a56c441"], &(0x7f0000000300)='syzkaller\x00', 0x101, 0xd, &(0x7f00000003c0)=""/13, 0x41100, 0x44, '\x00', r9, @fallback=0x22, r2, 0x8, &(0x7f00000006c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x9, 0xcf, 0x2}, 0x10, r10, r7, 0x7, &(0x7f0000000780)=[r5, r5, r5], &(0x7f00000007c0)=[{0x0, 0x4, 0x3, 0x4}, {0x0, 0x1, 0xb, 0xb}, {0x2, 0x1, 0x9}, {0x2, 0x3, 0x1, 0x5}, {0x0, 0x5, 0xb, 0x7}, {0x2, 0x4, 0x4}, {0x1, 0x1, 0x9, 0x4}], 0x10, 0x3}, 0x94) 1.075010714s ago: executing program 4 (id=82): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1.074628744s ago: executing program 3 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket(0x400000000010, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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") 1.052197536s ago: executing program 4 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="06000000040000000800000001400000001e0000ded21dbf5aba30b04588b72719582a6a4700c97c7b97e691f5047df2edeedc965f27cf1bd1b708afe09831d71ca883598adda7254909ac8b54e94e1d11ccdc5a9027029ffeed3a89ca9138fd723cca5c98c4f0575e32073d40a46fea26ec881f7bea2b5b8cd17ac0d56e7ce4aee658ef2e678b4ae71ec6c0cf1f5b4dae15586a7dffef31fd5b318e43754dd4f4fd63d8afef47d6699d9f5547796453933858f3fc454ec10e1b480f8ced1ef648471149356a7870526b9931b77442e82993a118123398e189ac5e809d121272b4e6c2972d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xff7fffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 793.261087ms ago: executing program 0 (id=85): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000000)='./file2\x00', 0x80010, &(0x7f0000003240)=ANY=[], 0x0, 0x36a, &(0x7f0000000a00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r0}, 0x10) getegid() munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f00003c2000/0x3000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) setreuid(0xee01, 0xee01) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x40}, 0x18) socket$igmp6(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="5000000009060102fc00000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140e000000205000700ff000000060004404e2200000500030006"], 0x50}, 0x1, 0x0, 0x0, 0x10040003}, 0x8880) 636.501219ms ago: executing program 3 (id=86): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) connect$pppl2tp(r3, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300)="64ead7524d756e0eb6ba926ac2435ac631dde50328a9542e16a96c74a552623b62c6ef1d81895ae4ef87", &(0x7f00000003c0)=""/86}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) unshare(0x24060400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 461.853503ms ago: executing program 0 (id=87): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000003c0), &(0x7f0000000540)=ANY=[], 0xb0, 0x2) 381.005769ms ago: executing program 0 (id=88): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x6, [@union={0x5, 0x0, 0x0, 0x5, 0x1, 0x5}, @ptr={0x10}, @float={0x6, 0x0, 0x0, 0x10, 0x4}, @volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x1, [{0xe, 0x5, 0xa239eee}, {0xe, 0x4}, {0x9, 0x4, 0x3}, {0xe, 0x4, 0x10}]}]}, {0x0, [0x0, 0x6f, 0x2e, 0x61]}}, &(0x7f0000000040)=""/41, 0x8a, 0x29, 0x1, 0xfffffff8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000, 0x10800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @value=r1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4041) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000ffffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x80000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000980)={0x2d, 0x7, 0x2, {{0x15, '/dev/bus/usb/00#/00#\x00'}, 0x7f}}, 0x22) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r7, &(0x7f00000024c0)={0x6, 0x118, 0xfa00, {{0x3, 0x800, "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", 0x9, 0x40, 0xd0, 0xa, 0x50, 0x4, 0xd}}}, 0x120) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000400)={0xa}) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x7460) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@abort}, {@errors_remount}, {@quota}]}, 0x3, 0x433, &(0x7f0000000d80)="$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") ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x10, 0x8, 0xd, 0x3, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x64, 0x0, 0xa6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp_addr={0x44, 0x2c, 0xd6, 0x1, 0x6, [{@rand_addr=0x64010100}, {@loopback, 0x1}, {@loopback}, {@multicast2, 0x100}, {@remote, 0x7f}]}, @end, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "5b09fbc87fb9072a"}]}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x2}, 0x8) r8 = socket(0x15, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x2717, 0x0, &(0x7f0000000300)) 329.019264ms ago: executing program 2 (id=89): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r3}, 0x18) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x4c, 0x26, 0x122, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xe, 0x8}, {0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r11 = socket(0x10, 0x803, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtfilter={0x130, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0xb, 0x3}, {}, {0xfff2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0xe4, 0x7, [@m_ct={0xe0, 0x10, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}]}, {0x91, 0x6, "8513032b89400eb2f62bc5a8cab0b1c9ed62572cf907d8210531cf13e6cb098f9c21b0768555a5b5ed147c8298b7cc81370e7718390fe80cc4ac5bd5d896d4b60163cfcd66e9ac539f90a1c3e09f9af087f3a2689717b37fa52366297610e2b716d1881c799703dc1ee2d1d142083ef86074d712cfb179b01a5afcef2bdf5a77821abc42ef94bbe2180f031c7b"}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}]}, 0x130}, 0x1, 0x0, 0x0, 0x81}, 0x800) 118.94208ms ago: executing program 2 (id=90): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 70.665514ms ago: executing program 2 (id=91): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x4c, 0x26, 0x122, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xe, 0x8}, {0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) 69.910995ms ago: executing program 4 (id=92): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r0, 0x0, 0x33, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 52.051266ms ago: executing program 3 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)=ANY=[], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x110, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="06000000040000000800000001400000001e0000ded21dbf5aba30b04588b72719582a6a4700c97c7b97e691f5047df2edeedc965f27cf1bd1b708afe09831d71ca883598adda7254909ac8b54e94e1d11ccdc5a9027029ffeed3a89ca9138fd723cca5c98c4f0575e32073d40a46fea26ec881f7bea2b5b8cd17ac0d56e7ce4aee658ef2e678b4ae71ec6c0cf1f5b4dae15586a7dffef31fd5b318e43754dd4f4fd63d8afef47d6699d9f5547796453933858f3fc454ec10e1b480f8ced1ef648471149356a7870526b9931b77442e82993a118123398e189ac5e809d121272b4e6c2972d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xff7fffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000}, 0x44010) 6.95412ms ago: executing program 2 (id=94): socket$unix(0x1, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r2}, 0x18) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 0s ago: executing program 4 (id=95): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) connect$pppl2tp(r3, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x4}}, 0x26) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000300)="64ead7524d756e0eb6ba926ac2435ac631dde50328a9542e16a96c74a552623b62c6ef1d81895ae4ef87", &(0x7f00000003c0)=""/86}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) unshare(0x24060400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r10}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 23.175258][ T29] audit: type=1400 audit(1755992661.080:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.175893][ T3290] cgroup: Unknown subsys name 'net' [ 23.197984][ T29] audit: type=1400 audit(1755992661.080:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.225626][ T29] audit: type=1400 audit(1755992661.110:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.421997][ T3290] cgroup: Unknown subsys name 'cpuset' [ 23.428218][ T3290] cgroup: Unknown subsys name 'rlimit' [ 23.557510][ T29] audit: type=1400 audit(1755992661.460:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.581165][ T29] audit: type=1400 audit(1755992661.460:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.601755][ T29] audit: type=1400 audit(1755992661.460:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.622196][ T29] audit: type=1400 audit(1755992661.460:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.629448][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.642662][ T29] audit: type=1400 audit(1755992661.470:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.676125][ T29] audit: type=1400 audit(1755992661.470:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.699409][ T29] audit: type=1400 audit(1755992661.550:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.728443][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.580023][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 25.664287][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.671543][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.678717][ T3300] bridge_slave_0: entered allmulticast mode [ 25.685070][ T3300] bridge_slave_0: entered promiscuous mode [ 25.691736][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.698778][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.705998][ T3300] bridge_slave_1: entered allmulticast mode [ 25.712293][ T3300] bridge_slave_1: entered promiscuous mode [ 25.738536][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 25.753762][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.765548][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 25.778793][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 25.788081][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.814368][ T3300] team0: Port device team_slave_0 added [ 25.836392][ T3300] team0: Port device team_slave_1 added [ 25.896689][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.903699][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.929669][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.944158][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.952910][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.960158][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.967474][ T3310] bridge_slave_0: entered allmulticast mode [ 25.973772][ T3310] bridge_slave_0: entered promiscuous mode [ 25.985066][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.992169][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.999302][ T3309] bridge_slave_0: entered allmulticast mode [ 26.005580][ T3309] bridge_slave_0: entered promiscuous mode [ 26.012294][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.019249][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.045211][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.058681][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.065778][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.072953][ T3301] bridge_slave_0: entered allmulticast mode [ 26.079231][ T3301] bridge_slave_0: entered promiscuous mode [ 26.088223][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.095536][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.102654][ T3310] bridge_slave_1: entered allmulticast mode [ 26.109088][ T3310] bridge_slave_1: entered promiscuous mode [ 26.115336][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.122464][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.129680][ T3309] bridge_slave_1: entered allmulticast mode [ 26.136015][ T3309] bridge_slave_1: entered promiscuous mode [ 26.143698][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.150924][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.158073][ T3301] bridge_slave_1: entered allmulticast mode [ 26.164379][ T3301] bridge_slave_1: entered promiscuous mode [ 26.212219][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.224610][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.234754][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.245006][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.255781][ T3300] hsr_slave_0: entered promiscuous mode [ 26.261615][ T3300] hsr_slave_1: entered promiscuous mode [ 26.274629][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.289150][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.312071][ T3301] team0: Port device team_slave_0 added [ 26.335342][ T3301] team0: Port device team_slave_1 added [ 26.341755][ T3310] team0: Port device team_slave_0 added [ 26.348370][ T3309] team0: Port device team_slave_0 added [ 26.354310][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.361501][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.368956][ T3305] bridge_slave_0: entered allmulticast mode [ 26.375224][ T3305] bridge_slave_0: entered promiscuous mode [ 26.381984][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.389136][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.396406][ T3305] bridge_slave_1: entered allmulticast mode [ 26.402729][ T3305] bridge_slave_1: entered promiscuous mode [ 26.414131][ T3310] team0: Port device team_slave_1 added [ 26.424460][ T3309] team0: Port device team_slave_1 added [ 26.456280][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.463378][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.489337][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.506202][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.513321][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.539378][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.550744][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.557724][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.583874][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.596808][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.603843][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.630117][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.641048][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.648127][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.674197][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.685638][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.696152][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.716081][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.723200][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.749304][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.773851][ T3305] team0: Port device team_slave_0 added [ 26.792703][ T3305] team0: Port device team_slave_1 added [ 26.807265][ T3301] hsr_slave_0: entered promiscuous mode [ 26.813355][ T3301] hsr_slave_1: entered promiscuous mode [ 26.819061][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 26.824816][ T3301] Cannot create hsr debugfs directory [ 26.854579][ T3310] hsr_slave_0: entered promiscuous mode [ 26.860433][ T3310] hsr_slave_1: entered promiscuous mode [ 26.866731][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 26.872611][ T3310] Cannot create hsr debugfs directory [ 26.892658][ T3309] hsr_slave_0: entered promiscuous mode [ 26.898884][ T3309] hsr_slave_1: entered promiscuous mode [ 26.904798][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 26.910537][ T3309] Cannot create hsr debugfs directory [ 26.930994][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.938040][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.964357][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.984548][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.991609][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.017616][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.093388][ T3305] hsr_slave_0: entered promiscuous mode [ 27.099574][ T3305] hsr_slave_1: entered promiscuous mode [ 27.105576][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 27.111347][ T3305] Cannot create hsr debugfs directory [ 27.156691][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.173787][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.193771][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.202346][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.249207][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.257684][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.273955][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.287546][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.307322][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.316413][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.337108][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.346331][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.365780][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.378240][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.386986][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.396536][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.405585][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.428300][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.444266][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.451305][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.472565][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.481568][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.488635][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.501836][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.510609][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.520345][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.557319][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.586194][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.610844][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.619099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.626256][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.640754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.647889][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.663529][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.686216][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.697156][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.707776][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.728343][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.735511][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.744727][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.756564][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.768046][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.775434][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.793052][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.803984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.811102][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.819781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.826851][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.843396][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.866496][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.873595][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.885555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.892860][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.926064][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.021291][ T3300] veth0_vlan: entered promiscuous mode [ 28.043201][ T3300] veth1_vlan: entered promiscuous mode [ 28.068791][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.080203][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.112528][ T3300] veth0_macvtap: entered promiscuous mode [ 28.127910][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.146102][ T3300] veth1_macvtap: entered promiscuous mode [ 28.191001][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.202578][ T3301] veth0_vlan: entered promiscuous mode [ 28.210512][ T3301] veth1_vlan: entered promiscuous mode [ 28.225503][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.254561][ T3301] veth0_macvtap: entered promiscuous mode [ 28.260890][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.286707][ T3305] veth0_vlan: entered promiscuous mode [ 28.294183][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.304161][ T3301] veth1_macvtap: entered promiscuous mode [ 28.321313][ T3305] veth1_vlan: entered promiscuous mode [ 28.328256][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.342957][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.356882][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 28.356928][ T29] audit: type=1400 audit(1755992666.260:81): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kLqm5S/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.359464][ T3310] veth0_vlan: entered promiscuous mode [ 28.381516][ T29] audit: type=1400 audit(1755992666.270:82): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.389953][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.392714][ T29] audit: type=1400 audit(1755992666.270:83): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kLqm5S/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.422545][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.423584][ T29] audit: type=1400 audit(1755992666.270:84): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.477888][ T29] audit: type=1400 audit(1755992666.270:85): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kLqm5S/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.504405][ T29] audit: type=1400 audit(1755992666.270:86): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/root/syzkaller.kLqm5S/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.531997][ T29] audit: type=1400 audit(1755992666.270:87): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.554210][ T29] audit: type=1400 audit(1755992666.460:88): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.554557][ T3309] veth0_vlan: entered promiscuous mode [ 28.578946][ T29] audit: type=1400 audit(1755992666.460:89): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="gadgetfs" ino=4526 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.599222][ T3309] veth1_vlan: entered promiscuous mode [ 28.613273][ T3310] veth1_vlan: entered promiscuous mode [ 28.620615][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.631328][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.646414][ T3305] veth0_macvtap: entered promiscuous mode [ 28.662757][ T3309] veth0_macvtap: entered promiscuous mode [ 28.670267][ T3309] veth1_macvtap: entered promiscuous mode [ 28.692636][ T29] audit: type=1400 audit(1755992666.590:90): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.696416][ T3431] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.730515][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.739740][ T3305] veth1_macvtap: entered promiscuous mode [ 28.750858][ T3472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.768502][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.777176][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.797608][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.805642][ T3310] veth0_macvtap: entered promiscuous mode [ 28.814755][ T3310] veth1_macvtap: entered promiscuous mode [ 28.823197][ T3431] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.832369][ T3478] loop4: detected capacity change from 0 to 512 [ 28.840311][ T3478] EXT4-fs: Ignoring removed nobh option [ 28.860635][ T3431] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.872393][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.889001][ T309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.903035][ T3480] loop0: detected capacity change from 0 to 512 [ 28.913696][ T3478] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.927071][ T3480] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 28.938167][ T309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.949228][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.964747][ T309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.971093][ T3480] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1: bg 0: block 4: invalid block bitmap [ 28.981562][ T3478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.7: corrupted inode contents [ 28.986750][ T3480] EXT4-fs (loop0): Remounting filesystem read-only [ 28.998617][ T3478] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.7: mark_inode_dirty error [ 29.004911][ T3480] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.032771][ T309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.050336][ T3478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.7: corrupted inode contents [ 29.058312][ T3480] EXT4-fs (loop0): 1 truncate cleaned up [ 29.069490][ T3480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.074704][ T3487] loop1: detected capacity change from 0 to 512 [ 29.089972][ T3487] EXT4-fs: Ignoring removed nobh option [ 29.103551][ T3478] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.7: mark_inode_dirty error [ 29.115837][ T309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.144935][ T3478] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.7: Failed to acquire dquot type 0 [ 29.145159][ T309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.169723][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.185622][ T3478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.7: corrupted inode contents [ 29.198441][ T3487] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2: corrupted inode contents [ 29.199708][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.223803][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 29.227342][ T309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.242130][ T3478] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.7: mark_inode_dirty error [ 29.247654][ T3490] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3'. [ 29.257326][ T3487] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.2: mark_inode_dirty error [ 29.263406][ T3478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.7: corrupted inode contents [ 29.281569][ T309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.286282][ T3496] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.299707][ T309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.303484][ T3487] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.2: corrupted inode contents [ 29.313064][ T309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.334293][ T3478] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.7: mark_inode_dirty error [ 29.337876][ T3487] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.2: mark_inode_dirty error [ 29.349095][ T3496] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.357888][ T3487] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.2: Failed to acquire dquot type 0 [ 29.366331][ T3478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.7: corrupted inode contents [ 29.378688][ T3487] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2: corrupted inode contents [ 29.400023][ T3487] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.2: mark_inode_dirty error [ 29.413682][ T3487] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2: corrupted inode contents [ 29.419872][ T3478] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 29.426718][ T3487] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2: mark_inode_dirty error [ 29.435125][ T3478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.7: corrupted inode contents [ 29.448351][ T3487] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2: corrupted inode contents [ 29.458852][ T3478] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.7: mark_inode_dirty error [ 29.470133][ T3487] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 29.483070][ T3478] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 29.489980][ T3487] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.2: corrupted inode contents [ 29.510402][ T3487] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.2: mark_inode_dirty error [ 29.529384][ T3478] EXT4-fs (loop4): 1 truncate cleaned up [ 29.536225][ T3478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.549138][ T3487] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 29.550051][ T3478] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.572738][ T3487] EXT4-fs (loop1): 1 truncate cleaned up [ 29.578855][ T3487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.591906][ T3480] syz.0.1 (3480) used greatest stack depth: 10632 bytes left [ 29.604314][ T3487] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.652669][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.729096][ T3478] syz.4.7 (3478) used greatest stack depth: 9776 bytes left [ 29.746447][ T3487] syz.1.2 (3487) used greatest stack depth: 9760 bytes left [ 29.748287][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.804975][ T3502] loop2: detected capacity change from 0 to 1024 [ 29.908888][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.982974][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.311014][ T3514] loop4: detected capacity change from 0 to 512 [ 30.349624][ T3514] EXT4-fs: Ignoring removed nobh option [ 30.386269][ T3514] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.11: corrupted inode contents [ 30.427210][ T3514] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.11: mark_inode_dirty error [ 30.439606][ T3514] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.11: corrupted inode contents [ 30.490026][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.498525][ T3514] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.11: mark_inode_dirty error [ 30.578602][ T3514] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.11: Failed to acquire dquot type 0 [ 30.603062][ T3514] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.11: corrupted inode contents [ 30.670837][ T3525] loop2: detected capacity change from 0 to 512 [ 30.673387][ T3514] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.11: mark_inode_dirty error [ 30.689188][ T3525] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 30.702607][ T3527] loop0: detected capacity change from 0 to 512 [ 30.714522][ T3525] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.13: bg 0: block 4: invalid block bitmap [ 30.730123][ T3527] EXT4-fs: Ignoring removed nobh option [ 30.733658][ T3525] EXT4-fs (loop2): Remounting filesystem read-only [ 30.744071][ T3525] EXT4-fs (loop2): 1 truncate cleaned up [ 30.759167][ T3525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.777191][ T3514] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.11: corrupted inode contents [ 30.784678][ T3527] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.15: corrupted inode contents [ 30.803654][ T3514] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.11: mark_inode_dirty error [ 30.815930][ T3527] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.15: mark_inode_dirty error [ 30.828501][ T3514] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.11: corrupted inode contents [ 30.845081][ T3527] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.15: corrupted inode contents [ 30.857723][ T3514] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 30.871534][ T3514] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.11: corrupted inode contents [ 30.884684][ T3527] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.15: mark_inode_dirty error [ 30.896002][ T3514] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.11: mark_inode_dirty error [ 30.908417][ T3527] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.15: Failed to acquire dquot type 0 [ 30.919933][ T3514] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 30.930793][ T3527] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.15: corrupted inode contents [ 30.945351][ T3514] EXT4-fs (loop4): 1 truncate cleaned up [ 30.951755][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.964656][ T3527] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.15: mark_inode_dirty error [ 30.966382][ T3514] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.976113][ T3527] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.15: corrupted inode contents [ 30.999218][ T3527] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.15: mark_inode_dirty error [ 31.011303][ T3512] syz.3.10 (3512) used greatest stack depth: 7112 bytes left [ 31.012488][ T3527] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.15: corrupted inode contents [ 31.031016][ T3527] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 31.040777][ T3527] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.15: corrupted inode contents [ 31.054545][ T3527] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.15: mark_inode_dirty error [ 31.066140][ T3527] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 31.078519][ T3527] EXT4-fs (loop0): 1 truncate cleaned up [ 31.097045][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.114056][ T3533] loop3: detected capacity change from 0 to 512 [ 31.120702][ T3527] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.132238][ T3533] EXT4-fs: Ignoring removed nobh option [ 31.148817][ T3533] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.16: corrupted inode contents [ 31.167014][ T3533] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.16: mark_inode_dirty error [ 31.179597][ T3533] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.16: corrupted inode contents [ 31.198770][ T3533] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.16: mark_inode_dirty error [ 31.215426][ T3533] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.16: Failed to acquire dquot type 0 [ 31.233464][ T3533] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.16: corrupted inode contents [ 31.252906][ T3540] tipc: Started in network mode [ 31.256962][ T3533] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.16: mark_inode_dirty error [ 31.257839][ T3540] tipc: Node identity ac141413, cluster identity 4711 [ 31.276781][ T3540] tipc: New replicast peer: 10.1.1.2 [ 31.279276][ T3533] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.16: corrupted inode contents [ 31.282292][ T3540] tipc: Enabled bearer , priority 10 [ 31.311589][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.314476][ T3533] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.16: mark_inode_dirty error [ 31.338122][ T3533] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.16: corrupted inode contents [ 31.338275][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.361807][ T3533] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 31.397716][ T3544] loop0: detected capacity change from 0 to 512 [ 31.427586][ T3533] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.16: corrupted inode contents [ 31.429357][ T3544] EXT4-fs: Ignoring removed nobh option [ 31.451758][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.463625][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.18: corrupted inode contents [ 31.490474][ T3533] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.16: mark_inode_dirty error [ 31.524515][ T3533] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 31.533449][ T3544] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.18: mark_inode_dirty error [ 31.535547][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.18: corrupted inode contents [ 31.546095][ T3533] EXT4-fs (loop3): 1 truncate cleaned up [ 31.562858][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.578382][ T3557] loop4: detected capacity change from 0 to 512 [ 31.585253][ T3544] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.18: mark_inode_dirty error [ 31.597759][ T3557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.602787][ T3533] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.609481][ T3557] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.20: bg 0: block 4: invalid block bitmap [ 31.623586][ T3544] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.18: Failed to acquire dquot type 0 [ 31.641705][ T3560] loop1: detected capacity change from 0 to 1024 [ 31.648756][ T3560] ======================================================= [ 31.648756][ T3560] WARNING: The mand mount option has been deprecated and [ 31.648756][ T3560] and is ignored by this kernel. Remove the mand [ 31.648756][ T3560] option from the mount to silence this warning. [ 31.648756][ T3560] ======================================================= [ 31.655879][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.18: corrupted inode contents [ 31.699208][ T3562] loop2: detected capacity change from 0 to 512 [ 31.701122][ T3544] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.18: mark_inode_dirty error [ 31.705686][ T3557] EXT4-fs (loop4): Remounting filesystem read-only [ 31.718259][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.18: corrupted inode contents [ 31.737238][ T3562] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.747935][ T3557] EXT4-fs (loop4): 1 truncate cleaned up [ 31.755559][ T3544] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.18: mark_inode_dirty error [ 31.777585][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.18: corrupted inode contents [ 31.777948][ T3562] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.23: bg 0: block 4: invalid block bitmap [ 31.803002][ T3562] EXT4-fs (loop2): Remounting filesystem read-only [ 31.810421][ T3562] EXT4-fs (loop2): 1 truncate cleaned up [ 31.813935][ T3544] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 31.829605][ T3557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.842123][ T3562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.881767][ T3544] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.18: corrupted inode contents [ 31.896967][ T3544] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.18: mark_inode_dirty error [ 31.908486][ T3544] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 31.925568][ T3544] EXT4-fs (loop0): 1 truncate cleaned up [ 31.933023][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.945710][ T3544] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.042538][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.106479][ T3575] loop1: detected capacity change from 0 to 512 [ 32.116339][ T3575] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.129023][ T3575] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.26: bg 0: block 4: invalid block bitmap [ 32.161951][ T3575] EXT4-fs (loop1): Remounting filesystem read-only [ 32.168818][ T3575] EXT4-fs (loop1): 1 truncate cleaned up [ 32.175580][ T3575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.190194][ T3576] loop3: detected capacity change from 0 to 1024 [ 32.204815][ T3576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.240117][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.281626][ T3581] sch_fq: defrate 4294967295 ignored. [ 32.288873][ T3581] syz.0.28 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.342455][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.373584][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.401503][ T3414] tipc: Node number set to 2886997011 [ 32.438607][ T3589] loop0: detected capacity change from 0 to 512 [ 32.447027][ T3589] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.467895][ T3589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.29: bg 0: block 4: invalid block bitmap [ 32.480863][ T3589] EXT4-fs (loop0): Remounting filesystem read-only [ 32.492377][ T3589] EXT4-fs (loop0): 1 truncate cleaned up [ 32.499482][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.512647][ T3596] loop4: detected capacity change from 0 to 512 [ 32.530825][ T3591] loop2: detected capacity change from 0 to 164 [ 32.558179][ T3596] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 32.568742][ T3596] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.579185][ T3591] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 32.587624][ T3596] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.606188][ T3596] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 32.615686][ T3596] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.34: bg 0: block 40: padding at end of block bitmap is not set [ 32.637875][ T3596] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 32.647029][ T3596] EXT4-fs (loop4): 1 truncate cleaned up [ 32.653142][ T3596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.674890][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.757529][ T3606] loop2: detected capacity change from 0 to 512 [ 32.767493][ T3606] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.780889][ T3606] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.35: bg 0: block 4: invalid block bitmap [ 32.793633][ T3606] EXT4-fs (loop2): Remounting filesystem read-only [ 32.800478][ T3606] EXT4-fs (loop2): 1 truncate cleaned up [ 32.806797][ T3606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.821516][ T3608] loop4: detected capacity change from 0 to 512 [ 32.829063][ T3608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.862186][ T3608] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.36: bg 0: block 4: invalid block bitmap [ 32.887542][ T3608] EXT4-fs (loop4): Remounting filesystem read-only [ 32.895476][ T3608] EXT4-fs (loop4): 1 truncate cleaned up [ 32.905837][ T3608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.920524][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.976860][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.034254][ T3614] loop1: detected capacity change from 0 to 512 [ 33.043203][ T3614] EXT4-fs: Ignoring removed nobh option [ 33.077935][ T3614] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.38: corrupted inode contents [ 33.096819][ T3614] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.38: mark_inode_dirty error [ 33.110005][ T3614] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.38: corrupted inode contents [ 33.147384][ T3614] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.38: mark_inode_dirty error [ 33.182655][ T3614] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.38: Failed to acquire dquot type 0 [ 33.215165][ T3614] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.38: corrupted inode contents [ 33.228083][ T3614] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.38: mark_inode_dirty error [ 33.251201][ T3614] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.38: corrupted inode contents [ 33.267525][ T3614] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.38: mark_inode_dirty error [ 33.267779][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.279538][ T3614] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.38: corrupted inode contents [ 33.304903][ T3614] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 33.315500][ T3614] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.38: corrupted inode contents [ 33.328512][ T3614] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.38: mark_inode_dirty error [ 33.350570][ T3620] loop0: detected capacity change from 0 to 164 [ 33.358422][ T3614] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 33.370299][ T3620] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 33.380626][ T3614] EXT4-fs (loop1): 1 truncate cleaned up [ 33.388417][ T3614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.404037][ T3614] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.420047][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 33.420062][ T29] audit: type=1326 audit(1755992671.330:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dbc8ad550 code=0x7ffc0000 [ 33.480411][ T29] audit: type=1326 audit(1755992671.330:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2dbc8ad937 code=0x7ffc0000 [ 33.504064][ T29] audit: type=1326 audit(1755992671.330:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dbc8ad550 code=0x7ffc0000 [ 33.527399][ T29] audit: type=1326 audit(1755992671.330:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbc8aebe9 code=0x7ffc0000 [ 33.551007][ T29] audit: type=1326 audit(1755992671.330:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbc8aebe9 code=0x7ffc0000 [ 33.574588][ T29] audit: type=1326 audit(1755992671.360:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2dbc8aebe9 code=0x7ffc0000 [ 33.597995][ T29] audit: type=1326 audit(1755992671.360:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbc8aebe9 code=0x7ffc0000 [ 33.621670][ T29] audit: type=1326 audit(1755992671.360:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbc8aebe9 code=0x7ffc0000 [ 33.645045][ T29] audit: type=1326 audit(1755992671.360:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2dbc8aebe9 code=0x7ffc0000 [ 33.669070][ T29] audit: type=1326 audit(1755992671.360:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3613 comm="syz.1.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbc8aebe9 code=0x7ffc0000 [ 33.706513][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.716568][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.733770][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.747052][ T3626] loop0: detected capacity change from 0 to 512 [ 33.754951][ T3626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.769381][ T3626] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.40: bg 0: block 4: invalid block bitmap [ 33.807672][ T3626] EXT4-fs (loop0): Remounting filesystem read-only [ 33.831890][ T3626] EXT4-fs (loop0): 1 truncate cleaned up [ 33.837912][ T3626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.867082][ T3634] loop2: detected capacity change from 0 to 512 [ 33.884020][ T3638] loop1: detected capacity change from 0 to 164 [ 33.898036][ T3634] EXT4-fs: Ignoring removed nobh option [ 33.910701][ T3638] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 33.942055][ T3634] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.41: corrupted inode contents [ 34.060555][ T3634] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.41: mark_inode_dirty error [ 34.073875][ T3634] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.41: corrupted inode contents [ 34.087705][ T3634] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.41: mark_inode_dirty error [ 34.099632][ T3634] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.41: Failed to acquire dquot type 0 [ 34.216292][ T3634] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.41: corrupted inode contents [ 34.231198][ T3634] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.41: mark_inode_dirty error [ 34.309182][ T3634] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.41: corrupted inode contents [ 34.336934][ T3634] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.41: mark_inode_dirty error [ 34.410991][ T3634] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.41: corrupted inode contents [ 34.428496][ T3649] loop3: detected capacity change from 0 to 164 [ 34.457758][ T3649] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.466765][ T3634] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 34.494718][ T3634] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.41: corrupted inode contents [ 34.506740][ T3634] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.41: mark_inode_dirty error [ 34.518169][ T3634] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 34.540784][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.550976][ T3634] EXT4-fs (loop2): 1 truncate cleaned up [ 34.561037][ T3634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.585735][ T3634] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.603756][ T3653] sch_fq: defrate 4294967295 ignored. [ 34.643694][ T3655] Restarting kernel threads ... [ 34.649249][ T3655] Done restarting kernel threads. [ 34.708049][ T3662] loop3: detected capacity change from 0 to 512 [ 34.716803][ T3662] EXT4-fs: Ignoring removed nobh option [ 34.736528][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.54: corrupted inode contents [ 34.757254][ T3662] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.54: mark_inode_dirty error [ 34.769223][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.54: corrupted inode contents [ 34.783454][ T3662] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.54: mark_inode_dirty error [ 34.795402][ T3662] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.54: Failed to acquire dquot type 0 [ 34.808662][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.54: corrupted inode contents [ 34.842201][ T3662] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.54: mark_inode_dirty error [ 34.862850][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.54: corrupted inode contents [ 34.875976][ T3662] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.54: mark_inode_dirty error [ 34.894309][ T3676] loop4: detected capacity change from 0 to 512 [ 34.898335][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.901520][ T3676] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.922806][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.54: corrupted inode contents [ 34.939949][ T3676] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.53: bg 0: block 4: invalid block bitmap [ 34.945602][ T3662] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 34.964151][ T3676] EXT4-fs (loop4): Remounting filesystem read-only [ 34.970851][ T3676] EXT4-fs (loop4): 1 truncate cleaned up [ 34.976671][ T3680] loop1: detected capacity change from 0 to 512 [ 34.977066][ T3676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.995115][ T3680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.016536][ T3662] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.54: corrupted inode contents [ 35.023794][ T3680] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.59: bg 0: block 4: invalid block bitmap [ 35.036453][ T3662] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.54: mark_inode_dirty error [ 35.042130][ T3680] EXT4-fs (loop1): Remounting filesystem read-only [ 35.054621][ T3662] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 35.058389][ T3680] EXT4-fs (loop1): 1 truncate cleaned up [ 35.068213][ T3662] EXT4-fs (loop3): 1 truncate cleaned up [ 35.074656][ T3680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.083922][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.105098][ T3662] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.132815][ T3685] loop2: detected capacity change from 0 to 512 [ 35.142621][ T3685] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.156400][ T3685] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.60: bg 0: block 4: invalid block bitmap [ 35.169961][ T3685] EXT4-fs (loop2): Remounting filesystem read-only [ 35.176918][ T3685] EXT4-fs (loop2): 1 truncate cleaned up [ 35.185618][ T3685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.525483][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.556804][ T3690] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 35.565236][ T3690] netlink: 55 bytes leftover after parsing attributes in process `syz.4.62'. [ 35.581217][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.662538][ T3692] sch_fq: defrate 4294967295 ignored. [ 35.752003][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.833947][ T3704] loop0: detected capacity change from 0 to 164 [ 35.916646][ T3704] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.164717][ T3718] loop0: detected capacity change from 0 to 164 [ 36.173073][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.245737][ T3718] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 36.605909][ T3742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 36.717012][ T3742] netlink: 277 bytes leftover after parsing attributes in process `syz.0.79'. [ 36.768571][ T3753] loop2: detected capacity change from 0 to 512 [ 36.776549][ T3753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.800321][ T3748] loop3: detected capacity change from 0 to 164 [ 36.808374][ T3753] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.81: bg 0: block 4: invalid block bitmap [ 36.947394][ T3753] EXT4-fs (loop2): Remounting filesystem read-only [ 36.954490][ T3753] EXT4-fs (loop2): 1 truncate cleaned up [ 36.961089][ T3753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.984298][ T3748] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 37.108943][ T3759] loop0: detected capacity change from 0 to 128 [ 37.326699][ T3762] netlink: 'syz.3.86': attribute type 10 has an invalid length. [ 37.334985][ T3762] netlink: 55 bytes leftover after parsing attributes in process `syz.3.86'. [ 37.401469][ C1] hrtimer: interrupt took 61993 ns [ 37.478321][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.543233][ T3767] loop0: detected capacity change from 0 to 512 [ 37.550639][ T3767] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.568612][ T3767] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.88: bg 0: block 4: invalid block bitmap [ 37.586567][ T3767] EXT4-fs (loop0): Remounting filesystem read-only [ 37.661751][ T3767] EXT4-fs (loop0): 1 truncate cleaned up [ 37.723184][ T3767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.747333][ T3781] Zero length message leads to an empty skb [ 37.839283][ T3791] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 37.847153][ T3791] netlink: 55 bytes leftover after parsing attributes in process `syz.4.95'. [ 37.863399][ T3792] ================================================================== [ 37.871609][ T3792] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 37.878243][ T3792] [ 37.880563][ T3792] write to 0xffff8881222c27d8 of 96 bytes by task 3790 on cpu 1: [ 37.888273][ T3792] __bpf_get_stackid+0x761/0x800 [ 37.893244][ T3792] bpf_get_stackid+0xee/0x120 [ 37.898040][ T3792] bpf_get_stackid_raw_tp+0xf6/0x120 [ 37.903432][ T3792] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 37.908893][ T3792] bpf_trace_run2+0x107/0x1c0 [ 37.913666][ T3792] kfree+0x27b/0x320 [ 37.917587][ T3792] put_files_struct+0x1ca/0x210 [ 37.922440][ T3792] exit_files+0x65/0x80 [ 37.926596][ T3792] do_exit+0x46e/0x15c0 [ 37.930757][ T3792] do_group_exit+0x139/0x140 [ 37.935353][ T3792] __x64_sys_exit_group+0x1f/0x20 [ 37.940482][ T3792] x64_sys_call+0x2fe2/0x2ff0 [ 37.945247][ T3792] do_syscall_64+0xd2/0x200 [ 37.949773][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.955709][ T3792] [ 37.958045][ T3792] read to 0xffff8881222c2820 of 8 bytes by task 3792 on cpu 0: [ 37.965598][ T3792] bcmp+0x23/0x90 [ 37.969247][ T3792] __bpf_get_stackid+0x371/0x800 [ 37.974191][ T3792] bpf_get_stackid+0xee/0x120 [ 37.978874][ T3792] bpf_get_stackid_raw_tp+0xf6/0x120 [ 37.984167][ T3792] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 37.989627][ T3792] bpf_trace_run2+0x107/0x1c0 [ 37.994311][ T3792] kfree+0x27b/0x320 [ 37.998210][ T3792] ___sys_recvmsg+0x135/0x370 [ 38.002889][ T3792] do_recvmmsg+0x1ef/0x540 [ 38.007310][ T3792] __x64_sys_recvmmsg+0xe5/0x170 [ 38.012250][ T3792] x64_sys_call+0x27a6/0x2ff0 [ 38.016949][ T3792] do_syscall_64+0xd2/0x200 [ 38.021483][ T3792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.027502][ T3792] [ 38.029921][ T3792] value changed: 0xffffffff81000130 -> 0xffffffff812772e2 [ 38.037466][ T3792] [ 38.039806][ T3792] Reported by Kernel Concurrency Sanitizer on: [ 38.045958][ T3792] CPU: 0 UID: 0 PID: 3792 Comm: syz.3.93 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.055512][ T3792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.065585][ T3792] ================================================================== [ 38.536225][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.