last executing test programs: 2m42.700431274s ago: executing program 2 (id=985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x16) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 2m42.589000717s ago: executing program 2 (id=986): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000500)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffa}, 0x18) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_fadd={0x58, 0x114, 0x8, {{0x401, 0x4}, &(0x7f00000004c0)=0x7, 0x0, 0x9, 0x80000000, 0x8, 0x8, 0x13, 0x100000001}}], 0x58}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m42.452340859s ago: executing program 2 (id=990): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x48010) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x100006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000010001000800000001000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="20d03ffcb1ef5bb605000000001b000000000000000000000000000021628496eb644b46225a6b3ff3c32e1bc3223b792d3bde8987545b706751bf09e8a41daae345dce99a62912d16062917157a79431eb0dc421b78ca5448171b3f9b92cb114a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x4ea4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011186809", 0x15}], 0x1) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r6]) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='[,\x00', &(0x7f0000000140)=',-\x10*\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4) close(r0) 2m42.242506904s ago: executing program 2 (id=994): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}], 0x20) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2, 0x36f, &(0x7f0000000340)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x15, r2, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000200), 0x1004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_COOKIE(r6, 0x1, 0x4b, &(0x7f0000000100), &(0x7f0000000140)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xbffffffffffffffb}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="cd000000000000000000000000000000000000007af8b9c9ba92a0024f870c8634b77013f35d0fae20b6368b91915810bff3a47cdbcf158736f7e46c051d34c82a02608234b9ba242a6a0b2b0502883cdb871e637740fa383aed4ffc27a53c426c8f8bbe02dd2df48fefffe909f28262855742a8a76889288cf3e1ec0119ba33999d84c474b134f096f6cae47c688e89531620decd9160b4239c3c07eb897e604233bbd09115e2581e3af4a067175af25204203dcb23a21998640ac2805822aee08086592e054580dd67c4bf03bb6c24c7ae18c5a85676830b7652c755ba", @ANYRES32=r8, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[], 0x10}}, 0x0) getpeername$packet(r9, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0xc, &(0x7f0000000b40)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES16=r5, @ANYBLOB="8685cf2774eb7f0e7acdb58bdd0e9fcecda2b2f3c18b5cf115a682caaa1ac6ea4477b2b8239b49b7d679522f6d9dd30754597979c6997c541319788bd524a002b7dfd750c440c585255d4ec614dd83ce0306149e7d4688022ddf0dbae1453db8ee67ce6aec2ece54e69f18a1f7637010a7bbbef7c992767c4a3eb8b1c8cc"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', r12, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000380)=""/137, 0x89, 0x0, &(0x7f0000000140)=""/85, 0x55}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x5}, @mss={0x2, 0xfffffffb}, @mss={0x2, 0x4}, @timestamp], 0x4) 2m41.089146426s ago: executing program 2 (id=1004): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xfffffffffffffffa}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500f0e66f1500000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000", @ANYRES32=r3], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m40.705733563s ago: executing program 2 (id=1007): symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) 2m40.674387764s ago: executing program 32 (id=1007): symlink(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) 2m27.454301841s ago: executing program 3 (id=1243): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0x4, 0x4}, 0x6) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r1, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r7, 0x0, 0x3}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x2, 0x0) 2m26.581504228s ago: executing program 3 (id=1264): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 2m25.708966655s ago: executing program 3 (id=1282): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_unlink(&(0x7f0000000380)='\x00') 2m25.641379136s ago: executing program 3 (id=1285): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}], 0x20) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2, 0x36f, &(0x7f0000000340)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x15, r2, 0x0, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000200), 0x1004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_COOKIE(r6, 0x1, 0x4b, &(0x7f0000000100), &(0x7f0000000140)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xbffffffffffffffb}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="cd000000000000000000000000000000000000007af8b9c9ba92a0024f870c8634b77013f35d0fae20b6368b91915810bff3a47cdbcf158736f7e46c051d34c82a02608234b9ba242a6a0b2b0502883cdb871e637740fa383aed4ffc27a53c426c8f8bbe02dd2df48fefffe909f28262855742a8a76889288cf3e1ec0119ba33999d84c474b134f096f6cae47c688e89531620decd9160b4239c3c07eb897e604233bbd09115e2581e3af4a067175af25204203dcb23a21998640ac2805822aee08086592e054580dd67c4bf03bb6c24c7ae18c5a85676830b7652c755ba", @ANYRES32=r8, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[], 0x10}}, 0x0) getpeername$packet(r9, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a80)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x4, 0xc, &(0x7f0000000b40)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES16=r5, @ANYBLOB="8685cf2774eb7f0e7acdb58bdd0e9fcecda2b2f3c18b5cf115a682caaa1ac6ea4477b2b8239b49b7d679522f6d9dd30754597979c6997c541319788bd524a002b7dfd750c440c585255d4ec614dd83ce0306149e7d4688022ddf0dbae1453db8ee67ce6aec2ece54e69f18a1f7637010a7bbbef7c992767c4a3eb8b1c8cc"], 0x0, 0x100, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', r12, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000380)=""/137, 0x89, 0x0, &(0x7f0000000140)=""/85, 0x55}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x5}, @mss={0x2, 0xfffffffb}, @mss={0x2, 0x4}, @timestamp], 0x4) 2m25.402500541s ago: executing program 3 (id=1289): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 2m24.93532506s ago: executing program 3 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_unlink(&(0x7f0000000380)='\x00') 2m24.867334261s ago: executing program 33 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mq_unlink(&(0x7f0000000380)='\x00') 2m22.744792663s ago: executing program 5 (id=1336): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) acct(0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x4000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 2m22.077854156s ago: executing program 5 (id=1342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 2m21.925460559s ago: executing program 5 (id=1343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) brk(0x800000000000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r6, 0x29, 0x8, 0x7f, 0xf, 0x37, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x40, 0x6, 0x8}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = dup2(r8, r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_enter\x00', r9}, 0x18) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58, 0x0, 0x1}, 0x28) kcmp(0x0, 0x0, 0x1, r3, 0xffffffffffffffff) 2m21.86263538s ago: executing program 5 (id=1345): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{0x3, 0x0, {0x1, 0xf0, 0x2}, {0x3ca1d9a9d3f903f4, 0xff, 0x2}, 0xff, 0xff}], 0x20) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x2, 0x36f, &(0x7f0000000340)="$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") mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x15, r2, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000200), 0x1004) 2m21.149929144s ago: executing program 5 (id=1354): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0xfffffffe) 2m20.879543319s ago: executing program 5 (id=1365): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = socket(0x2, 0x2, 0x1) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8459}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xb}}}, 0x24}}, 0x800) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) 2m20.83828574s ago: executing program 34 (id=1365): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r3 = socket(0x2, 0x2, 0x1) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x8459}, 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0xb}}}, 0x24}}, 0x800) mount$9p_fd(0x0, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000003c0), 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB=',loose,access=client,access=any,version=9']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) 2.374299244s ago: executing program 4 (id=3631): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.251156096s ago: executing program 4 (id=3635): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r2, 0xffffffffffffffff, 0x0) 2.200339517s ago: executing program 4 (id=3640): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") io_uring_enter(0xffffffffffffffff, 0x4705, 0xfffffffc, 0x1, 0x0, 0xa) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 2.110811729s ago: executing program 4 (id=3642): r0 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0xe) ftruncate(r0, 0x2007ffc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) read$watch_queue(r6, 0x0, 0x0) 1.926071383s ago: executing program 6 (id=3644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 1.822033504s ago: executing program 6 (id=3645): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010027bc7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="68680538062b95f0ba72691c3f03"], 0x1c}}, 0x0) 1.776889125s ago: executing program 6 (id=3646): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x3, 0x87) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x1b) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f", 0x9f}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}, {0x0}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r3, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 1.745446606s ago: executing program 7 (id=3648): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="0200000001000000000000000400050000000000100000000000000020"], 0x24, 0x3) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 1.693027807s ago: executing program 6 (id=3649): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x3, 0x87) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x1b) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f", 0x9f}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}], 0x1}}], 0x3, 0x2000c044) sendto$inet(r3, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 1.592110669s ago: executing program 6 (id=3651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r1, 0xffffffffffffffff, 0x0) 1.54145912s ago: executing program 6 (id=3652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="bb69008a700400000000000000"], 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x1, 0x1, 0x0, 0x101, {{0x10, 0x4, 0x3, 0x11, 0x40, 0x68, 0x0, 0xe9, 0x4, 0x0, @remote, @multicast1, {[@generic={0x82, 0xa, "04afc3ba93446b43"}, @lsrr={0x83, 0x1f, 0xf2, [@dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @local, @private=0xa010101, @private=0xa010101, @broadcast]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085007dd1bd711b25a7a800f3a5d217bca326fc023237fe1e125869d60d4cf17433d6095a2d92ae8af7ba2bde7c556c1781ab3b4c2e19c8c131a746a36473329e396ef0f59d0b824bd11c7688ece2a28a01659df75b6794e6afeb6164970150ea1de789f10e80e30fa6d596d7f4a1708881445d15ab94c03c4afc66d49eb0bec255c17924647a85028dd28e646903094e8ec736021ac330326d913df267884c263d167568fcc7911e029079ebb7172ba7571a61a7bbae1f9a484c3652ee2ddcc816f8870c86310fb6c3a5a74ef4e8dac6aa5691f9d8cb51f403aa2b4058d3dbafcf10c40902390b7068846fad24f38b244970187eb27455b2a53f64d862040a6a98c401e7dbb1822f3c5560005c9287eb4f0ba6ce746de1a37c3091eb7ba98e26", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000f40), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10024a5b8a4000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000", @ANYRESDEC=r4, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r1, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000440)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x23, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x63}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='syzkaller\x00', 0x7, 0xc0, &(0x7f0000000b40)=""/192, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000c40)=[r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000c80)=[{0x3, 0x2, 0x1, 0x4}, {0x5, 0x5, 0x1, 0x3}, {0x4, 0x4, 0x7, 0x3}, {0x5, 0x3, 0x2, 0x4}, {0x1, 0x5, 0x6, 0x3}, {0x0, 0x5, 0xf, 0x7}, {0x4, 0x3, 0x0, 0x3}], 0x10, 0x80}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0x10001, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f00000000c0)={0x88, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}, 0x10) stat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) flock(r3, 0x1) 1.402808823s ago: executing program 7 (id=3654): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) 1.294468464s ago: executing program 7 (id=3657): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="1171eb4845b76325e7e71446fac0eed3ac08197f4f0dd0f388f2f66e1adf1b0c7a7cb8407f", 0x25}, {&(0x7f0000000240)="4937b1586f71d18fd766dec3ea176aff8446a61e722ffee2669bf2219c648543a984082ca98f1376f42eaa2ed7d73e26737187ab9ba918c559dd", 0x3a}, {0x0}], 0x4b}, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 1.214007247s ago: executing program 0 (id=3658): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x2e37, &(0x7f0000000240)={0x0, 0x69e1, 0x10000, 0x0, 0x295, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r2, 0x567, 0xa1ff, 0x42, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVed:\xc4e', 0x0) ustat(0xd, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT, @ANYRESHEX], 0x3, 0x7dc, &(0x7f0000000d80)="$eJzs3U9sHGcVAPC3rt0EF0VVqdIQpekkLVIqpe563bpYPbTb9diedr1r7a6RI0Bt1DiVFaetWipoDoRcWkBFiBPHwrU3LgiEBBIH4IRED1y4VeoJFQQSAiEko5nddfxnbSfN37a/nxXP55k3871vPJm3Y3tmAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIUm26XB4vRT1rLC4l2wxFRHJvL3Z+2+K1tbW1bqu/vd9smuzSb0Qp/xf798eh7qxD915efDD/dDyOdL86Evvzyf64cNfBu5/8wvBQf/3tCV+zY1cYV4r4Tp7UudOrq8uv3YBEbqLv/2q3pcODZv6n+L7Ppo2s3czmq7NpkrWbydTkZPnRuZl2MpPV0/apdiedT2qttNpptpITtYeT8ampiSQdO9VcbMxOV+tpf+YTj1TK5cnk2bGLEdFuNh59dqxdm8vq9awxW8RUyt+MPOaJpDbdei7rJJ20Op8kZ1dWlyf2Gl0eNL7L8iMP3f3hGx/8c2U5PyB3Cir1DszK+HilMj75+NTjT5TLw5VyZfOM8haxHhFDEXnEDTlouX0Up8zdXJ8TN1wHQ736H/XIohGLsRTJgI+RqMV0tKIZ8/nXfx7ZFtHTr/9fevRvf9yt3431v1/lD11efDiK+n+0+9XRner/wFyv58dQL5+dlr8eb8aFOBenYzVWYzleu+EZXePH0BVHHvv8FUTNRhqNyKIdzchiPqrFnKQ3J4mpmIzJKMfzMRcz0Y4kZiKLeqTRjlPRjk6kxRFVi1akUY1ONKMVSZyIWjwcSYzHVEzFRCSRxlicimYsRiNmYzqqxVbOxkqx3ye25HXw2y/88qU/ffhu3l4PGt9lIKX8xVwe9I9dgraV+yuv/2vRi1D/P+uu8xkcPr61fv0HAAAAPrVKxU/f8+v/kbi/aM1k9fSrtzotAAAA4DoqfvN/JJ+M5K37o5Rf/5cHRL5/03MDAAAAro9ScY9dKSJG44Fuq3+71KAfAgAAAACfQMXv/4/mk9GIi8UM1/8AAADwKfPdnZ6x/0H/GbvthX2lX/89Wq2R0qWFpYdK56t5XPX8Hd31epOvrG+xM3O4tD+6Gym2NTl84a5SRAzX0iOl/tMv/7evO/2o+Hx4eH31nZ71X9qSwPoad2wdUp7AgQtbEjhYdPxOHOvGHDvTnZ7pxfWeSDw6k9XTsVqz/mTxSMT8X+eNl1e+FcXwv9eYP1CKsyury2MvvrJ6psjlUr6VS+d7D1Dc9hzFwbkUPa719kDcP3jEI8WNGL1+R7v9ljd+A4aeLlYf2r3P0sY+34rj3Zjjo93p6Obx78/7HB97cjyq1QNDnXSp88bahtH3shi/xpG/FQ92Yx488WB3MiCLyqYsXt6eRWVjFr2dsMe+2DOLkd6B9e6xi0v/+l2zlE7slcXEliz2X2UWALfK2eKpP5er0OeKKvTfta68/l+uu0k3oKd3lrtvfVP5Wa5fBrac5c7G+pL++htq3XBsq+5bX17Ell52OKOf6Mac6L6eGD48oK6UB5zRX1159fe9M/pj7/34J18/+oefffzq9l483I3pTeKe3+5QY/Mx/6AxP9rf6NJTvcZPd+y3Xa+UYiTijm+cfzUOvv7mhUdWzp9+afml5ZcrlYnJ8mPl8uOVGCleKvQmag8AA+z9Hjt7RpQe2+Oq+p71PykYixfjlViNM3GyuNsgIh4YvNXRDX+GcDKOR3GxvMNV6+iGd3g5uce15eXYyvbY/uuKbbETG/bYfT8qJv++gd8UALjBju9Rh6+k/p/c47p7cy3fcnUcO9fyQb58Q/cGAHw2pK2PSqOdt0utVrbw/PjU1Hi1M5cmrWbtuaSVTc+mSdbopK3aXLUxmyYLrWanWev/4Hg6bSftxYWFZquTzDRbyUKznS0V7/ye9N76vZ3OVxudrNZeqKfVdprUmo1OtdZJprN2LVm485l61p5LW8XK7YW0ls1ktWonazaSdnOxVUvHkqSdpsnCYj8wm04bnWwmy5uNZKGVzVdblyKivjifJtNpu9bKFjrN1hfzDdaaUfSVNWaarflis2Pbh//Xm72/AeB28PqbF86dXl1dfm1z40BsnbOlMRxF4y+7xfQbt3qMAMBmqjQAAAAAAAAAAAAAANz+tt+ul8/d85a+QY19cfVr7Yur6uIaG/nQenPe+fnXXvzYI/1kNPLh3QZp3NrGC089dW6nmGcuHpq7su0M/p8y6FbXtw9E3PmLH3bnPH2zRvr+5QP7alZfK+0Sc2vPSwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwyP8DAAD//82FVnI=") stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)) pipe2$9p(&(0x7f0000000000), 0x84880) lstat(&(0x7f0000000440)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x3004086, &(0x7f0000000240)={[{@name={'name', 0x3d, '-'}}]}) 1.213577617s ago: executing program 4 (id=3660): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf64(r0, 0x0, 0x5b0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_uring_setup(0x5577, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") 1.132214238s ago: executing program 7 (id=3661): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2800050, &(0x7f0000003240)=ANY=[], 0x6, 0x33c, &(0x7f0000000340)="$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") r0 = gettid() r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6}]) io_pgetevents(0x0, 0x8001, 0x1, &(0x7f0000002940)=[{}], &(0x7f0000002980)={0x77359400}, &(0x7f0000002a00)={&(0x7f00000029c0)={[0x102]}, 0x8}) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f0000002d00)={0x32, 0x0, 0xffffffff}) creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$netlink(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{0x0}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r8, @ANYRESHEX=r10]) ioctl$SG_IO(r10, 0x2285, &(0x7f00000007c0)={0x53, 0xfffffffffffffffe, 0x1d, 0x8, @scatter={0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f0000000140)}, {&(0x7f0000000280)=""/52, 0x34}]}, &(0x7f00000003c0)="cf61e53071fd48b61e599944c3c3ed085b5e09ea8b42df7230fddda218", &(0x7f0000000400), 0x5, 0x0, 0x0, &(0x7f0000000440)}) socket$inet6_tcp(0xa, 0x1, 0x0) 1.069746939s ago: executing program 1 (id=3662): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r1, 0xffffffffffffffff, 0x0) 1.055894089s ago: executing program 0 (id=3663): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x64, r7, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r8}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r11 = syz_clone(0x80000400, &(0x7f00000004c0)="05cbf773d813d2ee023d9a193a499df4a785956135808692f0b532dad9035b4b1a050c60144c5af66b33884ff9de68459585fc4a731bff7d5fc359a230ffb470bf5e394daa6a14f143fcee9892bb5c9979955b583014a0634e30bb6f697797022dd49873f3fdf776e84daeb7a53efe87aa745e63974cf273d5f12c9a38910f7b42a21fb0e398b82327862135393e1cb5e8fbab6005a655a474a3e61caa2e7740f29aa565baaa725b680fe376d4c6922d045bd56c885ad4d3ea9f24da4eef9f3113b38eb9caa33388", 0xc8, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000380)="b536e9") sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x23a, 0x0, 0x0, 0x0) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000b00)={'\x00', 0xffd1, 0x7, 0x8001, 0xad, 0x0, r11}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) tgkill(0x0, 0x0, 0x13) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r13, &(0x7f0000000440)={0x1d, r14}, 0x10) 682.096787ms ago: executing program 1 (id=3664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r7 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000080)=0x80, 0x0) sendto(r7, &(0x7f0000000180)="afc6a4614ac70bb405a12a50e71d74b461002e7d65fcf076f313ee16c846d8f5f67e6f05033358a61370396c0f18e67f762b649b97e36d3c9cb883d5bf63bdfdd00f975c74e2ed2692a2b2909de9c3bbc95fd7c1655e6c02d2d392ec4ff1ed31d4b7d3ea83b1a5317be6b93337b59013", 0x70, 0x4, &(0x7f0000000280)=@x25, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_rdma(0x0, &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600), 0x2800004, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=r']) 487.63456ms ago: executing program 7 (id=3665): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e030800bfff"], 0xffdd) 395.637982ms ago: executing program 1 (id=3666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 340.505033ms ago: executing program 7 (id=3667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x53, &(0x7f0000000600)=""/83}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x10020, 0x0, 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x86dd, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd29, 0xfffffffe, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x1, 0x0, 0x2, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434) 332.535753ms ago: executing program 1 (id=3668): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010027bc7000fcdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="68680538062b95f0ba72691c3f03"], 0x1c}}, 0x0) 255.114585ms ago: executing program 0 (id=3669): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) 254.271585ms ago: executing program 4 (id=3670): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000200)=0xc) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x30e043, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB=',usrquota,uid=', @ANYRESHEX, @ANYBLOB=',smackfsroot=[}/}/,sync,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f747970653d2c736d61636b66737472616e736d7574653d2f2b2428255c2a2d402b2d2d3a2527248f262f2a7d2d5e7d602f2d25d95b2c2c6673636f6e746578743d73797374656d5f752c657569643d", @ANYRESDEC=r1, @ANYBLOB=',smackfshat=\x00,pcr=00000000000000000033,\x00']) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) r5 = syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x100c806, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@dax_inode}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$eJzs3c1vVFUbAPDnTD9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFoIUaGiNFk0oCW5MjBtjTFy5EP8LJbJlpW5cuHFlSIgaliaOudM7pdPeaenH9Fbm90uGnnvu3J5zpzxzzj1zzp0A2tZg9k8lYn9ETKeI/jS/uK8z8p2DC8978OeHZ7NHimr1td9TpDyv/vyU/+zLD+6JiB++T7GvY2W5M3PXLo5PTU1ezbeHZy9ND8/MXTt84dL4+cnzk5dHXxg9cfzY8RMjRzZ0XtcL8k7ffOe9/o/H3vz6y7/SyDe/jKU4GS/nT1x6HltlMAZrr0lauavvxFYXVqLOZdtpeQY7Vkf+9+uKiCeiPzqW/DX746NXSq0c0FLVFFEF2lRaR/xnvYVW1gXYTvV+QP3afvl1cKWUXgmwHe6fWhgAWBn/nQtjg9FTGxvY/SA1jPOkiNjYyFyjPRFx987YzXN3xm5Gi8bhgGLzNyLiyaL4T7X4H4ieGKjFf6Uh/rN+wZn8Z5b/6gZ7CsuHisU/bJ+F+O9ZNf6jSfy/tST+395EHfJLkeu9DfHf6+oDAAAAAAAA1un2qYh4vujz/8ri/J8omP/TFxEnt6D8wWXbKz//r9zbgmKAAvdPRbxUOP+3Uv/8faAjT/2nNh+gK527MDV5JCL+GxGHomtXtj2yShmHP9n3RbN9g/n8v/ojK/9uPhcwr8e9zl2Nx0yMD45v9ryBiPs3Ip4qnP+bFtv/VND+Z+8H049Yxr5nb51ptm/t+AdapfpVxMHC9v/hXSvS6vfnGK71B4brvYKVnv7g02+blb/R+HeLCdi8rP3fvXr8D6Sl9+uZWfXXzRdlHp3rrDY7YGP9/9nx7vR67a5C3Xne++Ozs1dHIrrT6Y4styF/dK1XAR4zPxVn1+OhHi9Z/B96ZvXxv6L+f29BsKc/GtcU1/3/775fm1VT/x/Kk8X/xLra//UnRm8NfNes/Edr/4/V2vpDeU7W/rfuFYF/j8/rYdrdmF8Qjp1Fu7a7vgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwOKhExJ5IlaHFdKUyNBTRFxH/i92VqSszs8+du/Lu5YlsX+37/yv1b/rtX9hOte//r2Tph9uj0bh9NCL2RsRnHb217aGzV6Ymyj55AAAAAAAAAAAAAAAAAAAA2CH6mqz/z/zWUXbtgJbrLLsCQGkK4v/HMuoBbD/tP7SvDcV/mt/6igDbTvsP7Uv8Q/sS/9C+xD+0L/EP7WrZOH4qqx4AAAAAAMAW2Xvg9s8pIuZf7K09Mt35vq5Sawa0WqXsCgClcYsfaF+m/kH7co0PrDXrt6fpQZuZLzx9dhMHAwAAAAAAAAAAAEDbObjf+n9oV9b/Q/uy/h/aV339/4GS6wFsP9f4QKyxkr9w/f+aRwEAAAAAAAAAAAAAW2mmuitiamry6szctYvjLUt0R0SLi9h04o2dUY2iRG+LfnO1Wr2e/S8o/QQfj0R9KvxOqc+yRH2t36MdVd57EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OifAAAA//8sxicA") r6 = semget$private(0x0, 0x1, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001080)={{0x1, 0x1, 0x18, r5, {0x0, 0xee01}}, './file0\x00'}) r8 = getgid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000010c0)={{{@in6=@private1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f00000011c0)=0xe8) r10 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r10, 0x0, 0x0, 0x1, 0x3000) msgsnd(r10, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(r10, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000680)={{0x3, r11, r12, r13, r14, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r15}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000001200)={{0x0, r7, r8, r9, r12, 0x1c0, 0x8}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc213}) r16 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r17 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r17, 0x29, 0x22, &(0x7f0000000200)=0x4, 0x4) r18 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r18}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="9741aeafd9328b16a1fab54ff981b3c48fa68196ff6bd653a8868a2ae7cdcccddf4fb6f813de5a29c111a36100b9bab8efcccaa21a4c7292b3af2791bcb3697aa138bdb680d988520f5533a4c846e93c71ceebe4c4123eebc071b512d89d26010334b17d886f4cd4041994aed711622245da100e82d7b1ba6ec54bdd1c876aca03e941e0d420d0868467560a4971affa30e9c3ec6d64f26f32149eb73358aacd6c0c529d31118b9753a07804840bedc84aebcc6dd5ae6af7c68b8733ceb9ba2a547368cfef1473728e5d4688b514785560fb3401", 0xd4}, {&(0x7f0000000140)="5227fdccaefa41dc075c3c74e6cd0032cd5bcb06e46b39aae23872c617d3067082d98d8c87e7c0643e2075d04ec5e5feaf6a30bb5711d3c73f69e4cfdf5f95f6f4694ae1628796273e7fa784bd6544021b89ca41f5ef8e62dcb2e0c22950ebb8cf9724fe1c52a54db146f005e6457af3da4e32425b4d49e94d3abb11e29e4e97bf2b2c13dac5cc75c710404e0289e294329f18a770e35a9bf5f76cb92bba8051d22202752c062b77d9d946982f80", 0xae}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, r8}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r16, r17]}}, @rights={{0x14, 0x1, 0x1, [r18]}}], 0xd8, 0x44090}, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 173.507957ms ago: executing program 1 (id=3671): socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3700, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x1, 0x0, 0x3, 0x0}) 141.064417ms ago: executing program 0 (id=3672): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0xa, 0x3, 0x87) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x1b) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r3, &(0x7f0000002700)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="1bc7a7fab25c4d096d13ab609699ccfad50f833b12f72e7d9a802d8457394031e7227a4d2e5133ed69e3195918c45d8b0ef7819b03d71ace368b2fd8c3db9191abc22ee97998989d915efcc43b63e353a9d8e8dfe21a31a73a4d908795b98c62b655664130a6af358e15446e3b497e599e062848ec62e3b3ead00bd921780434f1561243737f27a2bf98d708c1bf4fd2c2e3f8ea2617d0c69dc73c597a12ba4be2bb9439d7a518eac95b7b8776223bfefeed41d09154ce0983f0450acd463a6e3f8285a144a20dec45b607a1720ceb95883a14ea680f7f00d86053bec5d49bc08e692bd70c", 0xe5}, {&(0x7f0000001700)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4413f4292888a899117ec83cfbb17c52caa27a3b4f2621e6941138caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a104ada4362c43d54fce970e", 0xb1}, {&(0x7f0000000580)="55bbeefbb9a13c80e6527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd230aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57712a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b065896289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f389abdb6943940ad3a772bf4639838127bd4775b1", 0x92}, {&(0x7f00000001c0)="3e6069e04318de6ead0334bb1e66cb4e88bc998b266287091cf880dc0fb0e8b3bbdf8d45987e6302f1ac521b8e43d5135865c441efb1377fa4b4c9946f8ba2f5999ff4070213fdf5716b9c7992cc57adb3691cbe123cb43ed522a35874f4503d56d44c71c7ab62adc0", 0x69}, {&(0x7f0000000280)="b732b06fd220a6dc6eed5ff60b0ebbf5380f98d4a1811f9a17f9b79521cb5554695fb065f2d1ed1bef7971962733ea71dd2bceb1cd2fe48164a445f3bb9289533f5ed32a8dc3a17c7f13e93222784f53df2d7e9f7bf3d47fa6440da1de8ac26628a8e1da8150f1a1d8f56351c6c37d7ad2279ad7d1043400e2281c863c243979070cd1920b5bee99a922f970a6212dd6668cca002710d04c926de6e706ce3f", 0x9f}, {&(0x7f0000001940)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9ccb581431764476f92bc0dd581a715f7ff8cef23b35dceb96809ab4bfbc85cd9eed4820e2a821913e94ed62ce3b44103e31a82b7c14ea5dae6b42906b14cc21e24fcb7b255b5fd8b3d9eda621defc3f398cc545fb03d6549353921bb4a52b3230008f967ddc1ad8635d58667b82a58ec030a57d199f14b172133", 0xd2}, {&(0x7f0000002300)="0b41dae71fdbfbd927fcefd552617a67c06039347098f690358459d82800ee224faa7dcc81cff086255c05d8d5ee175f635bdb8853bf08b2605ada1c1cf8812456748282d57d86948df219e8422c2853df192f5fceb38fd57788af3fb5284e53393be844bac927edfb43d17da758dc2b9ad2fa87f8521a0f1889b362b32cef609d20392a2e680ae667158a9d831c6acd5854e2420a16ea245a7c26de40c041919f0de146884889aedac056c285012b270a78448caab41053c2017d15dafa284871f716173b8047f8b1ffdc5a8a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x11a}, {0x0}], 0x2}}], 0x3, 0x2000c044) sendto$inet(r3, &(0x7f00000004c0)="0003", 0x2, 0x16000000, 0x0, 0x0) 131.993457ms ago: executing program 1 (id=3673): mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) r2 = syz_io_uring_setup(0x2e37, &(0x7f0000000240)={0x0, 0x69e1, 0x10000, 0x0, 0x295, 0x0, r1}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_enter(r2, 0x567, 0xa1ff, 0x42, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVed:\xc4e', 0x0) ustat(0xd, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT, @ANYRESHEX], 0x3, 0x7dc, &(0x7f0000000d80)="$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") stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)) pipe2$9p(&(0x7f0000000000), 0x84880) lstat(&(0x7f0000000440)='./file0\x00', 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x3004086, &(0x7f0000000240)={[{@name={'name', 0x3d, '-'}}]}) 70.606439ms ago: executing program 0 (id=3674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=3675): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x79}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000e00)='ext4_unlink_enter\x00', r2}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x24008000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1c) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = open(0x0, 0x0, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000e40)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r7, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888be080000"], 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r11, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r12}, 0x4) kernel console output (not intermixed with test programs): 4) [ 208.189329][ T5292] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.246013][ T5292] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.307064][ T5292] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.353156][T11307] loop7: detected capacity change from 0 to 764 [ 208.372412][ T29] kauditd_printk_skb: 1377 callbacks suppressed [ 208.372427][ T29] audit: type=1326 audit(208.310:55831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.7.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f271032ec77 code=0x7ffc0000 [ 208.375577][T11307] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 208.378989][ T29] audit: type=1326 audit(208.320:55832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.7.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f271032d550 code=0x7ffc0000 [ 208.379025][ T29] audit: type=1400 audit(208.320:55833): avc: denied { read write } for pid=11306 comm="syz.7.2866" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.379094][ T29] audit: type=1400 audit(208.320:55834): avc: denied { open } for pid=11306 comm="syz.7.2866" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.379127][ T29] audit: type=1326 audit(208.320:55835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.7.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f271032e7eb code=0x7ffc0000 [ 208.379225][ T29] audit: type=1400 audit(208.320:55836): avc: denied { ioctl } for pid=11306 comm="syz.7.2866" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 208.528742][ T29] audit: type=1326 audit(208.330:55837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.7.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f271032d84a code=0x7ffc0000 [ 208.551661][ T29] audit: type=1326 audit(208.330:55838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.7.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f271032d84a code=0x7ffc0000 [ 208.574479][ T29] audit: type=1326 audit(208.330:55839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.7.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f271032d457 code=0x7ffc0000 [ 208.597561][ T29] audit: type=1326 audit(208.330:55840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.7.2866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f271033038a code=0x7ffc0000 [ 208.655137][ T5292] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.718631][T11307] cgroup: No subsys list or none specified [ 208.774882][ T5292] bridge_slave_1: left allmulticast mode [ 208.780607][ T5292] bridge_slave_1: left promiscuous mode [ 208.786370][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.814884][ T5292] bridge_slave_0: left allmulticast mode [ 208.820672][ T5292] bridge_slave_0: left promiscuous mode [ 208.826474][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.856045][ T3416] kernel write not supported for file /6/oom_adj (pid: 3416 comm: kworker/0:3) [ 208.877629][T11328] program syz.6.2871 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.033019][T11323] loop1: detected capacity change from 0 to 764 [ 209.053309][T11323] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 209.065329][ T5292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.077739][ T5292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.090443][ T5292] bond0 (unregistering): Released all slaves [ 209.105233][ T5292] bond1 (unregistering): Released all slaves [ 209.117251][T11308] lo speed is unknown, defaulting to 1000 [ 209.139450][T11323] cgroup: No subsys list or none specified [ 209.143509][T11335] lo: entered allmulticast mode [ 209.166986][T11334] loop6: detected capacity change from 0 to 512 [ 209.169064][T11308] lo speed is unknown, defaulting to 1000 [ 209.230024][T11334] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.278308][T11334] EXT4-fs (loop6): 1 truncate cleaned up [ 209.279636][T11341] loop1: detected capacity change from 0 to 736 [ 209.290850][T11334] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.306708][ T5292] hsr_slave_0: left promiscuous mode [ 209.312619][ T5292] hsr_slave_1: left promiscuous mode [ 209.318442][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.326064][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.338889][ T5292] veth1_macvtap: left promiscuous mode [ 209.344599][ T5292] veth0_macvtap: left promiscuous mode [ 209.350444][ T5292] veth1_vlan: left promiscuous mode [ 209.355853][ T5292] veth0_vlan: left promiscuous mode [ 209.446442][ T5292] team0 (unregistering): Port device team_slave_1 removed [ 209.456690][ T5292] team0 (unregistering): Port device team_slave_0 removed [ 209.491772][T11348] loop7: detected capacity change from 0 to 1024 [ 209.512655][T11348] EXT4-fs: Ignoring removed bh option [ 209.549447][T11348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.570586][T11333] lo: left allmulticast mode [ 209.601170][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.614473][T11308] chnl_net:caif_netlink_parms(): no params data found [ 209.641698][T11357] 9pnet_fd: Insufficient options for proto=fd [ 209.656178][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2878'. [ 209.740127][T11308] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.747434][T11308] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.754959][T11308] bridge_slave_0: entered allmulticast mode [ 209.761780][T11308] bridge_slave_0: entered promiscuous mode [ 209.765265][T11367] program syz.6.2881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.771458][T11308] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.784213][T11308] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.791694][T11308] bridge_slave_1: entered allmulticast mode [ 209.798276][T11308] bridge_slave_1: entered promiscuous mode [ 209.845765][ T5292] IPVS: stop unused estimator thread 0... [ 209.846770][T11308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.862647][T11308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.897011][T11308] team0: Port device team_slave_0 added [ 209.913560][T11308] team0: Port device team_slave_1 added [ 209.960070][T11308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.967238][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.993769][T11308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.008057][T11308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.015147][T11308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.041289][T11308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.101998][T11372] 9pnet_fd: Insufficient options for proto=fd [ 210.127491][T11308] hsr_slave_0: entered promiscuous mode [ 210.133649][T11308] hsr_slave_1: entered promiscuous mode [ 210.154658][T11357] loop1: detected capacity change from 0 to 764 [ 210.208259][T11357] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 210.291071][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.332439][T11372] loop6: detected capacity change from 0 to 764 [ 210.374109][T11357] cgroup: No subsys list or none specified [ 210.383590][T11372] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 210.452274][T11372] cgroup: No subsys list or none specified [ 210.574077][T11308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.596158][T11308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.622557][T11308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.654781][T11308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.772771][ T1783] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 210.792206][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2896'. [ 210.804998][T11308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.897397][T11308] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.924811][ T1783] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.931966][ T1783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.933366][T11424] loop1: detected capacity change from 0 to 736 [ 210.952035][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.959277][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.980844][T11426] lo: entered allmulticast mode [ 211.012729][T11426] loop6: detected capacity change from 0 to 512 [ 211.033981][T11426] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 211.067040][T11426] EXT4-fs (loop6): 1 truncate cleaned up [ 211.073083][T11426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.134326][T11425] lo: left allmulticast mode [ 211.141800][T11308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.152964][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.352211][T11308] veth0_vlan: entered promiscuous mode [ 211.361418][T11308] veth1_vlan: entered promiscuous mode [ 211.423138][T11308] veth0_macvtap: entered promiscuous mode [ 211.431801][T11308] veth1_macvtap: entered promiscuous mode [ 211.444942][T11308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.455250][T11308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.500991][ T1783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.549400][ T1783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.634551][ T5295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.698089][ T5295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.874419][T11464] loop7: detected capacity change from 0 to 1024 [ 211.882163][T11464] EXT4-fs: Ignoring removed bh option [ 211.891182][T11475] loop6: detected capacity change from 0 to 512 [ 211.916265][T11475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.940497][T11464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.970178][T11475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2912: corrupted inode contents [ 211.988310][T11475] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2912: mark_inode_dirty error [ 212.016042][T11464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2909'. [ 212.028156][T11475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2912: corrupted inode contents [ 212.050069][T11487] 9pnet_fd: Insufficient options for proto=fd [ 212.112968][T11475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2912: corrupted inode contents [ 212.128717][T11490] loop1: detected capacity change from 0 to 512 [ 212.145763][T11475] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2912: mark_inode_dirty error [ 212.159849][T11475] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2912: corrupted inode contents [ 212.191568][T11490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.210061][T11490] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2917: corrupted inode contents [ 212.225103][T11490] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2917: mark_inode_dirty error [ 212.250031][T11490] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2917: corrupted inode contents [ 212.263225][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.291620][T11490] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2917: corrupted inode contents [ 212.315790][T11490] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2917: mark_inode_dirty error [ 212.330497][T11490] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2917: corrupted inode contents [ 212.390571][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.406285][T11497] 9pnet_fd: Insufficient options for proto=fd [ 212.451030][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2919'. [ 212.627698][T11497] loop6: detected capacity change from 0 to 764 [ 212.658195][T11497] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 212.691997][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.744791][T11497] cgroup: No subsys list or none specified [ 212.778325][T11520] rdma_rxe: rxe_newlink: failed to add bond0 [ 212.824274][T11513] pim6reg: entered allmulticast mode [ 212.870454][T11513] pim6reg: left allmulticast mode [ 212.899296][T11330] kernel write not supported for file /774/oom_adj (pid: 11330 comm: kworker/0:5) [ 212.904141][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2927'. [ 212.971396][T11526] loop6: detected capacity change from 0 to 512 [ 213.020936][T11526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.035306][T11529] loop7: detected capacity change from 0 to 764 [ 213.046391][T11529] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.094993][T11519] cgroup: No subsys list or none specified [ 213.096505][T11526] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2928: corrupted inode contents [ 213.113119][T11531] 9pnet_fd: Insufficient options for proto=fd [ 213.122159][T11526] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2928: mark_inode_dirty error [ 213.167178][T11526] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2928: corrupted inode contents [ 213.219482][T11526] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2928: corrupted inode contents [ 213.232791][T11526] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2928: mark_inode_dirty error [ 213.249140][T11526] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2928: corrupted inode contents [ 213.265090][T11540] loop1: detected capacity change from 0 to 764 [ 213.274494][T11540] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 213.299503][T11542] loop7: detected capacity change from 0 to 1024 [ 213.307940][T11542] EXT4-fs: Ignoring removed bh option [ 213.314305][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.336019][T11542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.336922][T11531] cgroup: No subsys list or none specified [ 213.373862][ T29] kauditd_printk_skb: 1992 callbacks suppressed [ 213.373877][ T29] audit: type=1400 audit(213.350:57833): avc: denied { prog_run } for pid=11541 comm="syz.7.2933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.400440][ T29] audit: type=1400 audit(213.350:57834): avc: denied { map_create } for pid=11550 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.406855][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2933'. [ 213.418765][ T29] audit: type=1400 audit(213.350:57835): avc: denied { prog_load } for pid=11550 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.418797][ T29] audit: type=1400 audit(213.350:57836): avc: denied { bpf } for pid=11550 comm="gtp" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.418848][ T29] audit: type=1400 audit(213.350:57837): avc: denied { prog_load } for pid=11550 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.418876][ T29] audit: type=1400 audit(213.350:57838): avc: denied { bpf } for pid=11550 comm="gtp" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.462589][T11554] loop1: detected capacity change from 0 to 736 [ 213.465543][ T29] audit: type=1400 audit(213.350:57839): avc: denied { perfmon } for pid=11550 comm="gtp" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 213.530080][ T29] audit: type=1400 audit(213.350:57840): avc: denied { map_create } for pid=11550 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 213.548225][ T29] audit: type=1326 audit(213.350:57841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11541 comm="syz.7.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271032ebe9 code=0x7ffc0000 [ 213.571390][ T29] audit: type=1326 audit(213.350:57842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11541 comm="syz.7.2933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271032ebe9 code=0x7ffc0000 [ 213.677334][T11557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 213.677586][T11554] IPVS: stopping master sync thread 11557 ... [ 213.774260][T11563] loop1: detected capacity change from 0 to 1024 [ 213.781698][T11563] EXT4-fs: Ignoring removed bh option [ 213.797829][T11563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.872600][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2938'. [ 214.055756][T11538] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2932'. [ 214.070287][T11544] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2934'. [ 214.088554][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.112209][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.151782][T11577] loop1: detected capacity change from 0 to 736 [ 214.266613][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 214.330070][T11593] loop6: detected capacity change from 0 to 512 [ 214.345593][T11593] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.360195][T11593] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2945: corrupted inode contents [ 214.372196][T11593] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2945: mark_inode_dirty error [ 214.383867][T11593] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2945: corrupted inode contents [ 214.400125][T11593] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2945: corrupted inode contents [ 214.412325][T11593] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2945: mark_inode_dirty error [ 214.423999][T11593] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2945: corrupted inode contents [ 214.454157][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.458246][T11597] FAULT_INJECTION: forcing a failure. [ 214.458246][T11597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.476323][T11597] CPU: 1 UID: 0 PID: 11597 Comm: syz.7.2946 Not tainted syzkaller #0 PREEMPT(voluntary) [ 214.476361][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.476374][T11597] Call Trace: [ 214.476383][T11597] [ 214.476392][T11597] __dump_stack+0x1d/0x30 [ 214.476416][T11597] dump_stack_lvl+0xe8/0x140 [ 214.476439][T11597] dump_stack+0x15/0x1b [ 214.476491][T11597] should_fail_ex+0x265/0x280 [ 214.476528][T11597] should_fail+0xb/0x20 [ 214.476553][T11597] should_fail_usercopy+0x1a/0x20 [ 214.476582][T11597] _copy_from_user+0x1c/0xb0 [ 214.476620][T11597] ___sys_sendmsg+0xc1/0x1d0 [ 214.476747][T11597] __x64_sys_sendmsg+0xd4/0x160 [ 214.476801][T11597] x64_sys_call+0x191e/0x2ff0 [ 214.476829][T11597] do_syscall_64+0xd2/0x200 [ 214.476859][T11597] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.476887][T11597] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.476931][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.476955][T11597] RIP: 0033:0x7f271032ebe9 [ 214.476972][T11597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.476991][T11597] RSP: 002b:00007f270ed97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.477077][T11597] RAX: ffffffffffffffda RBX: 00007f2710565fa0 RCX: 00007f271032ebe9 [ 214.477093][T11597] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 214.477109][T11597] RBP: 00007f270ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 214.477146][T11597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.477186][T11597] R13: 00007f2710566038 R14: 00007f2710565fa0 R15: 00007ffc444452a8 [ 214.477203][T11597] [ 214.710781][T11604] lo: entered allmulticast mode [ 214.741462][T11601] program syz.6.2947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 214.761071][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 214.783997][T11603] lo: left allmulticast mode [ 214.920372][T11619] loop6: detected capacity change from 0 to 1024 [ 214.928617][T11619] EXT4-fs: Ignoring removed bh option [ 214.945864][T11619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.989462][T11624] 9pnet_fd: Insufficient options for proto=fd [ 215.030393][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 215.225292][T11632] program syz.1.2958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.550223][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.652763][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.660395][T11646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.687797][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.695376][T11646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.729605][T11638] loop1: detected capacity change from 0 to 128 [ 215.788436][T11330] kernel write not supported for file /793/oom_adj (pid: 11330 comm: kworker/0:5) [ 216.016411][T11645] loop7: detected capacity change from 0 to 764 [ 216.035621][T11645] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 216.082495][T11645] cgroup: No subsys list or none specified [ 216.160598][ T7397] kernel write not supported for file /795/oom_adj (pid: 7397 comm: kworker/0:4) [ 216.192748][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2972'. [ 216.330346][T11668] loop7: detected capacity change from 0 to 764 [ 216.355425][T11668] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 216.398597][T11668] cgroup: No subsys list or none specified [ 216.436547][T11676] SELinux: failed to load policy [ 216.458945][T11676] loop1: detected capacity change from 0 to 1024 [ 216.466856][T11676] EXT4-fs: Ignoring removed nobh option [ 216.472489][T11676] EXT4-fs: Ignoring removed bh option [ 216.485357][T11676] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 216.779028][T11683] loop6: detected capacity change from 0 to 1024 [ 216.787071][T11683] EXT4-fs: Ignoring removed bh option [ 216.797414][T11683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.873320][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2975'. [ 216.935880][T11692] 9pnet_fd: Insufficient options for proto=fd [ 216.982946][T11678] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2974'. [ 217.082399][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.261283][T11700] lo speed is unknown, defaulting to 1000 [ 217.309608][T11716] lo: entered allmulticast mode [ 217.317967][T11700] lo speed is unknown, defaulting to 1000 [ 217.345016][T11715] lo: left allmulticast mode [ 217.437738][T11725] program syz.1.2988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.466126][T11710] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2983'. [ 217.522933][T11730] loop7: detected capacity change from 0 to 128 [ 217.560483][T11732] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2990'. [ 217.613704][T11736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.621144][T11736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.629020][T11736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.636539][T11736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.771124][T11727] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2989'. [ 218.064147][T11753] loop1: detected capacity change from 0 to 512 [ 218.079263][T11753] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.094772][T11753] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2998: corrupted inode contents [ 218.107450][T11753] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2998: mark_inode_dirty error [ 218.120600][T11753] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2998: corrupted inode contents [ 218.139724][T11753] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2998: corrupted inode contents [ 218.152023][T11753] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.2998: mark_inode_dirty error [ 218.163753][T11753] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.2998: corrupted inode contents [ 218.196506][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.253357][ T7397] kernel write not supported for file /804/oom_adj (pid: 7397 comm: kworker/0:4) [ 218.267059][T11763] 9pnet_fd: Insufficient options for proto=fd [ 218.384717][ T29] kauditd_printk_skb: 1680 callbacks suppressed [ 218.384742][ T29] audit: type=1400 audit(218.340:59523): avc: denied { prog_load } for pid=11761 comm="syz.6.3001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 218.409756][ T29] audit: type=1400 audit(218.350:59524): avc: denied { bpf } for pid=11761 comm="syz.6.3001" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.429941][ T29] audit: type=1400 audit(218.360:59525): avc: denied { perfmon } for pid=11761 comm="syz.6.3001" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 218.542555][ T29] audit: type=1326 audit(218.360:59526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.7.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271032ebe9 code=0x7ffc0000 [ 218.565744][ T29] audit: type=1326 audit(218.390:59527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.7.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f271032ebe9 code=0x7ffc0000 [ 218.570877][T11773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 218.588834][ T29] audit: type=1326 audit(218.390:59528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.7.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271032ebe9 code=0x7ffc0000 [ 218.588871][ T29] audit: type=1326 audit(218.390:59529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.7.3000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f271032ebe9 code=0x7ffc0000 [ 218.644061][ T29] audit: type=1326 audit(218.440:59530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3617ebe9 code=0x7ffc0000 [ 218.667058][ T29] audit: type=1326 audit(218.440:59531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11761 comm="syz.6.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3617ebe9 code=0x7ffc0000 [ 218.679079][T11775] audit: audit_backlog=65 > audit_backlog_limit=64 [ 218.758760][T11763] loop6: detected capacity change from 0 to 764 [ 218.773012][T11771] loop7: detected capacity change from 0 to 764 [ 218.802163][T11771] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 218.817021][T11763] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 218.821965][T11771] cgroup: No subsys list or none specified [ 218.882991][T11763] cgroup: No subsys list or none specified [ 218.930398][T11786] loop7: detected capacity change from 0 to 512 [ 218.950935][T11789] program syz.6.3013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.958606][T11786] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.978432][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3011: corrupted inode contents [ 218.991038][T11786] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3011: mark_inode_dirty error [ 219.003017][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3011: corrupted inode contents [ 219.022959][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3011: corrupted inode contents [ 219.035112][T11786] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3011: mark_inode_dirty error [ 219.046658][T11786] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3011: corrupted inode contents [ 219.082507][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.127852][T11794] 9pnet_fd: Insufficient options for proto=fd [ 219.219888][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3017'. [ 219.367433][T11794] loop6: detected capacity change from 0 to 764 [ 219.390477][T11794] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 219.402320][T11814] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 219.415075][T11813] IPVS: stopping master sync thread 11814 ... [ 219.472130][T11818] loop7: detected capacity change from 0 to 128 [ 219.481190][T11818] ext4: Unknown parameter 'smackfsfloor' [ 219.500642][T11794] cgroup: No subsys list or none specified [ 220.004011][T11834] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 220.007637][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 220.016271][T11830] IPVS: stopping master sync thread 11834 ... [ 220.119130][T11843] loop7: detected capacity change from 0 to 1024 [ 220.127731][T11843] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 220.138698][T11843] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 220.151555][T11843] JBD2: no valid journal superblock found [ 220.157353][T11843] EXT4-fs (loop7): Could not load journal inode [ 220.170892][T11845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.178401][T11845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.187597][T11843] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 220.225951][T11841] 9pnet_fd: Insufficient options for proto=fd [ 220.235820][ T7397] kernel write not supported for file /120/oom_adj (pid: 7397 comm: kworker/0:4) [ 220.276072][T11849] loop7: detected capacity change from 0 to 512 [ 220.284698][T11849] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 220.297302][T11849] EXT4-fs (loop7): 1 truncate cleaned up [ 220.334864][T11851] loop1: detected capacity change from 0 to 764 [ 220.343046][T11849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.372956][T11851] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 220.480082][T11847] cgroup: No subsys list or none specified [ 220.498672][T11858] loop6: detected capacity change from 0 to 764 [ 220.509175][T11858] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 220.629480][T11841] cgroup: No subsys list or none specified [ 220.660952][T11868] FAULT_INJECTION: forcing a failure. [ 220.660952][T11868] name failslab, interval 1, probability 0, space 0, times 0 [ 220.673660][T11868] CPU: 1 UID: 0 PID: 11868 Comm: syz.0.3044 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.673696][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.673712][T11868] Call Trace: [ 220.673719][T11868] [ 220.673728][T11868] __dump_stack+0x1d/0x30 [ 220.673813][T11868] dump_stack_lvl+0xe8/0x140 [ 220.673838][T11868] dump_stack+0x15/0x1b [ 220.673860][T11868] should_fail_ex+0x265/0x280 [ 220.673890][T11868] ? __se_sys_mount+0xef/0x2e0 [ 220.673913][T11868] should_failslab+0x8c/0xb0 [ 220.673996][T11868] __kmalloc_cache_noprof+0x4c/0x320 [ 220.674059][T11868] ? memdup_user+0x99/0xd0 [ 220.674108][T11868] __se_sys_mount+0xef/0x2e0 [ 220.674131][T11868] ? fput+0x8f/0xc0 [ 220.674164][T11868] ? ksys_write+0x192/0x1a0 [ 220.674194][T11868] __x64_sys_mount+0x67/0x80 [ 220.674294][T11868] x64_sys_call+0x2b4d/0x2ff0 [ 220.674321][T11868] do_syscall_64+0xd2/0x200 [ 220.674360][T11868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.674465][T11868] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 220.674569][T11868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.674628][T11868] RIP: 0033:0x7f0a01c8ebe9 [ 220.674645][T11868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.674669][T11868] RSP: 002b:00007f0a006f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.674693][T11868] RAX: ffffffffffffffda RBX: 00007f0a01ec5fa0 RCX: 00007f0a01c8ebe9 [ 220.674709][T11868] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 220.674725][T11868] RBP: 00007f0a006f7090 R08: 0000200000000000 R09: 0000000000000000 [ 220.674741][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.674756][T11868] R13: 00007f0a01ec6038 R14: 00007f0a01ec5fa0 R15: 00007ffcbdbb40b8 [ 220.674811][T11868] [ 221.009008][T11862] loop1: detected capacity change from 0 to 764 [ 221.045874][T11862] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 221.109556][T11862] cgroup: No subsys list or none specified [ 223.089023][T11886] loop6: detected capacity change from 0 to 1024 [ 223.169181][T11886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.183685][T11886] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.247317][T11888] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3051'. [ 223.258634][ T36] kernel write not supported for file /1462/oom_adj (pid: 36 comm: kworker/1:1) [ 223.341116][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.374894][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3055'. [ 223.394172][ T29] kauditd_printk_skb: 1114 callbacks suppressed [ 223.394187][ T29] audit: type=1326 audit(223.360:60644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.4.3052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f5e4c40ebe9 code=0x7ffc0000 [ 223.483752][ T29] audit: type=1400 audit(223.370:60645): avc: denied { prog_load } for pid=11902 comm="syz.6.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 223.502500][ T29] audit: type=1400 audit(223.380:60646): avc: denied { bpf } for pid=11902 comm="syz.6.3057" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 223.522745][ T29] audit: type=1400 audit(223.380:60647): avc: denied { perfmon } for pid=11902 comm="syz.6.3057" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 223.543330][ T29] audit: type=1400 audit(223.380:60648): avc: denied { prog_load } for pid=11902 comm="syz.6.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 223.562270][ T29] audit: type=1400 audit(223.380:60649): avc: denied { bpf } for pid=11902 comm="syz.6.3057" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 223.582565][ T29] audit: type=1400 audit(223.390:60650): avc: denied { create } for pid=11902 comm="syz.6.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.583806][T11913] loop7: detected capacity change from 0 to 512 [ 223.601887][ T29] audit: type=1400 audit(223.400:60651): avc: denied { setopt } for pid=11902 comm="syz.6.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.601914][ T29] audit: type=1400 audit(223.400:60652): avc: denied { ioctl } for pid=11902 comm="syz.6.3057" path="socket:[34625]" dev="sockfs" ino=34625 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.609337][T11908] loop1: detected capacity change from 0 to 512 [ 223.627555][ T29] audit: type=1400 audit(223.400:60653): avc: denied { write } for pid=11902 comm="syz.6.3057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 223.688734][T11913] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 223.700938][T11913] EXT4-fs (loop7): 1 truncate cleaned up [ 223.707651][T11913] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.742461][T11908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.769407][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.826609][T11908] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3058: corrupted inode contents [ 223.845041][T11908] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3058: mark_inode_dirty error [ 223.863848][T11908] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3058: corrupted inode contents [ 223.885469][T11908] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3058: corrupted inode contents [ 223.891316][T11894] cgroup: No subsys list or none specified [ 223.907526][T11908] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3058: mark_inode_dirty error [ 223.933775][T11923] netlink: 'syz.6.3062': attribute type 3 has an invalid length. [ 223.941674][T11908] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3058: corrupted inode contents [ 224.055845][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.232116][T11938] loop7: detected capacity change from 0 to 1024 [ 224.326977][T11938] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 224.335597][T11938] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.348515][T11938] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.441877][T11942] program syz.4.3066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.618628][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 224.887685][T11959] loop6: detected capacity change from 0 to 512 [ 224.897567][T11959] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 224.918912][T11959] EXT4-fs (loop6): 1 truncate cleaned up [ 224.928582][T11959] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.969628][T11965] 9pnet_fd: Insufficient options for proto=fd [ 225.057955][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.096365][T11978] IPVS: set_ctl: invalid protocol: 255 0.0.0.0:20000 [ 225.182152][T11972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3079'. [ 225.270871][T11965] loop7: detected capacity change from 0 to 764 [ 225.427624][T11965] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 225.502610][T11965] cgroup: No subsys list or none specified [ 225.561307][T11994] loop6: detected capacity change from 0 to 764 [ 225.571714][T11996] loop7: detected capacity change from 0 to 736 [ 225.578853][T11994] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 225.590254][T11997] wireguard0: entered promiscuous mode [ 225.595936][T11997] wireguard0: entered allmulticast mode [ 225.617273][T11999] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 225.628470][T11996] IPVS: stopping master sync thread 11999 ... [ 225.660123][T11982] cgroup: No subsys list or none specified [ 225.828777][T12011] loop6: detected capacity change from 0 to 1024 [ 225.837643][T12011] EXT4-fs: Ignoring removed bh option [ 225.853035][T11992] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3086'. [ 225.876658][T12011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.043286][T12030] 9pnet_fd: Insufficient options for proto=fd [ 226.054584][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3093'. [ 226.066280][T12032] loop1: detected capacity change from 0 to 736 [ 226.125274][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.157048][T12032] IPVS: stopping master sync thread 12036 ... [ 226.222193][T12025] 9pnet: Could not find request transport: fd0x0000000000000006 [ 226.292604][T12047] program syz.0.3105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.545106][T12054] loop1: detected capacity change from 0 to 1024 [ 226.548199][T12025] loop7: detected capacity change from 0 to 764 [ 226.556024][T12054] EXT4-fs: Ignoring removed bh option [ 226.591980][T12025] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 226.645572][T12054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.674443][T12025] cgroup: No subsys list or none specified [ 226.739392][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 226.912156][T12086] 9pnet_fd: Insufficient options for proto=fd [ 227.068853][T12086] loop7: detected capacity change from 0 to 764 [ 227.092164][T12086] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 227.135147][T12086] cgroup: No subsys list or none specified [ 227.139835][T12089] program syz.6.3119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.200653][T12091] program syz.7.3120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.244909][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.351215][T12100] loop7: detected capacity change from 0 to 512 [ 227.386315][T12100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.421776][T12100] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3124: corrupted inode contents [ 227.436010][T12100] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3124: mark_inode_dirty error [ 227.453388][T12100] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3124: corrupted inode contents [ 227.499494][T12100] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3124: corrupted inode contents [ 227.516576][T12100] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3124: mark_inode_dirty error [ 227.528132][T12100] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3124: corrupted inode contents [ 227.554313][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.675724][T12117] loop6: detected capacity change from 0 to 1024 [ 227.788942][T12117] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 227.797960][T12117] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 227.811600][T12117] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.009934][T12124] IPVS: stopping master sync thread 12128 ... [ 228.020509][T12128] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 228.040199][T12126] 9pnet_fd: Insufficient options for proto=fd [ 228.072666][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3129'. [ 228.083001][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3133'. [ 228.170445][T12115] wireguard0: entered promiscuous mode [ 228.176060][T12115] wireguard0: entered allmulticast mode [ 228.326350][T12134] program syz.1.3135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.352601][T11330] kernel write not supported for file /1493/oom_adj (pid: 11330 comm: kworker/0:5) [ 228.411494][ T29] kauditd_printk_skb: 2149 callbacks suppressed [ 228.411513][ T29] audit: type=1326 audit(228.370:62803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 228.440904][ T29] audit: type=1400 audit(228.380:62804): avc: denied { map_read map_write } for pid=12136 comm="syz.0.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 228.460404][ T29] audit: type=1326 audit(228.380:62805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 228.483525][ T29] audit: type=1400 audit(228.380:62806): avc: denied { prog_load } for pid=12133 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 228.502219][ T29] audit: type=1400 audit(228.380:62807): avc: denied { bpf } for pid=12133 comm="syz.1.3135" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.522533][ T29] audit: type=1400 audit(228.380:62808): avc: denied { perfmon } for pid=12133 comm="syz.1.3135" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 228.538180][T12135] cgroup: No subsys list or none specified [ 228.543051][ T29] audit: type=1400 audit(228.380:62809): avc: denied { prog_run } for pid=12133 comm="syz.1.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 228.567413][ T29] audit: type=1326 audit(228.380:62810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 228.572711][T12139] audit: audit_backlog=65 > audit_backlog_limit=64 [ 228.590447][ T29] audit: type=1326 audit(228.380:62811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.1.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 228.748586][T12146] loop6: detected capacity change from 0 to 512 [ 228.817604][T12141] 9pnet_fd: Insufficient options for proto=fd [ 228.854476][T12146] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.897780][T12146] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3140: corrupted inode contents [ 228.923456][T12159] loop7: detected capacity change from 0 to 764 [ 228.928712][T12146] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3140: mark_inode_dirty error [ 228.953859][T12159] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 228.965917][T12146] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3140: corrupted inode contents [ 228.983839][T12146] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3140: corrupted inode contents [ 229.010971][T12146] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3140: mark_inode_dirty error [ 229.044803][T12146] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3140: corrupted inode contents [ 229.057010][T12141] cgroup: No subsys list or none specified [ 229.089887][T12168] 9pnet_fd: Insufficient options for proto=fd [ 229.106405][ T5289] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 229.129217][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.339064][T11330] kernel write not supported for file /876/oom_adj (pid: 11330 comm: kworker/0:5) [ 229.374841][T12185] program syz.4.3153 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.569578][T12198] loop1: detected capacity change from 0 to 512 [ 229.611014][T12183] loop7: detected capacity change from 0 to 764 [ 229.631884][T12183] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 229.661320][T12198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.667636][T12205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3159'. [ 229.710807][T12198] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3158: corrupted inode contents [ 229.723971][T12198] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3158: mark_inode_dirty error [ 229.745109][T12198] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3158: corrupted inode contents [ 229.775780][T12198] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3158: corrupted inode contents [ 229.789292][T12183] cgroup: No subsys list or none specified [ 229.861415][T12198] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3158: mark_inode_dirty error [ 229.879679][T12198] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3158: corrupted inode contents [ 229.919634][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.955779][T12224] program syz.6.3167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.958993][T12226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3169'. [ 230.263210][T12241] 9pnet_fd: Insufficient options for proto=fd [ 230.311670][T12252] loop7: detected capacity change from 0 to 512 [ 230.326470][T12252] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.355550][T12252] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3178: corrupted inode contents [ 230.367880][T12252] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3178: mark_inode_dirty error [ 230.388671][T12245] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3176'. [ 230.413267][T12245] loop1: detected capacity change from 0 to 128 [ 230.425190][T12252] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3178: corrupted inode contents [ 230.475162][T12252] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3178: corrupted inode contents [ 230.492471][T12252] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3178: mark_inode_dirty error [ 230.506026][T12252] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3178: corrupted inode contents [ 230.510105][T12260] IPVS: stopping master sync thread 12261 ... [ 230.524144][T12261] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 230.540193][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.610164][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3181'. [ 230.698755][T12274] program syz.7.3184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.049805][T12287] 9pnet_fd: Insufficient options for proto=fd [ 231.195176][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3195'. [ 231.245353][T12295] 9pnet_fd: Insufficient options for proto=fd [ 231.312040][T12297] program syz.6.3197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.431344][T12287] loop1: detected capacity change from 0 to 764 [ 231.440206][T12300] netlink: 'syz.6.3198': attribute type 3 has an invalid length. [ 231.457219][T12298] loop7: detected capacity change from 0 to 764 [ 231.493971][T12287] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 231.513704][T12298] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 231.597702][T12287] cgroup: No subsys list or none specified [ 231.619328][T12295] cgroup: No subsys list or none specified [ 231.799708][T12317] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3204'. [ 231.913273][ T5295] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.956143][ T5295] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.981738][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3207'. [ 231.994966][ T5295] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.022554][T12311] lo speed is unknown, defaulting to 1000 [ 232.068243][ T5295] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.085349][T12311] lo speed is unknown, defaulting to 1000 [ 232.108157][T12338] program syz.6.3208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.127854][ T7397] kernel write not supported for file /209/oom_adj (pid: 7397 comm: kworker/0:4) [ 232.168640][ T5295] bridge_slave_1: left allmulticast mode [ 232.174455][ T5295] bridge_slave_1: left promiscuous mode [ 232.180556][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.190172][ T5295] bridge_slave_0: left allmulticast mode [ 232.196082][ T5295] bridge_slave_0: left promiscuous mode [ 232.201842][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.329253][T12337] loop1: detected capacity change from 0 to 764 [ 232.341948][T12343] loop6: detected capacity change from 0 to 1024 [ 232.351474][T12343] EXT4-fs: Ignoring removed bh option [ 232.359173][T12337] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 232.368041][T12343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.403830][ T5295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.413925][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.428016][ T5295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.444788][ T5295] bond0 (unregistering): Released all slaves [ 232.453933][ T5295] bond1 (unregistering): Released all slaves [ 232.460249][T12337] cgroup: No subsys list or none specified [ 232.473304][T12311] chnl_net:caif_netlink_parms(): no params data found [ 232.501997][ T5295] tipc: Left network mode [ 232.584212][T12355] 9pnet_fd: Insufficient options for proto=fd [ 232.594466][ T5295] hsr_slave_0: left promiscuous mode [ 232.600408][ T5295] hsr_slave_1: left promiscuous mode [ 232.609193][ T5295] veth1_macvtap: left promiscuous mode [ 232.616425][ T5295] veth0_macvtap: left promiscuous mode [ 232.622051][ T5295] veth1_vlan: left promiscuous mode [ 232.627477][ T5295] veth0_vlan: left promiscuous mode [ 232.670706][ T5295] pimreg (unregistering): left allmulticast mode [ 232.680222][ T5295] pim6reg (unregistering): left allmulticast mode [ 232.749760][ T5295] team0 (unregistering): Port device team_slave_1 removed [ 232.764294][ T5295] team0 (unregistering): Port device team_slave_0 removed [ 232.772154][ T5289] smc: removing ib device syz0 [ 232.791052][T12355] loop1: detected capacity change from 0 to 764 [ 232.810592][T12355] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 232.819703][T12311] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.826877][T12311] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.836729][T12311] bridge_slave_0: entered allmulticast mode [ 232.847689][T12311] bridge_slave_0: entered promiscuous mode [ 232.862112][T11330] lo speed is unknown, defaulting to 1000 [ 232.867963][T11330] infiniband syz2: ib_query_port failed (-19) [ 232.876467][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.883572][T12311] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.891005][T12311] bridge_slave_1: entered allmulticast mode [ 232.901116][T12311] bridge_slave_1: entered promiscuous mode [ 232.926243][T12364] loop7: detected capacity change from 0 to 1024 [ 232.948791][T12364] EXT4-fs: Ignoring removed bh option [ 232.954887][T12355] cgroup: No subsys list or none specified [ 232.979476][T12311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.980025][T12364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.003351][T12311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.058201][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.082881][T12311] team0: Port device team_slave_0 added [ 233.092435][T12371] netlink: 'syz.1.3215': attribute type 3 has an invalid length. [ 233.133885][T12311] team0: Port device team_slave_1 added [ 233.182139][T12311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.189209][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.195717][T12375] loop7: detected capacity change from 0 to 512 [ 233.215421][T12311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.236127][T12311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.243105][T12311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.269087][T12311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.282583][T12375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.307078][T12375] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3216: corrupted inode contents [ 233.330469][T12311] hsr_slave_0: entered promiscuous mode [ 233.338033][T12311] hsr_slave_1: entered promiscuous mode [ 233.345186][T12311] debugfs: 'hsr0' already exists in 'hsr' [ 233.350994][T12311] Cannot create hsr debugfs directory [ 233.373610][T12375] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3216: mark_inode_dirty error [ 233.386667][T12375] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3216: corrupted inode contents [ 233.403377][T12380] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3216: corrupted inode contents [ 233.416574][T12380] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3216: mark_inode_dirty error [ 233.449390][ T29] kauditd_printk_skb: 2299 callbacks suppressed [ 233.449406][ T29] audit: type=1326 audit(233.420:65094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.480099][T12380] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3216: corrupted inode contents [ 233.512089][ T29] audit: type=1326 audit(233.470:65095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.535216][ T29] audit: type=1326 audit(233.470:65096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.558399][ T29] audit: type=1326 audit(233.470:65097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.581536][ T29] audit: type=1326 audit(233.480:65098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.604579][ T29] audit: type=1326 audit(233.480:65099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.627540][ T29] audit: type=1326 audit(233.480:65100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.650523][ T29] audit: type=1326 audit(233.480:65101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.1.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 233.673540][ T29] audit: type=1400 audit(233.480:65102): avc: denied { map_create } for pid=12370 comm="syz.1.3215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 233.692346][ T29] audit: type=1400 audit(233.480:65103): avc: denied { bpf } for pid=12370 comm="syz.1.3215" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 233.714477][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.790064][T12390] loop7: detected capacity change from 0 to 736 [ 233.828770][T12393] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 233.830016][T12390] IPVS: stopping master sync thread 12393 ... [ 233.942236][T12399] loop7: detected capacity change from 0 to 1024 [ 233.951724][T12399] EXT4-fs: Ignoring removed bh option [ 233.966935][T12399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.998733][T12397] 9pnet_fd: Insufficient options for proto=fd [ 234.062601][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.078099][T12311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.097870][T12311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.117634][T12311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 234.130512][T12311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 234.217280][T12397] loop1: detected capacity change from 0 to 764 [ 234.236794][T12397] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 234.238001][T12311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.267595][T12311] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.279242][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.286444][ T5289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.312278][T12404] loop6: detected capacity change from 0 to 1024 [ 234.319643][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.326735][ T1783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.340139][T12404] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.348573][T12404] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.364033][T12397] cgroup: No subsys list or none specified [ 234.369232][T12311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.380602][T12311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.397382][T12404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.501694][T12430] loop1: detected capacity change from 0 to 512 [ 234.506810][T12311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.513724][T12430] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 234.527823][T12430] EXT4-fs (loop1): 1 truncate cleaned up [ 234.535447][T12430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.568846][T12419] loop7: detected capacity change from 0 to 1024 [ 234.589975][T12419] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.597544][T12419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.609483][T12419] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.790820][T12311] veth0_vlan: entered promiscuous mode [ 234.800158][T12311] veth1_vlan: entered promiscuous mode [ 234.816287][T12311] veth0_macvtap: entered promiscuous mode [ 234.824707][T12311] veth1_macvtap: entered promiscuous mode [ 234.835644][T12311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.847146][T12311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.858141][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.867795][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.878653][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.889369][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.941160][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.040064][T12457] loop6: detected capacity change from 0 to 1024 [ 235.047559][T12457] EXT4-fs: Ignoring removed bh option [ 235.065897][T12457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.098897][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.142775][T12467] loop6: detected capacity change from 0 to 1024 [ 235.150717][T12467] EXT4-fs: Ignoring removed bh option [ 235.156975][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.167130][T12467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.207054][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.645278][T12482] loop6: detected capacity change from 0 to 1024 [ 235.653053][T12482] EXT4-fs: Ignoring removed mblk_io_submit option [ 235.660825][T12482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 235.672374][T12482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.963822][ T9] kernel write not supported for file /11/oom_adj (pid: 9 comm: kworker/0:0) [ 236.141206][T12489] cgroup: No subsys list or none specified [ 236.220803][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.289954][T12505] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3252'. [ 236.443817][ T1041] usb usb8-port1: attempt power cycle [ 236.490719][T12503] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3250'. [ 236.512126][T12503] loop6: detected capacity change from 0 to 128 [ 237.307347][T12537] netlink: 'syz.7.3264': attribute type 3 has an invalid length. [ 237.525095][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.569300][T12529] loop6: detected capacity change from 0 to 1024 [ 237.578065][T12529] EXT4-fs: Ignoring removed mblk_io_submit option [ 237.588624][T12529] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 237.618823][T12529] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.827347][T12561] loop7: detected capacity change from 0 to 1024 [ 237.840281][ T9] kernel write not supported for file /31/oom_adj (pid: 9 comm: kworker/0:0) [ 237.849414][T12561] EXT4-fs: Ignoring removed bh option [ 237.895813][T12548] loop1: detected capacity change from 0 to 764 [ 237.923151][T12561] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.948432][T12548] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 238.005016][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 238.050605][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.068956][T12548] cgroup: No subsys list or none specified [ 238.207327][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.286880][ T1041] usb usb8-port1: unable to enumerate USB device [ 238.294438][T12435] vhci_hcd: invalid port number 0 [ 238.304617][ T3395] kernel write not supported for file /227/oom_adj (pid: 3395 comm: kworker/1:4) [ 238.403276][T12577] loop7: detected capacity change from 0 to 764 [ 238.427505][T12577] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 238.439840][T12576] loop1: detected capacity change from 0 to 764 [ 238.454738][ T29] kauditd_printk_skb: 1476 callbacks suppressed [ 238.454756][ T29] audit: type=1326 audit(238.430:66580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 238.461316][ T29] audit: type=1326 audit(238.430:66581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12569 comm="syz.7.3275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f271032ebe9 code=0x7ffc0000 [ 238.510427][T12576] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 238.540994][T12577] cgroup: No subsys list or none specified [ 238.603915][T12586] netlink: 'syz.4.3281': attribute type 3 has an invalid length. [ 238.619270][ T29] audit: type=1326 audit(238.490:66582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 238.642143][ T29] audit: type=1326 audit(238.490:66583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 238.665255][ T29] audit: type=1400 audit(238.490:66584): avc: denied { mount } for pid=12579 comm="syz.6.3279" name="/" dev="ramfs" ino=36845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 238.687280][ T29] audit: type=1326 audit(238.490:66585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 238.688592][T12572] cgroup: No subsys list or none specified [ 238.710344][ T29] audit: type=1400 audit(238.500:66586): avc: denied { create } for pid=12556 comm="syz.4.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.710376][ T29] audit: type=1326 audit(238.500:66587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 238.710484][ T29] audit: type=1326 audit(238.500:66588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 238.710595][ T29] audit: type=1326 audit(238.500:66589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12556 comm="syz.4.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 238.919266][T12594] loop7: detected capacity change from 0 to 1024 [ 238.939550][T12594] EXT4-fs: Ignoring removed bh option [ 238.957224][T12594] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.007265][T12601] netlink: 'syz.1.3287': attribute type 3 has an invalid length. [ 239.026905][T12591] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3284'. [ 239.082608][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.094394][T12607] loop6: detected capacity change from 0 to 128 [ 239.358177][ T3395] kernel write not supported for file /147/oom_adj (pid: 3395 comm: kworker/1:4) [ 239.575431][T12620] loop7: detected capacity change from 0 to 1024 [ 239.636767][T12620] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 239.645951][T12620] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 239.659098][T12620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.856451][T12625] loop6: detected capacity change from 0 to 512 [ 239.903606][T12625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.941416][T12625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3292: corrupted inode contents [ 239.954154][T12625] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3292: mark_inode_dirty error [ 239.969577][T12625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3292: corrupted inode contents [ 240.022210][T12625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3292: corrupted inode contents [ 240.057084][T12625] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3292: mark_inode_dirty error [ 240.080123][T12625] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3292: corrupted inode contents [ 240.181133][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.315093][T12646] loop1: detected capacity change from 0 to 1024 [ 240.323279][T12646] EXT4-fs: Ignoring removed bh option [ 240.378008][T12646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.488746][T12662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.496337][T12662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.559621][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.560235][T12662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.576306][T12662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.605380][T12665] loop7: detected capacity change from 0 to 8192 [ 240.686512][T12672] program syz.6.3308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.915287][T12689] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3315'. [ 240.919998][T12684] loop6: detected capacity change from 0 to 1024 [ 240.944646][T12684] EXT4-fs: Ignoring removed bh option [ 240.996000][T12684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.057481][T12699] loop7: detected capacity change from 0 to 736 [ 241.098299][T12702] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 241.110408][T12699] IPVS: stopping master sync thread 12702 ... [ 241.289167][T12681] loop1: detected capacity change from 0 to 1024 [ 241.365390][T12681] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.372264][T12681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 241.385160][T12681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.767790][T12709] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3320'. [ 241.851495][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.932179][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.058518][T12735] loop1: detected capacity change from 0 to 736 [ 242.087536][T12740] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 242.092288][T12735] IPVS: stopping master sync thread 12740 ... [ 242.299364][T12757] loop1: detected capacity change from 0 to 736 [ 242.317328][T12758] program syz.0.3338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 242.331264][T12757] IPVS: stopping master sync thread 12759 ... [ 242.344397][T12759] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 242.505502][T12768] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3343'. [ 242.532055][T12770] loop7: detected capacity change from 0 to 512 [ 242.570831][T12770] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 242.607986][T12775] loop6: detected capacity change from 0 to 764 [ 242.670733][T12775] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 242.680431][T12770] EXT4-fs (loop7): 1 truncate cleaned up [ 242.697192][T12770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.007349][T12765] cgroup: No subsys list or none specified [ 243.027579][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.046256][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.053730][T12782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.170478][T12782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.178102][T12782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.219090][T12785] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3348'. [ 243.382321][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 243.405926][ T9] kernel write not supported for file /1006/oom_adj (pid: 9 comm: kworker/0:0) [ 243.464452][ T29] kauditd_printk_skb: 1970 callbacks suppressed [ 243.464469][ T29] audit: type=1400 audit(243.440:68561): avc: denied { getattr } for pid=12789 comm="syz.6.3349" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 243.505425][T12803] loop1: detected capacity change from 0 to 512 [ 243.522581][T12804] program syz.4.3353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.552219][ T29] audit: type=1400 audit(243.470:68562): avc: denied { map_create } for pid=12802 comm="syz.1.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.571149][ T29] audit: type=1400 audit(243.470:68563): avc: denied { prog_load } for pid=12802 comm="syz.1.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 243.589809][ T29] audit: type=1400 audit(243.470:68564): avc: denied { bpf } for pid=12802 comm="syz.1.3354" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.610080][ T29] audit: type=1400 audit(243.470:68565): avc: denied { perfmon } for pid=12802 comm="syz.1.3354" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.620576][T12805] loop6: detected capacity change from 0 to 764 [ 243.630584][ T29] audit: type=1400 audit(243.470:68566): avc: denied { open } for pid=12801 comm="syz.4.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 243.655916][ T29] audit: type=1400 audit(243.470:68567): avc: denied { perfmon } for pid=12801 comm="syz.4.3353" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 243.676821][ T29] audit: type=1400 audit(243.470:68568): avc: denied { kernel } for pid=12801 comm="syz.4.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 243.676852][T12805] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 243.696023][ T29] audit: type=1326 audit(243.440:68560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="syz.6.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3617ebe9 code=0x7ffc0000 [ 243.696119][ T29] audit: type=1326 audit(243.470:68569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12789 comm="syz.6.3349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c3617ebe9 code=0x7ffc0000 [ 243.782524][T12803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.811628][T12805] cgroup: No subsys list or none specified [ 243.818250][T12803] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3354: corrupted inode contents [ 243.845447][T12803] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3354: mark_inode_dirty error [ 243.913845][T12799] loop7: detected capacity change from 0 to 764 [ 243.930810][T12803] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3354: corrupted inode contents [ 243.984273][T12803] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3354: corrupted inode contents [ 244.018289][T12803] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3354: mark_inode_dirty error [ 244.030337][T12799] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 244.032293][T12824] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3362'. [ 244.049756][T12803] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3354: corrupted inode contents [ 244.092893][T12799] cgroup: No subsys list or none specified [ 244.156659][T12833] loop6: detected capacity change from 0 to 512 [ 244.168281][T12833] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 244.190081][T12833] EXT4-fs (loop6): 1 truncate cleaned up [ 244.262911][T12841] program syz.0.3368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.406739][T12843] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3369'. [ 244.418619][T12847] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3370'. [ 244.516734][T12855] loop1: detected capacity change from 0 to 1024 [ 244.616301][T12860] loop6: detected capacity change from 0 to 128 [ 244.675904][T12855] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 244.774541][T12858] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3374'. [ 244.900989][T12870] loop6: detected capacity change from 0 to 512 [ 244.931740][T12870] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3377: corrupted inode contents [ 244.944432][T12870] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3377: mark_inode_dirty error [ 244.956469][T12870] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3377: corrupted inode contents [ 244.973218][T12870] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3377: corrupted inode contents [ 244.999864][T12870] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3377: mark_inode_dirty error [ 245.013399][T12870] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3377: corrupted inode contents [ 245.061305][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3381'. [ 245.150200][T12887] program syz.4.3383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.198567][ T1783] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 245.301335][T12901] FAULT_INJECTION: forcing a failure. [ 245.301335][T12901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.314766][T12901] CPU: 0 UID: 0 PID: 12901 Comm: syz.7.3389 Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.314849][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.314861][T12901] Call Trace: [ 245.314868][T12901] [ 245.314874][T12901] __dump_stack+0x1d/0x30 [ 245.314904][T12901] dump_stack_lvl+0xe8/0x140 [ 245.314928][T12901] dump_stack+0x15/0x1b [ 245.315026][T12901] should_fail_ex+0x265/0x280 [ 245.315049][T12901] should_fail+0xb/0x20 [ 245.315069][T12901] should_fail_usercopy+0x1a/0x20 [ 245.315112][T12901] _copy_from_user+0x1c/0xb0 [ 245.315150][T12901] ___sys_recvmsg+0xaa/0x370 [ 245.315176][T12901] ? 0xffffffff81000000 [ 245.315192][T12901] ? __rcu_read_unlock+0x4f/0x70 [ 245.315251][T12901] __x64_sys_recvmsg+0xd1/0x160 [ 245.315289][T12901] x64_sys_call+0x2b42/0x2ff0 [ 245.315312][T12901] do_syscall_64+0xd2/0x200 [ 245.315342][T12901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 245.315376][T12901] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 245.315406][T12901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.315426][T12901] RIP: 0033:0x7f271032ebe9 [ 245.315484][T12901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.315505][T12901] RSP: 002b:00007f270ed97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 245.315571][T12901] RAX: ffffffffffffffda RBX: 00007f2710565fa0 RCX: 00007f271032ebe9 [ 245.315583][T12901] RDX: 0000000040002002 RSI: 0000200000000000 RDI: 0000000000000004 [ 245.315595][T12901] RBP: 00007f270ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 245.315607][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.315618][T12901] R13: 00007f2710566038 R14: 00007f2710565fa0 R15: 00007ffc444452a8 [ 245.315641][T12901] [ 245.672701][T12909] loop1: detected capacity change from 0 to 512 [ 245.764216][T12909] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3392: corrupted inode contents [ 245.776616][T12909] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3392: mark_inode_dirty error [ 245.788685][T12909] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3392: corrupted inode contents [ 245.804797][T12909] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3392: corrupted inode contents [ 245.816143][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3395'. [ 245.818520][T12909] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3392: mark_inode_dirty error [ 245.837584][T12909] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3392: corrupted inode contents [ 245.867765][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3394'. [ 245.912511][ T1041] kernel write not supported for file /207/oom_adj (pid: 1041 comm: kworker/0:2) [ 246.014414][T12925] program syz.1.3397 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.559302][T12940] lo speed is unknown, defaulting to 1000 [ 246.956962][T12957] loop7: detected capacity change from 0 to 1024 [ 246.972186][T12957] EXT4-fs: Ignoring removed bh option [ 247.024109][ T3395] kernel write not supported for file /286/oom_adj (pid: 3395 comm: kworker/1:4) [ 247.140053][T12973] netlink: 'syz.4.3412': attribute type 4 has an invalid length. [ 247.191497][T12971] netlink: 'syz.4.3412': attribute type 4 has an invalid length. [ 247.349172][T12971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12971 comm=syz.4.3412 [ 247.418867][T12948] loop1: detected capacity change from 0 to 764 [ 247.480933][T12948] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 247.632729][T12991] loop6: detected capacity change from 0 to 512 [ 247.641077][T12991] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 247.657275][T12991] EXT4-fs (loop6): 1 truncate cleaned up [ 247.690946][T12948] cgroup: No subsys list or none specified [ 247.770862][T12994] loop6: detected capacity change from 0 to 512 [ 247.815912][T12994] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3421: corrupted inode contents [ 247.867857][T12994] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3421: mark_inode_dirty error [ 247.893688][T12994] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3421: corrupted inode contents [ 247.912536][T13008] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3421: corrupted inode contents [ 247.926127][T13010] loop7: detected capacity change from 0 to 512 [ 247.934262][T13010] ext4: Unknown parameter 'nouser_xattr' [ 247.940111][T13008] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3421: mark_inode_dirty error [ 247.952775][T13004] loop1: detected capacity change from 0 to 8192 [ 247.962136][T13008] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3421: corrupted inode contents [ 248.012794][T13015] FAULT_INJECTION: forcing a failure. [ 248.012794][T13015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.026005][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.0.3429 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.026038][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.026054][T13015] Call Trace: [ 248.026061][T13015] [ 248.026070][T13015] __dump_stack+0x1d/0x30 [ 248.026123][T13015] dump_stack_lvl+0xe8/0x140 [ 248.026149][T13015] dump_stack+0x15/0x1b [ 248.026168][T13015] should_fail_ex+0x265/0x280 [ 248.026194][T13015] should_fail+0xb/0x20 [ 248.026263][T13015] should_fail_usercopy+0x1a/0x20 [ 248.026296][T13015] _copy_from_user+0x1c/0xb0 [ 248.026334][T13015] do_semtimedop+0x14e/0x220 [ 248.026386][T13015] __x64_sys_semop+0x41/0x50 [ 248.026469][T13015] x64_sys_call+0x2974/0x2ff0 [ 248.026496][T13015] do_syscall_64+0xd2/0x200 [ 248.026530][T13015] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 248.026554][T13015] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 248.026686][T13015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.026707][T13015] RIP: 0033:0x7f0a01c8ebe9 [ 248.026750][T13015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.026772][T13015] RSP: 002b:00007f0a006f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 248.026795][T13015] RAX: ffffffffffffffda RBX: 00007f0a01ec5fa0 RCX: 00007f0a01c8ebe9 [ 248.026825][T13015] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000000 [ 248.026849][T13015] RBP: 00007f0a006f7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.026919][T13015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.026934][T13015] R13: 00007f0a01ec6038 R14: 00007f0a01ec5fa0 R15: 00007ffcbdbb40b8 [ 248.026957][T13015] [ 248.214769][T13020] loop6: detected capacity change from 0 to 512 [ 248.230721][T13020] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 248.245724][T13020] EXT4-fs (loop6): 1 truncate cleaned up [ 248.286416][ T36] kernel write not supported for file /1046/oom_adj (pid: 36 comm: kworker/1:1) [ 248.349732][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xe [ 248.483015][ T29] kauditd_printk_skb: 1550 callbacks suppressed [ 248.483057][ T29] audit: type=1400 audit(248.450:70072): avc: denied { create } for pid=13045 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.508691][ T29] audit: type=1400 audit(248.450:70073): avc: denied { allowed } for pid=13047 comm="syz.0.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 248.527916][ T29] audit: type=1400 audit(248.450:70074): avc: denied { create } for pid=13047 comm="syz.0.3440" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.548836][ T29] audit: type=1400 audit(248.450:70075): avc: denied { map } for pid=13047 comm="syz.0.3440" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.572892][ T29] audit: type=1400 audit(248.450:70076): avc: denied { read write } for pid=13047 comm="syz.0.3440" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 248.597299][ T29] audit: type=1400 audit(248.450:70077): avc: denied { create } for pid=13047 comm="syz.0.3440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.617399][ T29] audit: type=1400 audit(248.510:70078): avc: denied { create } for pid=13045 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.636678][ T29] audit: type=1400 audit(248.510:70079): avc: denied { create } for pid=13045 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.655693][ T29] audit: type=1400 audit(248.510:70080): avc: denied { bind } for pid=13045 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.674511][ T29] audit: type=1400 audit(248.510:70081): avc: denied { connect } for pid=13045 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 248.716377][T13028] loop7: detected capacity change from 0 to 764 [ 248.742510][T13028] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 248.821524][T13052] loop1: detected capacity change from 0 to 128 [ 248.831551][T13028] cgroup: No subsys list or none specified [ 248.903772][ T9] usb usb8-port1: attempt power cycle [ 249.043325][T13069] loop7: detected capacity change from 0 to 736 [ 249.211560][T13071] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 249.223254][T13069] IPVS: stopping master sync thread 13071 ... [ 249.462099][T13073] __nla_validate_parse: 1 callbacks suppressed [ 249.462112][T13073] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3449'. [ 249.546497][T13079] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3451'. [ 249.644182][T11330] kernel write not supported for file /1070/oom_adj (pid: 11330 comm: kworker/0:5) [ 249.780325][T13085] loop7: detected capacity change from 0 to 764 [ 249.798075][T13085] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.842474][T13085] cgroup: No subsys list or none specified [ 249.876200][T13091] lo speed is unknown, defaulting to 1000 [ 249.963185][T13099] loop7: detected capacity change from 0 to 736 [ 249.991487][T13100] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 249.991707][T13099] IPVS: stopping master sync thread 13100 ... [ 250.153013][T13108] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3463'. [ 250.215492][T13116] FAULT_INJECTION: forcing a failure. [ 250.215492][T13116] name failslab, interval 1, probability 0, space 0, times 0 [ 250.228250][T13116] CPU: 0 UID: 0 PID: 13116 Comm: syz.7.3466 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.228285][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.228301][T13116] Call Trace: [ 250.228309][T13116] [ 250.228317][T13116] __dump_stack+0x1d/0x30 [ 250.228343][T13116] dump_stack_lvl+0xe8/0x140 [ 250.228368][T13116] dump_stack+0x15/0x1b [ 250.228433][T13116] should_fail_ex+0x265/0x280 [ 250.228464][T13116] should_failslab+0x8c/0xb0 [ 250.228584][T13116] kmem_cache_alloc_noprof+0x50/0x310 [ 250.228620][T13116] ? security_file_alloc+0x32/0x100 [ 250.228665][T13116] security_file_alloc+0x32/0x100 [ 250.228770][T13116] init_file+0x5c/0x1d0 [ 250.228800][T13116] alloc_empty_file+0x8b/0x200 [ 250.228890][T13116] dentry_open+0x2d/0x90 [ 250.228932][T13116] __se_sys_fsmount+0x455/0x580 [ 250.228966][T13116] __x64_sys_fsmount+0x43/0x50 [ 250.229015][T13116] x64_sys_call+0x2ab3/0x2ff0 [ 250.229039][T13116] do_syscall_64+0xd2/0x200 [ 250.229078][T13116] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 250.229110][T13116] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 250.229292][T13116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.229316][T13116] RIP: 0033:0x7f271032ebe9 [ 250.229335][T13116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.229358][T13116] RSP: 002b:00007f270ed97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 250.229440][T13116] RAX: ffffffffffffffda RBX: 00007f2710565fa0 RCX: 00007f271032ebe9 [ 250.229454][T13116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 250.229470][T13116] RBP: 00007f270ed97090 R08: 0000000000000000 R09: 0000000000000000 [ 250.229484][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.229499][T13116] R13: 00007f2710566038 R14: 00007f2710565fa0 R15: 00007ffc444452a8 [ 250.229549][T13116] [ 250.233385][T13108] loop1: detected capacity change from 0 to 128 [ 250.329548][T13121] program syz.7.3468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.509295][T13126] loop1: detected capacity change from 0 to 736 [ 250.539578][T13129] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 250.543194][T13126] IPVS: stopping master sync thread 13129 ... [ 250.557011][T13128] program syz.7.3471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.722919][T13131] loop1: detected capacity change from 0 to 8192 [ 250.737239][T13138] loop7: detected capacity change from 0 to 512 [ 250.745389][T13138] EXT4-fs: Ignoring removed i_version option [ 250.755081][T13138] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 250.764102][T13138] System zones: 0-2, 18-18, 34-35 [ 250.842992][T13143] loop1: detected capacity change from 0 to 8192 [ 250.883829][T13143] loop1: p1 p2 p4 < > [ 250.887944][T13143] loop1: partition table partially beyond EOD, truncated [ 250.895426][T13143] loop1: p1 start 16777216 is beyond EOD, truncated [ 250.902087][T13143] loop1: p2 size 515840 extends beyond EOD, truncated [ 250.911040][T13143] loop1: p4 start 16777216 is beyond EOD, truncated [ 250.984199][T13152] program syz.7.3480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.079085][ T9] usb usb8-port1: unable to enumerate USB device [ 251.126509][T13157] loop7: detected capacity change from 0 to 736 [ 251.219352][T13157] IPVS: stopping master sync thread 13167 ... [ 251.219858][T13167] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 251.261270][T13168] IPv6: Can't replace route, no match found [ 251.291181][ T3395] kernel write not supported for file /1064/oom_adj (pid: 3395 comm: kworker/1:4) [ 251.335567][T13168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.345635][T13170] 9pnet: Could not find request transport: r [ 251.371076][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.521312][T13173] loop6: detected capacity change from 0 to 764 [ 251.583078][T13173] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 251.697174][T13163] cgroup: No subsys list or none specified [ 251.826053][T13205] IPv6: Can't replace route, no match found [ 252.286655][T13213] loop6: detected capacity change from 0 to 764 [ 252.312883][T13213] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 252.366556][T13213] cgroup: No subsys list or none specified [ 252.662511][T13243] bridge1: entered promiscuous mode [ 252.784773][T13254] IPv6: Can't replace route, no match found [ 252.827138][T13258] IPv6: Can't replace route, no match found [ 253.037504][ T9] kernel write not supported for file /270/oom_adj (pid: 9 comm: kworker/0:0) [ 253.199328][ T3395] kernel write not supported for file /135/oom_adj (pid: 3395 comm: kworker/1:4) [ 253.223838][T13260] loop1: detected capacity change from 0 to 1024 [ 253.231859][T13260] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.239699][T13260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 253.252339][T13260] EXT4-fs mount: 19 callbacks suppressed [ 253.252358][T13260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.454921][T13278] cgroup: No subsys list or none specified [ 253.456486][T13287] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3535'. [ 253.489895][ T29] kauditd_printk_skb: 1720 callbacks suppressed [ 253.489910][ T29] audit: type=1400 audit(253.460:71802): avc: denied { prog_load } for pid=13281 comm="syz.6.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 253.515129][ T29] audit: type=1400 audit(253.460:71803): avc: denied { bpf } for pid=13281 comm="syz.6.3535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.563555][ T36] kernel write not supported for file /138/oom_adj (pid: 36 comm: kworker/1:1) [ 253.573664][ T29] audit: type=1400 audit(253.470:71804): avc: denied { open } for pid=13290 comm="syz.4.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.592632][ T29] audit: type=1400 audit(253.470:71805): avc: denied { perfmon } for pid=13290 comm="syz.4.3538" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.613184][ T29] audit: type=1400 audit(253.470:71806): avc: denied { kernel } for pid=13290 comm="syz.4.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.632293][ T29] audit: type=1400 audit(253.470:71807): avc: denied { perfmon } for pid=13290 comm="syz.4.3538" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 253.652844][ T29] audit: type=1400 audit(253.480:71808): avc: denied { map_create } for pid=13290 comm="syz.4.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 253.671728][ T29] audit: type=1400 audit(253.500:71809): avc: denied { map_read map_write } for pid=13290 comm="syz.4.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 253.691292][ T29] audit: type=1400 audit(253.500:71810): avc: denied { prog_load } for pid=13290 comm="syz.4.3538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 253.709943][ T29] audit: type=1400 audit(253.510:71811): avc: denied { open } for pid=13285 comm="syz.0.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 253.749027][T13282] loop6: detected capacity change from 0 to 128 [ 253.852098][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.916487][T13296] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3539'. [ 253.996909][T13302] loop7: detected capacity change from 0 to 128 [ 255.544257][T13333] loop1: detected capacity change from 0 to 1024 [ 255.561407][T13333] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.606397][T13333] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 255.693559][T13333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.397121][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.680424][T13388] IPv6: Can't replace route, no match found [ 257.037083][T13390] loop7: detected capacity change from 0 to 764 [ 257.047722][ T3374] kernel write not supported for file /1090/oom_adj (pid: 3374 comm: kworker/1:2) [ 257.142045][T13390] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 257.212660][T13390] cgroup: No subsys list or none specified [ 257.292921][T13401] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3574'. [ 257.462192][ T7397] kernel write not supported for file /1154/oom_adj (pid: 7397 comm: kworker/0:4) [ 257.566973][ T3395] kernel write not supported for file /158/oom_adj (pid: 3395 comm: kworker/1:4) [ 257.638244][T13410] loop1: detected capacity change from 0 to 512 [ 257.653695][T13414] netlink: 'syz.0.3579': attribute type 3 has an invalid length. [ 257.694316][T13394] loop6: detected capacity change from 0 to 764 [ 257.704063][T13410] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.751135][T13410] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3578: corrupted inode contents [ 257.786357][T13410] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3578: mark_inode_dirty error [ 257.800857][T13409] loop7: detected capacity change from 0 to 764 [ 257.800884][T13394] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 257.825070][T13410] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3578: corrupted inode contents [ 257.849185][T13409] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 257.901233][T13410] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3578: corrupted inode contents [ 257.925403][T13422] bridge1: entered promiscuous mode [ 257.930988][T13410] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3578: mark_inode_dirty error [ 257.962407][T13409] cgroup: No subsys list or none specified [ 257.974103][T13394] cgroup: No subsys list or none specified [ 257.993819][T13410] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3578: corrupted inode contents [ 258.048095][T13424] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3582'. [ 258.071392][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.094435][T13431] IPv6: Can't replace route, no match found [ 258.233028][T13442] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3590'. [ 258.308073][ T7397] kernel write not supported for file /311/oom_adj (pid: 7397 comm: kworker/0:4) [ 258.502212][ T29] kauditd_printk_skb: 1157 callbacks suppressed [ 258.502230][ T29] audit: type=1326 audit(258.470:72969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13427 comm="syz.4.3585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc31d00ebe9 code=0x7ffc0000 [ 258.531805][ T29] audit: type=1400 audit(258.470:72970): avc: denied { prog_load } for pid=13427 comm="syz.4.3585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 258.550584][ T29] audit: type=1400 audit(258.470:72971): avc: denied { bpf } for pid=13427 comm="syz.4.3585" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.571222][ T29] audit: type=1400 audit(258.470:72972): avc: denied { perfmon } for pid=13427 comm="syz.4.3585" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.632336][ T29] audit: type=1400 audit(258.510:72973): avc: denied { prog_load } for pid=13452 comm="syz.7.3593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 258.651127][ T29] audit: type=1400 audit(258.510:72974): avc: denied { bpf } for pid=13452 comm="syz.7.3593" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.671543][ T29] audit: type=1400 audit(258.510:72975): avc: denied { perfmon } for pid=13452 comm="syz.7.3593" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.692221][ T29] audit: type=1400 audit(258.530:72976): avc: denied { read write } for pid=7176 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.716181][ T29] audit: type=1400 audit(258.530:72977): avc: denied { open } for pid=7176 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.739817][ T29] audit: type=1400 audit(258.530:72978): avc: denied { ioctl } for pid=7176 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.830952][T13464] loop6: detected capacity change from 0 to 512 [ 258.952165][T13468] loop7: detected capacity change from 0 to 1024 [ 259.350847][T13462] loop1: detected capacity change from 0 to 1024 [ 259.365333][T13464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.383015][T13462] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 259.383287][T13468] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 259.391682][T13462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 259.399627][T13468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 259.412379][T13462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.423905][T13468] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.516331][T13464] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3599: corrupted inode contents [ 259.556125][T13477] IPv6: Can't replace route, no match found [ 259.575583][T13464] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3599: mark_inode_dirty error [ 259.599158][T13464] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3599: corrupted inode contents [ 259.612260][T13478] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3599: corrupted inode contents [ 259.635669][T13478] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3599: mark_inode_dirty error [ 259.648190][T13478] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3599: corrupted inode contents [ 259.747678][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.872619][T13488] loop6: detected capacity change from 0 to 2048 [ 259.907406][T13488] EXT4-fs (loop6): failed to initialize system zone (-117) [ 260.054034][T13499] loop7: detected capacity change from 0 to 764 [ 260.061052][T13488] EXT4-fs (loop6): mount failed [ 260.085173][T13499] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 260.145344][T13491] cgroup: No subsys list or none specified [ 260.268424][T13517] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3615'. [ 260.313783][T13524] bridge1: entered promiscuous mode [ 260.395986][T13514] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3616'. [ 260.470110][ T36] kernel write not supported for file /321/oom_adj (pid: 36 comm: kworker/1:1) [ 260.504758][T13540] FAULT_INJECTION: forcing a failure. [ 260.504758][T13540] name failslab, interval 1, probability 0, space 0, times 0 [ 260.517682][T13540] CPU: 1 UID: 0 PID: 13540 Comm: syz.1.3626 Not tainted syzkaller #0 PREEMPT(voluntary) [ 260.517717][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.517733][T13540] Call Trace: [ 260.517740][T13540] [ 260.517749][T13540] __dump_stack+0x1d/0x30 [ 260.517784][T13540] dump_stack_lvl+0xe8/0x140 [ 260.517804][T13540] dump_stack+0x15/0x1b [ 260.517820][T13540] should_fail_ex+0x265/0x280 [ 260.517920][T13540] should_failslab+0x8c/0xb0 [ 260.517974][T13540] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 260.518012][T13540] ? sidtab_sid2str_get+0xa0/0x130 [ 260.518035][T13540] kmemdup_noprof+0x2b/0x70 [ 260.518064][T13540] sidtab_sid2str_get+0xa0/0x130 [ 260.518084][T13540] security_sid_to_context_core+0x1eb/0x2e0 [ 260.518158][T13540] security_sid_to_context+0x27/0x40 [ 260.518177][T13540] avc_audit_post_callback+0x10f/0x520 [ 260.518202][T13540] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 260.518299][T13540] common_lsm_audit+0x1bb/0x230 [ 260.518379][T13540] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 260.518408][T13540] slow_avc_audit+0x104/0x140 [ 260.518441][T13540] avc_has_perm+0x13a/0x180 [ 260.518469][T13540] selinux_socket_sendmsg+0x175/0x1b0 [ 260.518541][T13540] security_socket_sendmsg+0x48/0x80 [ 260.518654][T13540] __sock_sendmsg+0x30/0x180 [ 260.518695][T13540] ____sys_sendmsg+0x31e/0x4e0 [ 260.518725][T13540] ___sys_sendmsg+0x17b/0x1d0 [ 260.518762][T13540] __x64_sys_sendmsg+0xd4/0x160 [ 260.518838][T13540] x64_sys_call+0x191e/0x2ff0 [ 260.518864][T13540] do_syscall_64+0xd2/0x200 [ 260.518943][T13540] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 260.518974][T13540] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 260.519005][T13540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.519032][T13540] RIP: 0033:0x7f56f625ebe9 [ 260.519047][T13540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.519073][T13540] RSP: 002b:00007f56f4cbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.519096][T13540] RAX: ffffffffffffffda RBX: 00007f56f6495fa0 RCX: 00007f56f625ebe9 [ 260.519110][T13540] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 260.519122][T13540] RBP: 00007f56f4cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 260.519133][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.519163][T13540] R13: 00007f56f6496038 R14: 00007f56f6495fa0 R15: 00007ffeca1e7908 [ 260.519181][T13540] [ 260.525768][T13537] loop6: detected capacity change from 0 to 128 [ 260.879704][T13546] loop1: detected capacity change from 0 to 512 [ 260.942498][T13546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.958216][T13551] loop6: detected capacity change from 0 to 128 [ 261.002536][T13546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3627: corrupted inode contents [ 261.024791][T13546] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3627: mark_inode_dirty error [ 261.043688][T13546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3627: corrupted inode contents [ 261.106389][T13546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3627: corrupted inode contents [ 261.128932][T13546] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.3627: mark_inode_dirty error [ 261.142349][T13567] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3631'. [ 261.170437][T13546] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.3627: corrupted inode contents [ 261.242224][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.322034][ T1041] kernel write not supported for file /326/oom_adj (pid: 1041 comm: kworker/0:2) [ 261.475715][ T36] kernel write not supported for file /394/oom_adj (pid: 36 comm: kworker/1:1) [ 261.571835][T13593] loop1: detected capacity change from 0 to 764 [ 261.585638][T13592] loop7: detected capacity change from 0 to 764 [ 261.599425][T13593] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 261.618321][T13593] cgroup: No subsys list or none specified [ 261.629239][T13592] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 261.673110][T13582] cgroup: No subsys list or none specified [ 261.734369][T13601] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3647'. [ 261.752565][T13603] loop7: detected capacity change from 0 to 512 [ 261.783175][T13603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.808779][T13603] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3648: corrupted inode contents [ 261.826331][T13603] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3648: mark_inode_dirty error [ 261.879127][T13611] random: crng reseeded on system resumption [ 261.890544][T13569] cgroup: No subsys list or none specified [ 261.897902][T13603] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3648: corrupted inode contents [ 261.921810][T13615] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3648: corrupted inode contents [ 261.944240][T13615] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.3648: mark_inode_dirty error [ 261.959973][T13615] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.3648: corrupted inode contents [ 261.979551][T13611] loop1: detected capacity change from 0 to 512 [ 261.987373][T13617] loop6: detected capacity change from 0 to 512 [ 261.996694][T13617] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 262.011696][T13617] EXT4-fs (loop6): 1 truncate cleaned up [ 262.013511][T13611] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.017964][T13617] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.043053][T13611] EXT4-fs (loop1): 1 truncate cleaned up [ 262.059863][ T7377] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.136395][T13611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.234763][T13630] loop7: detected capacity change from 0 to 2048 [ 262.246490][T11127] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.266918][T13630] EXT4-fs (loop7): failed to initialize system zone (-117) [ 262.288415][T13630] EXT4-fs (loop7): mount failed [ 262.439114][T13646] loop7: detected capacity change from 0 to 128 [ 262.478473][T13643] bridge_slave_0: left allmulticast mode [ 262.484217][T13643] bridge_slave_0: left promiscuous mode [ 262.489832][T13643] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.498808][T13643] bridge_slave_1: left allmulticast mode [ 262.504573][T13643] bridge_slave_1: left promiscuous mode [ 262.510230][T13643] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.530602][T13643] bond0: (slave bond_slave_0): Releasing backup interface [ 262.544692][T13643] bond0: (slave bond_slave_1): Releasing backup interface [ 262.602282][T13643] team0: Port device team_slave_0 removed [ 262.613038][T13643] team0: Port device team_slave_1 removed [ 262.667166][T13648] team0: Mode changed to "activebackup" [ 262.970091][T13643] vlan0: entered promiscuous mode [ 263.008854][T13643] team0: Port device vlan0 added [ 263.030346][T13643] tipc: Started in network mode [ 263.032692][T13656] 9pnet: Could not find request transport: r [ 263.035351][T13643] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 263.048507][T13643] tipc: Enabled bearer , priority 0 [ 263.086209][T13643] Invalid option length (1265) for dns_resolver key [ 263.254624][T13671] netlink: 'syz.7.3667': attribute type 4 has an invalid length. [ 263.267838][T13671] netlink: 'syz.7.3667': attribute type 4 has an invalid length. [ 263.503592][ T29] kauditd_printk_skb: 1628 callbacks suppressed [ 263.503609][ T29] audit: type=1400 audit(263.480:74607): avc: denied { prog_load } for pid=13684 comm="syz.0.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 263.515410][T13685] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3675'. [ 263.562710][T13685] hsr_slave_0: left promiscuous mode [ 263.583321][T13685] hsr_slave_1: left promiscuous mode [ 263.597090][ T29] audit: type=1400 audit(263.480:74608): avc: denied { bpf } for pid=13684 comm="syz.0.3675" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.617552][ T29] audit: type=1400 audit(263.480:74609): avc: denied { perfmon } for pid=13684 comm="syz.0.3675" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 263.638153][ T29] audit: type=1326 audit(263.510:74610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 263.661285][ T29] audit: type=1326 audit(263.510:74611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f56f625ebe9 code=0x7ffc0000 [ 263.684340][ T29] audit: type=1326 audit(263.510:74612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56f625ec23 code=0x7ffc0000 [ 263.707450][ T29] audit: type=1326 audit(263.530:74613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13676 comm="syz.1.3673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f56f625d69f code=0x7ffc0000 [ 263.730362][ T29] audit: type=1400 audit(263.550:74614): avc: denied { read } for pid=13684 comm="syz.0.3675" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.751155][ T29] audit: type=1400 audit(263.550:74615): avc: denied { open } for pid=13684 comm="syz.0.3675" path="net:[4026532370]" dev="nsfs" ino=4026532370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 263.774089][ T29] audit: type=1400 audit(263.550:74616): avc: denied { create } for pid=13684 comm="syz.0.3675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.774119][T13679] loop1: detected capacity change from 0 to 764 [ 263.774217][ T29] ================================================================== [ 263.774270][ T29] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 263.774325][ T29] [ 263.774332][ T29] write to 0xffffffff88e39b88 of 8 bytes by task 13679 on cpu 0: [ 263.774352][ T29] data_alloc+0x203/0x2b0 [ 263.774387][ T29] prb_reserve+0x808/0xaf0 [ 263.774423][ T29] vprintk_store+0x56d/0x860 [ 263.774443][ T29] vprintk_emit+0x178/0x650 [ 263.774462][ T29] vprintk_default+0x26/0x30 [ 263.774482][ T29] vprintk+0x1d/0x30 [ 263.774510][ T29] _printk+0x79/0xa0 [ 263.774543][ T29] set_capacity_and_notify+0x14c/0x1f0 [ 263.774574][ T29] loop_set_size+0x2e/0x70 [ 263.774598][ T29] loop_configure+0x825/0x9c0 [ 263.774621][ T29] lo_ioctl+0x1e1/0x12b0 [ 263.774642][ T29] blkdev_ioctl+0x34f/0x440 [ 263.774670][ T29] __se_sys_ioctl+0xcb/0x140 [ 263.774691][ T29] __x64_sys_ioctl+0x43/0x50 [ 263.774711][ T29] x64_sys_call+0x1816/0x2ff0 [ 263.774737][ T29] do_syscall_64+0xd2/0x200 [ 263.774769][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.774795][ T29] [ 263.774801][ T29] read to 0xffffffff88e39b88 of 8 bytes by task 29 on cpu 1: [ 263.774820][ T29] data_push_tail+0xfd/0x420 [ 263.774858][ T29] data_alloc+0xbf/0x2b0 [ 263.774892][ T29] prb_reserve+0x808/0xaf0 [ 263.774926][ T29] vprintk_store+0x56d/0x860 [ 263.774946][ T29] vprintk_emit+0x178/0x650 [ 263.774966][ T29] vprintk_default+0x26/0x30 [ 263.774987][ T29] vprintk+0x1d/0x30 [ 263.775017][ T29] _printk+0x79/0xa0 [ 263.775052][ T29] kauditd_hold_skb+0x1b1/0x1c0 [ 263.775077][ T29] kauditd_send_queue+0x273/0x2c0 [ 263.775102][ T29] kauditd_thread+0x421/0x630 [ 263.775141][ T29] kthread+0x486/0x510 [ 263.775166][ T29] ret_from_fork+0xda/0x150 [ 263.775193][ T29] ret_from_fork_asm+0x1a/0x30 [ 263.775228][ T29] [ 263.775235][ T29] value changed: 0x00000000fffff396 -> 0x00000000ffffffc5 [ 263.775251][ T29] [ 263.775257][ T29] Reported by Kernel Concurrency Sanitizer on: [ 263.775273][ T29] CPU: 1 UID: 0 PID: 29 Comm: kauditd Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.775306][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.775324][ T29] ================================================================== [ 264.045619][T13679] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 264.063475][ T9] tipc: Node number set to 11578026 [ 264.121348][T13679] cgroup: No subsys list or none specified [ 264.956170][ T7176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.153724][ T1041] usb usb8-port1: attempt power cycle [ 266.973705][ T1041] usb usb8-port1: unable to enumerate USB device