last executing test programs: 1m30.715938134s ago: executing program 4 (id=402): epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0x20}, 0x38) 1m30.371725867s ago: executing program 4 (id=407): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m27.71491309s ago: executing program 4 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) dup(0xffffffffffffffff) capset(&(0x7f0000000380)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40202003, 0x0, 0x7db, 0x7, 0x443c}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 1m27.703589571s ago: executing program 4 (id=450): socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x20}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000002c0)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r1], 0x27) 1m27.650597766s ago: executing program 4 (id=451): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m27.474901903s ago: executing program 4 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1m19.355754835s ago: executing program 32 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) 1m12.497347268s ago: executing program 33 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 1m2.689256042s ago: executing program 3 (id=797): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000480)={[{@noinit_itable}, {@delalloc}, {@bsdgroups}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5dc, &(0x7f0000000bc0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x60) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m2.685044923s ago: executing program 6 (id=798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) 1m2.434103066s ago: executing program 3 (id=804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1m2.305919729s ago: executing program 3 (id=808): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1fe102182cde3182e36120e5e2795228"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMK={0x14, 0xfe, "254d53ab3f242fca8ea4a43b5b9fd429"}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) fcntl$setlease(r1, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r1, 0x400, 0x2) 1m2.191599129s ago: executing program 3 (id=812): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r0, 0x0, 0xf}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r1, 0x0, 0xf}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1m1.862622591s ago: executing program 3 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m1.751600361s ago: executing program 6 (id=819): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) 1m1.66548249s ago: executing program 6 (id=821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) 1m1.524599163s ago: executing program 3 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m0.984125374s ago: executing program 6 (id=833): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) sendmsg$netlink(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f00000006c0)=ANY=[], 0x174}, {&(0x7f0000007e00)={0x338, 0x28, 0x0, 0x70bd25, 0x25dfdbfb, "", [@typed={0x4, 0x2b}, @nested={0x69, 0x15, 0x0, 0x1, [@generic="a664ef5df0a9484fb0f28ab3404e15b6129a5efd279ff847d0972189685977a1e839adcc0112bada52a72be0efc0c90e24fb47481c6ea651e48b4c134079b54dcf8ce081386d292aef2c00340c290d6466e51b7f5c1c44100a50ff4705a2f667878b0b8eee"]}, @typed={0x8, 0xf6, 0x0, 0x0, @u32=0x6}, @nested={0xf1, 0x4b, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@local}, @generic="db1c1d05e3c5604c9a621213d78313c8aa434896973a9dca1eeaf2673665f15c0e0b34a9d8cdb339538b83c15a58a4fcfbfc2ebb4535de9fd9917fc91a982bf51212a911cfdd1cea84d7a46fa6c8fdd4c0046e85f764ab10955b4f3c18741e25502558e8b4911bc363e4aba8bde04908227007e7560403f5932f482f59165de4adac6661d21fb7e2d75ed00739fb01ba49abbfdf0c93e2838fda71f9a3288a730bdee2da71a0cdb39a495d1400a71692d931b3418453e23438245c2b7866781d7c6a2402dd7063c11abad6f073da7e13c8737da6d62d50a7c22040bb3f3bed542999c84439"]}, @typed={0x8, 0x85, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x75, 0x68, 0x0, 0x1, [@generic="61856a0274fb4f0d4a47be218181fcb248eca407a25519cd6216cb7f9af0d05c24c072629328cb15335e1bee52f061ca9325c5435b2fdff7050888a4d34483380e1b2c6d0fefc102ad2a69cabbecf8ae0dde69f312ff9045f154e6816df6ebbaf573487a4874981c4a67cd331d560862ca"]}, @nested={0x125, 0x52, 0x0, 0x1, [@typed={0x8, 0x6c, 0x0, 0x0, @pid}, @generic="f871d9b5c322c241210733df8c619b8d60871d149b62e51158a8321ac42259958b0a80b8195d5c66c2eae3b9d762d6a1aa6d9f84b564b2e224371e3c10c6bd7f3765bdc7b427d84ebb6d8a444f8c370c7c0c99df26cad6e0a9f62201e7c9571ff4719d13eb2fb47eec43660e841ec6091a26241f75928f29eadddd6266b0eaf62aa7acedebcf22e10628dad663343ea5e8034bb7bf2be9460ae37883e6b260c01891dcd87e6c6907dc4d868ce4ffada44abd28374cfdfce8cee9f16da6964be59f3f35ba33099945650795dad7eb1544445b4f200bc4eeca229abac1826e7c4fcc", @typed={0x8, 0x3, 0x0, 0x0, @pid}, @typed={0x29, 0x124, 0x0, 0x0, @binary="f8d743e0b97df08c0f99b87c55169629db1c0a77d33ccb96c4370a596ea9903f84a24a3c16"}, @nested={0x4, 0x104}]}]}, 0x338}, {&(0x7f0000000bc0)={0x1e4c, 0x36, 0x4, 0x70bd26, 0x25dfdbfe, "", [@nested={0x109, 0xbb, 0x0, 0x1, [@generic="11d90c5b338c2b5a2644f5d0856c8e1a7d0f3191ef500581c95a0e39e39939ec93f33965563a849f83a66c293117fbd586b3135c294ab1e9ab5ad27085ccbaff3f99b7a0119a18d4fa5d66480bf72ea76c5508c95026974e2b95fa38690a6791ca2ada0579559862e1081bb5e8133b85c77d", @nested={0x4, 0x58}, @generic="ed6ddbba49bc8a8a1ea62feeb15f154259a325f37fef9d34c17badf128c54788005871f578e3e795170bfb7555f9cc8928a602adab756ae93a1d77226f6816266ecd71f1f84033b651b9ab53d4b61d285ccf09177034b2a62914de3e67a32aae8969b14556e0a0", @typed={0x8, 0x13b, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0xd9}, @typed={0xc, 0x10e, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x129}, @nested={0x4, 0x44}, @typed={0x8, 0x13, 0x0, 0x0, @fd=r1}]}, @generic="a38fefdeb0fd5e01cecab48e0075e3664e7c1fabe0ca16796197339c009e527c5ab9a80b19", @nested={0x1009, 0x57, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @u32}, @generic="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"]}, @nested={0xcf9, 0x89, 0x0, 0x1, [@generic="3507ce5a2949b599eaf0db5f9957ae7830505ef0139912bf9c4854575438262d52c1b7613cebcca358cbdbd73d16b1a1aef7abc2b35fd35a98a913d8fa3af3be6721255407e7aaea63fa09a9f4977ea1df076aab2f3f4333ba967b52de9d3c54c861dd53114c34878cad14f0346f0d38455bba41c7df4348ba16c049fe362e0911f08775c9748b04d00c15b3674756091514549482a915e225a9723a352623b30d612204da4385f6a8ea05fd5183c656580bf7c3f72c3c8be50d81a7a8b7dc5f14668fa3e075f2e1a8", @generic="db19ff84901334ae288f54019cafd597681cd1ec3384bf04f505e9314b8ff3c42439b193fd599695765a95332673de8cac6a892425a79c87598537e4c18aa90fd42305aed1fe5ec476d5e999996b5ee8116c5f8c7da4518b463d30289af12d4992c4d727615a44e823b618205263bd5b68eb67a37a93d27305f6ccfd5be829adb4d0a3cdea51bd5c29177fbc19e5fb1b53754f7f8b6441667146ab2d83fad47b4f947921bcde5115734c334b0b3cf151f0bbed3cc975a3f1d020d8ff11c821281185829958e5619a", @generic="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"]}]}, 0x1e4c}], 0x4, 0x0, 0x0, 0x40101}, 0x40004) 1m0.898421583s ago: executing program 6 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m0.82317231s ago: executing program 6 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb88b425f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 1m0.630889778s ago: executing program 1 (id=842): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r2, 0x0, 0x4}, 0x18) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 1m0.615245729s ago: executing program 1 (id=844): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000340)=ANY=[], 0xfe37, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) rename(0x0, 0x0) 1m0.513653879s ago: executing program 1 (id=845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f00000002c0), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) read(r3, 0x0, 0x0) 1m0.494232351s ago: executing program 1 (id=846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x3, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1m0.318937068s ago: executing program 1 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m0.071756311s ago: executing program 1 (id=849): pipe2(&(0x7f0000000080), 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) unshare(0x20040600) unshare(0x2a060600) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) 52.962863658s ago: executing program 0 (id=912): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) 52.924389332s ago: executing program 0 (id=914): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1a9851, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) 52.822844121s ago: executing program 0 (id=916): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xe}, {0xd, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) 52.562230106s ago: executing program 0 (id=920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val}, {@nogrpid}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x9b, 0x4f2, &(0x7f0000000a40)="$eJzs3V1rHNcZAOB3Rlp/ypVMe+Ea6praRXJb70pWbYteuB+U9srQ1r2urUorIbTSCu3KtoRpZfoDCqW0hUKhV7kJ5AcEgn9CCBiS+5CEhJDYyYUvEm/YL3/Iu5KMV1qhfR4YzTlnZvSed5ed3TMzzATQs05HxJmIeFypVM5FxGCjPW1MP6pW1uvrPXxwZ6o6JVGpXPssiUjqbdVVRp75n0frm8ShiPjDbyP+nLwYt7S6Nj9ZKOSXG/VceWEpV1pdOz+3MDmbn80vjo+PXZq4PHFxYrQjeQ5ExJVff/Svv7/2mytv/eTW+9c/GflL0miPeJpHp9VTz9Rei6b+iFjeiWBd0NfIJ9NsaPFeAwCwdzR/5/8gIs7FYPTVfs0BAAAA+0nl5wPxVRJRAQAAAPattHYNbJJmG9cBDESaZrP1a3i/E0fSQrFU/vFMcWVxun6t7FBk0pm5Qn60ca3wUGSSan2sVn5av7ChPh4RxyPin4OHa/XsVLEw3e2DHwAAANAjjm4Y/385WB//AwAAAPvMULc7AAAAAOw4438AAADY/4z/AQAAYF/73dWr1anSfP719M3VlfnizfPT+dJ8dmFlKjtVXF7KzhaLs7V79i1s9f8KxeLST2Nx5XaunC+Vc6XVtesLxZXF8vW55x6BDQAAAOyi49+/914SEes/O1ybqg50u1PAruh/mZU/3Ll+ALuvr9sdALrmpb7/gX0l0+0OAF2XRMT/Nlne9uKdt3emPwAAQOcNf7f1+f9ky2MD6+kudRHYIY7/Qe9y/h96l/P/0Lsy0RcG8tDbki2Wv/r5/0rlpToEAAB03EBtStJsRO04wECkaTYbcaz2WIBMMjNXyI9GxLci4t3BzMFqfay2ZbLlmAEAAAAAAAAAAAAAAAAAAAAAAAAAqKtUkqgAAAAA+1pE+nHSeP7X8ODZgY3HBw4kjwZr84i49d9r/749WS4vj1XbP3/SXv5Po/1CN45gAAAAABs1x+nNcTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNLDB3emmtNuxv30lxEx1Cp+fxyqzQ9FJiKOfJFE/zPbJRHR14H463cj4ld/ahE/qXYrhhq9aBX/cKfin2iV/+bx04g42oH40MvuVfc/v2j1+UvjdG2+8fN38Mm2/R2I337/lz7Z//W12f8c22aMk/ffyLWNfzfiZH/r/U8zftIm/pltxr/xx7W1dssq/48Ybvn9kzwXK1deWMqVVtfOzy1MzuZn84vj42OXJi5PXJwYzc3MFfKNvy1j/ON7bz7eLP8jbeIPbZH/2W3m//X92w++XS9mWsUfOdP6/T/RJn7a+O77YaNcXT7cLK/Xy8869fo7pzbLf7pN/lu9/yPbzP/c7//2wTZXBQB2QWl1bX6yUMgv93ThlV6N6s+iPZGFwlaFSmPw1mz5617p2B4sND8Tj7qzYwIAADruxTHwdtzYuQ4BAAAAAAAAAAAAAAAAAABAD+rMPcOa98Te/O56Tev12Qv3QgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6KZvAgAA//9F0tDB") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 52.463627876s ago: executing program 0 (id=921): r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, 'fowner<'}}, {@debug={'debug', 0x3d, 0x3}}, {@access_any}, {@loose}, {@uname={'uname', 0x3d, 'trans=fd,'}}, {@mmap}, {@dfltgid}], [{@fowner_lt}]}}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000100)={0xe, 0x7, 0x1, {{0x1, '-'}, 0x207}}, 0xe) close_range(r0, r1, 0x0) 52.278905793s ago: executing program 0 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 52.278700933s ago: executing program 34 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) 46.451487067s ago: executing program 35 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) symlinkat(0x0, 0xffffffffffffff9c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 45.673238832s ago: executing program 36 (id=837): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a89723a0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb88b425f80200e3c0ab"], 0xdd12}], 0x1}, 0x0) 44.913358265s ago: executing program 37 (id=849): pipe2(&(0x7f0000000080), 0x80000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r0) unshare(0x20040600) unshare(0x2a060600) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) 2.774267166s ago: executing program 2 (id=1838): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x111}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c9", 0x4}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae87", 0x1f}, {&(0x7f0000001000)="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", 0x14d}], 0x3}}], 0x2, 0x4004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setresuid(0xee01, 0x0, 0x0) mlockall(0x7) io_setup(0x8f0, &(0x7f0000002400)) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.748071348s ago: executing program 8 (id=1839): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x45b4, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000700)=0xfffff7f8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) 1.99225047s ago: executing program 9 (id=1854): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffb, 0xfffffffb}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008e1}, 0x4890) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.922771306s ago: executing program 9 (id=1858): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 1.826959795s ago: executing program 8 (id=1861): unshare(0x62040200) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x18) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x28000600) syz_usb_disconnect(0xffffffffffffffff) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x5000000, 0x0) 1.826598646s ago: executing program 2 (id=1862): sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0xcb, 0xf, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) 1.088564746s ago: executing program 9 (id=1872): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x21700, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 978.553217ms ago: executing program 8 (id=1874): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 978.126097ms ago: executing program 9 (id=1875): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020090, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="a9", 0xfffff}], 0x1}}], 0x1, 0x54) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)=""/109, 0x6d}], 0x1}, 0x10022) 967.847267ms ago: executing program 2 (id=1876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad3", 0x2, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 912.078093ms ago: executing program 8 (id=1877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 776.428336ms ago: executing program 2 (id=1880): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r3, 0x2000, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) syz_clone(0x21000, 0x0, 0x4b, 0x0, 0x0, 0xfffffffffffffffc) 775.685786ms ago: executing program 8 (id=1881): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058000084696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c0196322e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d0300470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b720000000000000000000000000000005214e7febdbc00"], 0x1, 0x120b, &(0x7f0000002300)="$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") bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r2, &(0x7f0000002000)=""/4096, 0x1000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 716.838111ms ago: executing program 2 (id=1882): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x20048810) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34044884}, 0xc805) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r0) 658.726937ms ago: executing program 5 (id=1883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000010c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) 658.215017ms ago: executing program 2 (id=1884): syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRESOCT, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 629.24918ms ago: executing program 8 (id=1885): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}]) 573.280115ms ago: executing program 5 (id=1886): r0 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 508.215921ms ago: executing program 5 (id=1887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 507.414421ms ago: executing program 5 (id=1888): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) 251.650335ms ago: executing program 7 (id=1890): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffffa, 0xfffffff8, 0x6e6b, 0x1, 0x53, "0c4192cb366b0000001b08000000000400", 0x4, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000226000/0x1000)=nil, &(0x7f00005af000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffe2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd, 0xffe0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 215.924169ms ago: executing program 7 (id=1891): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000002c0)=0x2090, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, 0x0, 0xf5ffffffffffffff) 194.258301ms ago: executing program 7 (id=1892): socket$tipc(0x1e, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r0, 0x400, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="02000000080000000000000004000500000000001000"], 0x24, 0x3) fcntl$setlease(r0, 0x400, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000c71dcdeb706411b00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0), 0xc) add_key$keyring(&(0x7f0000000040), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) 161.250614ms ago: executing program 7 (id=1893): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "e77000002000"}}}}}}}, 0x0) 139.625646ms ago: executing program 7 (id=1894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x5) 137.945477ms ago: executing program 9 (id=1895): socket$kcm(0x21, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 93.196001ms ago: executing program 7 (id=1896): unshare(0x400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x7}}]}}]}, 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 92.770701ms ago: executing program 5 (id=1897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 58.952974ms ago: executing program 5 (id=1898): r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8005, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) getegid() semctl$IPC_RMID(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = inotify_init() inotify_add_watch(r2, 0x0, 0x82000714) semctl$SEM_STAT_ANY(r0, 0x3, 0x14, &(0x7f0000000500)=""/93) 0s ago: executing program 9 (id=1899): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2b68756765603ac4"], 0x9) r1 = syz_io_uring_setup(0x49e, &(0x7f00000004c0)={0x0, 0x79af, 0x80, 0x7fff, 0x2b6, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000007f0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000700)={&(0x7f0000002000)={[{&(0x7f0000000400)="7a8764", 0x3}, {&(0x7f00000009c0)="7fbb1f5ef870f431c3a508e164c81f38dec718a9c67cbde8e3f8263c0aed5c7b99a8c4ab31130c664fc11c3d1b68b9acc68c46c15342bb0efb16f8f734feb84af8b4b2eaf9bfc913e697ac5efcc513e5c8ab5de407acd4b6d8c3f191181400cc8f77a91e305a24db57bd57c6679cae27a9556ea65e836e7e7ab3c097718e51d42926f602b0a1103fbd34", 0x8a}, {&(0x7f00000005c0)='*', 0x1, 0x2}, {&(0x7f0000000a80)="359b595aa0315ba6220816a0bb9929f7907fe04f4036fd99385e1b234b848fbf294842c58dfaf8aaac748e0b0b4b72b24255e4a042295af9588bb0adc6cf1a07252c47a72f6df208520fbb8db235f9b901573661af59fad0cb1ed638b8625ce3b68c3ec2cc26e1b6e21d6d70c8174ae01f9490d20e556ac0ca4a34511fb86cc2cb5f48cfd210e1d60e7b0b3de2c9b24d05a7bc9c723dfec885f06c168b8f0cf064414252302b2d1372d6f8c4ab2ef97b763e6d22e792687ff31e5c12d40a60dd2175bfaa8c55b67dcb8ac60c22b55bc4ce107d31564343d5", 0xd8}, {&(0x7f0000000640)="271ed2c142c26f5a192689c2b3d7b45b838b02ac05872b24b5fcfad0192f95a7b0e482bcdc9bd54848d2ba8892a7c85c", 0x30, 0x3}, {&(0x7f0000001200)="50f7a7af6dff45c1dd979ac6bb892f553032ee3cc179c41e65a2c4eb31cd97263d1bce3b353b934d6b788c10e0dc6847becb9ae63c2bf29134826db3ab871fc4051a7cac0071990a3adedf278e01a3d8aed8c77737e06ad5f5ee71a5b026e8ca796428b71d8a590315b267a7440fa4524ec143ad78d65666f7fd334b65f99fd608d20c732315527a58f134748390a8bdce0f610bff1048952934a5b478493e07a7c0d206a900bd2942458bd87324e1021bb56f", 0xb3, 0x2}, {&(0x7f00000006c0)="3ab46dbf335fc0482149a926f6027556e149e0d02acf4566971a2bbc6ddf2503fed16b71111ebdc16b21ad0f3675fb6bce9b12", 0x33, 0x3}, {&(0x7f0000000b80)="0ec98a68b151ae0b3964d29d927458d3df17a2de6095e1f70b165f435d95a89a3084f51d343a04e316c7a47c8d96a2eb15685266fb708bcbe1dd13f0bb1982514e9500de9e05882f8614a3d081968693c38f", 0x52, 0x1}]}, 0x8}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) kernel console output (not intermixed with test programs): e=1400 audit(1766262574.977:2239): avc: denied { create } for pid=8845 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.113464][ T29] audit: type=1400 audit(1766262574.997:2240): avc: denied { bind } for pid=8845 comm="syz.0.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 85.180041][ T8850] set_capacity_and_notify: 1 callbacks suppressed [ 85.180104][ T8850] loop5: detected capacity change from 0 to 512 [ 85.226804][ T8850] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 85.243950][ T8850] EXT4-fs (loop5): orphan cleanup on readonly fs [ 85.259507][ T8850] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 85.287984][ T8854] loop0: detected capacity change from 0 to 1024 [ 85.304243][ T8850] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 85.321875][ T8854] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.332394][ T8850] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.879: bg 0: block 40: padding at end of block bitmap is not set [ 85.360466][ T8850] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 85.373918][ T8854] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 85.384211][ T8850] EXT4-fs (loop5): 1 truncate cleaned up [ 85.391446][ T8854] EXT4-fs (loop0): orphan cleanup on readonly fs [ 85.398190][ T8850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.398481][ T8854] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.880: Freeing blocks not in datazone - block = 0, count = 4096 [ 85.424469][ T8854] EXT4-fs (loop0): 1 orphan inode deleted [ 85.431036][ T8854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.457692][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.497472][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.619098][ T8861] loop0: detected capacity change from 0 to 1024 [ 85.634635][ T8861] EXT4-fs: Ignoring removed orlov option [ 85.684433][ T8861] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.786855][ T8868] loop5: detected capacity change from 0 to 512 [ 85.806310][ T8868] EXT4-fs: Ignoring removed nobh option [ 85.813047][ T8868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 85.854217][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.864586][ T8868] EXT4-fs (loop5): 1 truncate cleaned up [ 85.888559][ T8868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.963873][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.320514][ T8883] loop0: detected capacity change from 0 to 256 [ 86.412064][ T8883] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00000905) [ 86.572407][ T8893] loop0: detected capacity change from 0 to 128 [ 86.607924][ T8893] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 86.622955][ T8893] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.789394][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.995001][ T8905] xt_hashlimit: max too large, truncated to 1048576 [ 87.023297][ T8905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.064204][ T8902] loop0: detected capacity change from 0 to 8192 [ 87.345198][ T8914] loop5: detected capacity change from 0 to 128 [ 87.375985][ T8914] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.404355][ T8914] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.476615][ T7882] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.574041][ T8920] loop9: detected capacity change from 0 to 7 [ 87.591837][ T8920] buffer_io_error: 18 callbacks suppressed [ 87.591856][ T8920] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.619936][ T8920] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.627895][ T8920] loop9: unable to read partition table [ 87.652166][ T8920] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 87.652166][ T8920] ) failed (rc=-5) [ 87.667864][ T3762] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.676057][ T3762] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.684426][ T3762] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.692581][ T3762] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.711303][ T3762] Buffer I/O error on dev loop9, logical block 0, async page read [ 87.754396][ T8929] loop5: detected capacity change from 0 to 512 [ 87.782025][ T8929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.815830][ T8929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.844064][ T8929] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.984957][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.060332][ T8933] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=2842c118, mo2=0102] [ 88.098830][ T8933] System zones: 1-3, 19-19, 35-36 [ 88.109547][ T8933] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.154106][ T8933] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.257427][ T8933] EXT4-fs error (device loop5): ext4_check_dx_root:2201: inode #2: comm syz.5.909: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 88.325348][ T7882] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.540136][ T8940] vhci_hcd vhci_hcd.4: invalid port number 236 [ 88.802766][ T8950] netlink: 'syz.0.916': attribute type 13 has an invalid length. [ 88.979892][ T8956] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.989156][ T8956] EXT4-fs (loop0): blocks per group (42) and clusters per group (32768) inconsistent [ 89.458411][ T3966] bridge_slave_1: left allmulticast mode [ 89.464192][ T3966] bridge_slave_1: left promiscuous mode [ 89.470011][ T3966] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.504764][ T3966] bridge_slave_0: left allmulticast mode [ 89.510455][ T3966] bridge_slave_0: left promiscuous mode [ 89.516299][ T3966] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.816845][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 89.816859][ T29] audit: type=1400 audit(1766262579.717:2284): avc: denied { read write } for pid=8969 comm="syz.5.924" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.846756][ T29] audit: type=1400 audit(1766262579.717:2285): avc: denied { open } for pid=8969 comm="syz.5.924" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.885279][ T29] audit: type=1400 audit(1766262579.777:2286): avc: denied { ioctl } for pid=8969 comm="syz.5.924" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 89.910935][ T29] audit: type=1326 audit(1766262579.787:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8969 comm="syz.5.924" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d46b8f749 code=0x0 [ 89.995152][ T3966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.024468][ T3966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.034120][ T3966] bond0 (unregistering): Released all slaves [ 90.062448][ T3966] bond1 (unregistering): (slave bond2): Releasing backup interface [ 90.074041][ T3966] bond2 (unregistering): left promiscuous mode [ 90.084856][ T3966] bond1 (unregistering): Released all slaves [ 90.112956][ T3966] bond2 (unregistering): Released all slaves [ 90.164401][ T3966] tipc: Disabling bearer [ 90.169562][ T3966] tipc: Disabling bearer [ 90.174549][ T3966] tipc: Left network mode [ 90.230471][ T3966] hsr_slave_0: left promiscuous mode [ 90.254287][ T3966] hsr_slave_1: left promiscuous mode [ 90.414843][ T3966] team0 (unregistering): Port device team_slave_1 removed [ 90.464504][ T3966] team0 (unregistering): Port device team_slave_0 removed [ 90.612544][ T3966] team0 (unregistering): Port device dummy0 removed [ 90.689781][ T29] audit: type=1400 audit(1766262580.587:2288): avc: denied { create } for pid=8974 comm="syz.5.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.717493][ T8960] chnl_net:caif_netlink_parms(): no params data found [ 90.748182][ T29] audit: type=1400 audit(1766262580.607:2289): avc: denied { bind } for pid=8974 comm="syz.5.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.767471][ T29] audit: type=1400 audit(1766262580.617:2290): avc: denied { connect } for pid=8974 comm="syz.5.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.914392][ T8960] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.921528][ T8960] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.944044][ T8960] bridge_slave_0: entered allmulticast mode [ 90.950579][ T8960] bridge_slave_0: entered promiscuous mode [ 90.974664][ T8960] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.981764][ T8960] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.003926][ T8960] bridge_slave_1: entered allmulticast mode [ 91.010806][ T8960] bridge_slave_1: entered promiscuous mode [ 91.058667][ T8960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.074851][ T8960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.175352][ T8960] team0: Port device team_slave_0 added [ 91.182182][ T8960] team0: Port device team_slave_1 added [ 91.236730][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.243730][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.269737][ T8960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.281547][ T8960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.288577][ T8960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.315108][ T8960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.469188][ T8960] hsr_slave_0: entered promiscuous mode [ 91.475464][ T8960] hsr_slave_1: entered promiscuous mode [ 91.494122][ T8960] debugfs: 'hsr0' already exists in 'hsr' [ 91.499889][ T8960] Cannot create hsr debugfs directory [ 91.829911][ T8960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 91.846309][ T8960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 91.865817][ T8960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 91.886241][ T8960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 91.956179][ T8960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.979238][ T8960] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.996326][ T3960] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.003412][ T3960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.025846][ T3960] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.032955][ T3960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.154197][ T8960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.329470][ T8960] veth0_vlan: entered promiscuous mode [ 92.337896][ T8960] veth1_vlan: entered promiscuous mode [ 92.354648][ T8960] veth0_macvtap: entered promiscuous mode [ 92.362194][ T8960] veth1_macvtap: entered promiscuous mode [ 92.375015][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.387016][ T8960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.405306][ T3960] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.436662][ T29] audit: type=1400 audit(1766262582.337:2291): avc: denied { mounton } for pid=8960 comm="syz-executor" path="/root/syzkaller.C47Wxy/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 92.464009][ T3960] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.472803][ T3960] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.484759][ T3960] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.493588][ T29] audit: type=1400 audit(1766262582.367:2292): avc: denied { mounton } for pid=8960 comm="syz-executor" path="/root/syzkaller.C47Wxy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.520443][ T29] audit: type=1400 audit(1766262582.367:2293): avc: denied { mounton } for pid=8960 comm="syz-executor" path="/root/syzkaller.C47Wxy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 92.614541][ T9012] set_capacity_and_notify: 3 callbacks suppressed [ 92.614556][ T9012] loop7: detected capacity change from 0 to 128 [ 92.640702][ T9012] bio_check_eod: 32 callbacks suppressed [ 92.640761][ T9012] syz.7.923: attempt to access beyond end of device [ 92.640761][ T9012] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 92.684533][ T9012] syz.7.923: attempt to access beyond end of device [ 92.684533][ T9012] loop7: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 92.698251][ T9012] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 92.723915][ T9012] syz.7.923: attempt to access beyond end of device [ 92.723915][ T9012] loop7: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 92.738717][ T9012] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 92.774151][ T9012] syz.7.923: attempt to access beyond end of device [ 92.774151][ T9012] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 92.815254][ T9012] syz.7.923: attempt to access beyond end of device [ 92.815254][ T9012] loop7: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 92.828934][ T9012] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 92.864449][ T9012] syz.7.923: attempt to access beyond end of device [ 92.864449][ T9012] loop7: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 92.878318][ T9012] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 92.924673][ T9012] syz.7.923: attempt to access beyond end of device [ 92.924673][ T9012] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 92.952904][ T9012] syz.7.923: attempt to access beyond end of device [ 92.952904][ T9012] loop7: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 92.966682][ T9012] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 92.993965][ T9012] syz.7.923: attempt to access beyond end of device [ 92.993965][ T9012] loop7: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 93.007699][ T9012] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 93.043892][ T9012] syz.7.923: attempt to access beyond end of device [ 93.043892][ T9012] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 93.144239][ T9012] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 93.152723][ T9012] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 93.174702][ T9012] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 93.183412][ T9012] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 93.429690][ T9025] loop7: detected capacity change from 0 to 512 [ 93.494215][ T9025] EXT4-fs: dax option not supported [ 93.583119][ T9027] SELinux: failed to load policy [ 93.637269][ T9029] netlink: 4 bytes leftover after parsing attributes in process `syz.7.936'. [ 94.291490][ T9036] loop5: detected capacity change from 0 to 512 [ 94.344861][ T9036] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.939: iget: bad extra_isize 90 (inode size 256) [ 94.364626][ T9036] EXT4-fs (loop5): Remounting filesystem read-only [ 94.371271][ T9036] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -30) [ 94.433817][ T9036] EXT4-fs (loop5): 1 orphan inode deleted [ 94.453987][ T9036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.484393][ T9036] netlink: 'syz.5.939': attribute type 10 has an invalid length. [ 94.504726][ T9036] team0: Device dummy0 is up. Set it down before adding it as a team port [ 94.567204][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.767750][ T9045] loop7: detected capacity change from 0 to 512 [ 94.785489][ T9045] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.844486][ T9045] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.926308][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 94.926325][ T29] audit: type=1400 audit(1766262584.827:2299): avc: denied { execute_no_trans } for pid=9044 comm="syz.7.942" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.962365][ T9045] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #2: block 18: comm syz.7.942: lblock 23 mapped to illegal pblock 18 (length 1) [ 95.042247][ T8960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.227686][ T9054] syzkaller0: entered promiscuous mode [ 95.233219][ T9054] syzkaller0: entered allmulticast mode [ 95.268226][ T1409] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.327171][ T1409] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.387627][ T1409] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.393623][ T9065] loop5: detected capacity change from 0 to 512 [ 95.444865][ T9065] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.945: error while reading EA inode 32 err=-116 [ 95.464785][ T9065] EXT4-fs (loop5): Remounting filesystem read-only [ 95.477617][ T9065] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 95.487965][ T9065] EXT4-fs (loop5): 1 orphan inode deleted [ 95.489685][ T1409] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.495148][ T9065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.517507][ T9065] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.614170][ T29] audit: type=1400 audit(1766262585.517:2300): avc: denied { read } for pid=9071 comm="syz.5.947" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.698882][ T9075] syzkaller0: entered allmulticast mode [ 95.708582][ T9075] syzkaller0 (unregistering): left allmulticast mode [ 95.753573][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 95.800909][ T1409] bridge_slave_1: left allmulticast mode [ 95.806685][ T1409] bridge_slave_1: left promiscuous mode [ 95.812442][ T1409] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.850854][ T1409] bridge_slave_0: left allmulticast mode [ 95.856617][ T1409] bridge_slave_0: left promiscuous mode [ 95.862394][ T1409] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.874998][ T29] audit: type=1400 audit(1766262585.777:2301): avc: denied { setopt } for pid=9077 comm="syz.5.950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.017282][ T1409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.027365][ T1409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.037578][ T1409] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 96.047161][ T1409] bond0 (unregistering): Released all slaves [ 96.057922][ T1409] bond1 (unregistering): Released all slaves [ 96.120304][ T1409] hsr_slave_0: left promiscuous mode [ 96.137772][ T1409] hsr_slave_1: left promiscuous mode [ 96.150378][ T1409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.157847][ T1409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.165847][ T1409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.173270][ T1409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.201285][ T9092] loop7: detected capacity change from 0 to 1024 [ 96.210119][ T1409] veth1_macvtap: left promiscuous mode [ 96.217312][ T9092] EXT4-fs: inline encryption not supported [ 96.224000][ T1409] veth0_macvtap: left promiscuous mode [ 96.232936][ T1409] veth1_vlan: left promiscuous mode [ 96.239276][ T1409] veth0_vlan: left promiscuous mode [ 96.246621][ T9092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.262465][ T9092] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.951: Allocating blocks 385-513 which overlap fs metadata [ 96.278187][ T9092] EXT4-fs (loop7): pa ffff8881079cc3f0: logic 16, phys. 129, len 24 [ 96.286324][ T9092] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 96.296816][ T9092] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 96.309121][ T9092] EXT4-fs (loop7): This should not happen!! Data will be lost [ 96.309121][ T9092] [ 96.318830][ T9092] EXT4-fs (loop7): Total free blocks count 0 [ 96.324898][ T9092] EXT4-fs (loop7): Free/Dirty block details [ 96.330829][ T9092] EXT4-fs (loop7): free_blocks=128 [ 96.336171][ T9092] EXT4-fs (loop7): dirty_blocks=0 [ 96.341221][ T9092] EXT4-fs (loop7): Block reservation details [ 96.347275][ T9092] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 96.436443][ T1409] team0 (unregistering): Port device team_slave_1 removed [ 96.457080][ T1409] team0 (unregistering): Port device team_slave_0 removed [ 96.525154][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.532291][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.555917][ T9055] bridge_slave_0: entered allmulticast mode [ 96.569638][ T9055] bridge_slave_0: entered promiscuous mode [ 96.587817][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.595096][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.612897][ T9055] bridge_slave_1: entered allmulticast mode [ 96.627326][ T9055] bridge_slave_1: entered promiscuous mode [ 96.671481][ T29] audit: type=1400 audit(1766262586.567:2302): avc: denied { setopt } for pid=9102 comm="syz.7.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 96.696354][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.715957][ T9103] loop7: detected capacity change from 0 to 512 [ 96.728623][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.747180][ T9110] netlink: 24 bytes leftover after parsing attributes in process `syz.5.956'. [ 96.756706][ T9103] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 96.779496][ T9103] EXT4-fs (loop7): orphan cleanup on readonly fs [ 96.798069][ T9103] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.954: corrupted inode contents [ 96.816495][ T9055] team0: Port device team_slave_0 added [ 96.824550][ T9103] EXT4-fs (loop7): Remounting filesystem read-only [ 96.831260][ T9103] EXT4-fs (loop7): 1 truncate cleaned up [ 96.840697][ T3962] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.842921][ T9055] team0: Port device team_slave_1 added [ 96.851295][ T3962] Quota error (device loop7): write_blk: dquota write failed [ 96.864294][ T3962] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 96.874393][ T3962] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 96.884963][ T3962] Quota error (device loop7): write_blk: dquota write failed [ 96.892358][ T3962] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 96.923185][ T3962] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 96.933381][ T3962] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 96.942492][ T3962] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 96.947178][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.959442][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.985498][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.997596][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.004729][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.030668][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.041943][ T9103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.074300][ T9080] chnl_net:caif_netlink_parms(): no params data found [ 97.124673][ T8960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.138399][ T9055] hsr_slave_0: entered promiscuous mode [ 97.144901][ T9055] hsr_slave_1: entered promiscuous mode [ 97.150841][ T9055] debugfs: 'hsr0' already exists in 'hsr' [ 97.156633][ T9055] Cannot create hsr debugfs directory [ 97.200447][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.207586][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.215390][ T9080] bridge_slave_0: entered allmulticast mode [ 97.221936][ T9080] bridge_slave_0: entered promiscuous mode [ 97.232430][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.239587][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.246898][ T9080] bridge_slave_1: entered allmulticast mode [ 97.253425][ T9080] bridge_slave_1: entered promiscuous mode [ 97.301303][ T9080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.325521][ T9137] sd 0:0:1:0: device reset [ 97.326022][ T9080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.356897][ T9137] lo speed is unknown, defaulting to 1000 [ 97.374289][ T9137] lo speed is unknown, defaulting to 1000 [ 97.382376][ T9080] team0: Port device team_slave_0 added [ 97.388195][ T9137] lo speed is unknown, defaulting to 1000 [ 97.390977][ T9080] team0: Port device team_slave_1 added [ 97.402080][ T9137] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.410704][ T9137] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 97.432319][ T9137] lo speed is unknown, defaulting to 1000 [ 97.446868][ T9137] lo speed is unknown, defaulting to 1000 [ 97.447480][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.459718][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.485879][ T9080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.505955][ T9137] lo speed is unknown, defaulting to 1000 [ 97.517491][ T9080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.524525][ T9080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.550784][ T9080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.561801][ T9137] lo speed is unknown, defaulting to 1000 [ 97.578790][ T9137] lo speed is unknown, defaulting to 1000 [ 97.593091][ T9137] lo speed is unknown, defaulting to 1000 [ 97.598228][ T9080] hsr_slave_0: entered promiscuous mode [ 97.605215][ T9080] hsr_slave_1: entered promiscuous mode [ 97.611262][ T9080] debugfs: 'hsr0' already exists in 'hsr' [ 97.617154][ T9080] Cannot create hsr debugfs directory [ 97.622988][ T9104] chnl_net:caif_netlink_parms(): no params data found [ 97.632587][ T9137] lo speed is unknown, defaulting to 1000 [ 97.651897][ T9137] lo speed is unknown, defaulting to 1000 [ 97.688655][ T9055] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 97.703954][ T9142] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 97.720416][ T9055] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 97.744898][ T9055] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 97.763429][ T9055] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 97.790034][ T1409] bridge_slave_1: left allmulticast mode [ 97.795774][ T1409] bridge_slave_1: left promiscuous mode [ 97.801470][ T1409] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.811080][ T1409] bridge_slave_0: left allmulticast mode [ 97.816794][ T1409] bridge_slave_0: left promiscuous mode [ 97.822629][ T1409] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.878104][ T1409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.887639][ T1409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.897676][ T1409] bond0 (unregistering): Released all slaves [ 97.920499][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.927949][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.937571][ T9104] bridge_slave_0: entered allmulticast mode [ 97.944730][ T9104] bridge_slave_0: entered promiscuous mode [ 97.958043][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.965300][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.973621][ T9104] bridge_slave_1: entered allmulticast mode [ 97.980911][ T9104] bridge_slave_1: entered promiscuous mode [ 97.996882][ T1409] hsr_slave_0: left promiscuous mode [ 98.003127][ T1409] hsr_slave_1: left promiscuous mode [ 98.009127][ T1409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.017039][ T1409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.053171][ T1409] team0 (unregistering): Port device team_slave_1 removed [ 98.063148][ T1409] team0 (unregistering): Port device team_slave_0 removed [ 98.141333][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.182456][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.210700][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.222291][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.240906][ T9055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.251474][ T9055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.293512][ T3959] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.300754][ T3959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.316678][ T3959] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.323899][ T3959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.346178][ T9104] team0: Port device team_slave_0 added [ 98.351876][ T9080] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 98.364038][ T9104] team0: Port device team_slave_1 added [ 98.375368][ T9080] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 98.395379][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.421186][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.428214][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.454275][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.466868][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.473903][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.500003][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.511099][ T9080] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 98.524494][ T9080] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 98.555315][ T9104] hsr_slave_0: entered promiscuous mode [ 98.561816][ T9104] hsr_slave_1: entered promiscuous mode [ 98.568326][ T9104] debugfs: 'hsr0' already exists in 'hsr' [ 98.574138][ T9104] Cannot create hsr debugfs directory [ 98.665645][ T9080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.709356][ T9178] loop7: detected capacity change from 0 to 164 [ 98.720601][ T9178] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.734876][ T9080] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.742707][ T9178] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 98.751330][ T9178] Symlink component flag not implemented [ 98.757039][ T9178] Symlink component flag not implemented [ 98.771203][ T3954] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.774249][ T9178] Symlink component flag not implemented (7) [ 98.778422][ T3954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.784350][ T9178] Symlink component flag not implemented (116) [ 98.813200][ T3954] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.820329][ T3954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.841042][ T9055] veth0_vlan: entered promiscuous mode [ 98.878803][ T9055] veth1_vlan: entered promiscuous mode [ 98.912785][ T9055] veth0_macvtap: entered promiscuous mode [ 98.920879][ T9055] veth1_macvtap: entered promiscuous mode [ 98.933656][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.942791][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.964763][ T3966] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.978014][ T3966] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.995257][ T3966] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.018260][ T3966] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.062155][ T9104] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.071877][ T9104] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.091396][ T9080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.099191][ T9104] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.118226][ T9104] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.230907][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.255163][ T9104] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.267188][ T838] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.274358][ T838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.319178][ T838] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.326315][ T838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.386675][ T9104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.444742][ T9080] veth0_vlan: entered promiscuous mode [ 99.460879][ T9080] veth1_vlan: entered promiscuous mode [ 99.540865][ T9080] veth0_macvtap: entered promiscuous mode [ 99.557250][ T9080] veth1_macvtap: entered promiscuous mode [ 99.574962][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.609798][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.635973][ T9080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.654034][ T3970] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.663240][ T3970] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.672198][ T9238] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 99.680074][ T9238] vhci_hcd vhci_hcd.2: invalid port number 96 [ 99.680409][ T3970] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.686293][ T9238] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 99.728947][ T3970] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.815311][ T9104] veth0_vlan: entered promiscuous mode [ 99.832116][ T9104] veth1_vlan: entered promiscuous mode [ 99.864150][ T9104] veth0_macvtap: entered promiscuous mode [ 99.885125][ T9104] veth1_macvtap: entered promiscuous mode [ 99.910485][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.949105][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.980269][ T838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.997377][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 99.997393][ T29] audit: type=1326 audit(1766262589.897:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.029621][ T838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.039664][ T29] audit: type=1326 audit(1766262589.937:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.067730][ T838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.076688][ T29] audit: type=1326 audit(1766262589.937:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1c74af783 code=0x7ffc0000 [ 100.100044][ T29] audit: type=1326 audit(1766262589.937:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1c74af783 code=0x7ffc0000 [ 100.101016][ T838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.123343][ T29] audit: type=1326 audit(1766262589.937:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.155613][ T29] audit: type=1326 audit(1766262589.937:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.211568][ T29] audit: type=1326 audit(1766262590.037:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.235105][ T29] audit: type=1326 audit(1766262590.037:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.258590][ T29] audit: type=1326 audit(1766262590.037:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.282063][ T29] audit: type=1326 audit(1766262590.037:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.8.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe1c74af749 code=0x7ffc0000 [ 100.329482][ T9266] loop5: detected capacity change from 0 to 4096 [ 100.365248][ T9266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.382433][ T9268] SELinux: failed to load policy [ 100.444161][ T9276] loop7: detected capacity change from 0 to 1024 [ 100.456189][ T3478] hid_parser_main: 11 callbacks suppressed [ 100.456208][ T3478] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 100.481740][ T9276] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 100.494465][ T3478] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.513937][ T9276] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.534498][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.544380][ T9278] loop2: detected capacity change from 0 to 2048 [ 100.578949][ T9276] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.989: lblock 0 mapped to illegal pblock 0 (length 6) [ 100.604485][ T9278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.630182][ T9276] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 100.642635][ T9276] EXT4-fs (loop7): This should not happen!! Data will be lost [ 100.642635][ T9276] [ 100.657879][ T9289] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.989: lblock 0 mapped to illegal pblock 0 (length 1) [ 100.667976][ T9290] tipc: Started in network mode [ 100.676148][ T9290] tipc: Node identity d6e36877752b, cluster identity 4711 [ 100.683526][ T9290] tipc: Enabled bearer , priority 0 [ 100.689434][ T9289] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.989: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 100.708772][ T9288] syzkaller1: entered promiscuous mode [ 100.714311][ T9288] syzkaller1: entered allmulticast mode [ 100.715624][ T9289] EXT4-fs error (device loop7) in ext4_setattr:6035: Corrupt filesystem [ 100.745730][ T3959] tipc: Resetting bearer [ 100.756957][ T8960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.771865][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.804128][ T9283] tipc: Resetting bearer [ 100.839477][ T9283] tipc: Disabling bearer [ 100.855182][ T9298] syz.8.994 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 100.866891][ T9295] netlink: 204 bytes leftover after parsing attributes in process `gtp'. [ 100.876051][ T9298] netlink: 10 bytes leftover after parsing attributes in process `syz.8.994'. [ 100.970432][ T9295] lo speed is unknown, defaulting to 1000 [ 100.980606][ T9305] loop5: detected capacity change from 0 to 512 [ 101.024739][ T9305] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.088632][ T9305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.127864][ T9305] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.233020][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.263439][ T9329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.270904][ T9329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.285636][ T9329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.293068][ T9329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.316297][ T9327] lo speed is unknown, defaulting to 1000 [ 101.331551][ T9335] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 101.350649][ T9335] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 101.467877][ T9342] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.500219][ T9345] smc: net device bond0 applied user defined pnetid SYZ0 [ 101.508741][ T9345] smc: net device bond0 erased user defined pnetid SYZ0 [ 101.734165][ T9362] loop8: detected capacity change from 0 to 128 [ 101.811894][ T9369] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.830440][ T9371] loop7: detected capacity change from 0 to 512 [ 101.847388][ T9371] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 101.868330][ T9371] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1021: Allocating blocks 41-42 which overlap fs metadata [ 101.882998][ T9371] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.1021: Allocating blocks 41-42 which overlap fs metadata [ 101.897922][ T9371] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1021: Failed to acquire dquot type 1 [ 101.909538][ T9371] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 101.924403][ T9371] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1021: corrupted inode contents [ 101.937871][ T9371] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.1021: mark_inode_dirty error [ 101.952775][ T9371] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1021: corrupted inode contents [ 101.984884][ T9371] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.1021: mark_inode_dirty error [ 101.996816][ T9371] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1021: corrupted inode contents [ 102.009043][ T9371] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 102.022245][ T9369] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.033139][ T9371] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.1021: corrupted inode contents [ 102.048027][ T9381] loop5: detected capacity change from 0 to 128 [ 102.055095][ T9371] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.1021: mark_inode_dirty error [ 102.078634][ T9371] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 102.095257][ T9369] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.106080][ T9371] EXT4-fs (loop7): 1 truncate cleaned up [ 102.112181][ T9371] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.134761][ T9371] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.169124][ T9369] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.190272][ T3981] bio_check_eod: 32 callbacks suppressed [ 102.190289][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.190289][ T3981] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 102.210287][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.210287][ T3981] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 102.224154][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.224154][ T3981] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 102.245524][ T3959] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.275124][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.275124][ T3981] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 102.291050][ T838] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.313838][ T838] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.322096][ T838] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.339397][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.339397][ T3981] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 102.363465][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.363465][ T3981] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 102.377229][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.377229][ T3981] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 102.391074][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.391074][ T3981] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 102.404698][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.404698][ T3981] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 102.418630][ T3981] kworker/u8:38: attempt to access beyond end of device [ 102.418630][ T3981] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 102.563273][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1030'. [ 102.585452][ T9393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.593112][ T9393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.610628][ T9393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.618229][ T9393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.723126][ T9401] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1033'. [ 102.871049][ T9412] netlink: '+}[@': attribute type 7 has an invalid length. [ 102.878460][ T9412] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 102.996987][ T9419] SELinux: failed to load policy [ 103.075134][ T9431] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1046'. [ 103.188966][ T9446] loop8: detected capacity change from 0 to 512 [ 103.197663][ T9446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.237259][ T9446] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.279981][ T9446] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.309814][ T9457] loop7: detected capacity change from 0 to 512 [ 103.331617][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.363909][ T9457] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 103.372491][ T9457] EXT4-fs (loop7): invalid journal inode [ 103.407240][ T9457] EXT4-fs (loop7): can't get journal size [ 103.430017][ T9457] EXT4-fs (loop7): 1 truncate cleaned up [ 103.450568][ T9457] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.525862][ T8960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.607848][ T9475] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1063'. [ 103.716875][ T9479] loop7: detected capacity change from 0 to 1024 [ 103.724330][ T9479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.732927][ T9479] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 103.741570][ T9479] System zones: 0-1, 3-36 [ 103.747330][ T9479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.794360][ T8960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.873599][ T9495] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1068'. [ 103.914382][ T9498] loop9: detected capacity change from 0 to 1024 [ 103.928246][ T9498] EXT4-fs: Ignoring removed orlov option [ 103.954814][ T9503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9503 comm=syz.2.1072 [ 103.970158][ T9498] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.001950][ T9505] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 104.018063][ T9505] SELinux: failed to load policy [ 104.033722][ T9507] loop2: detected capacity change from 0 to 2048 [ 104.069161][ T9507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.099392][ T9507] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 104.099568][ T9511] loop7: detected capacity change from 0 to 512 [ 104.121192][ T9511] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 104.131952][ T9507] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28 [ 104.144443][ T9507] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.144443][ T9507] [ 104.154160][ T9507] EXT4-fs (loop2): Total free blocks count 0 [ 104.160180][ T9507] EXT4-fs (loop2): Free/Dirty block details [ 104.166164][ T9507] EXT4-fs (loop2): free_blocks=2415919104 [ 104.171909][ T9507] EXT4-fs (loop2): dirty_blocks=32 [ 104.177288][ T9507] EXT4-fs (loop2): Block reservation details [ 104.183443][ T9507] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 104.191433][ T9511] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1074: invalid indirect mapped block 4294967295 (level 0) [ 104.205956][ T9511] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.1074: invalid indirect mapped block 4294967295 (level 1) [ 104.221151][ T9511] EXT4-fs (loop7): 1 orphan inode deleted [ 104.226958][ T9511] EXT4-fs (loop7): 1 truncate cleaned up [ 104.238607][ T9511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.256478][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.313843][ T8960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.326779][ T9517] loop8: detected capacity change from 0 to 128 [ 104.436152][ T9080] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.493663][ T9526] loop9: detected capacity change from 0 to 1024 [ 104.565540][ T9526] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.745590][ T9080] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.834186][ T9546] loop8: detected capacity change from 0 to 512 [ 104.857446][ T9546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.882942][ T9546] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.899535][ T9553] netlink: 'syz.9.1087': attribute type 5 has an invalid length. [ 104.953006][ T9546] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 104.988956][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.015003][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 105.015022][ T29] audit: type=1400 audit(1766262594.917:2602): avc: denied { append } for pid=9562 comm="syz.8.1093" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 105.068912][ T9565] loop9: detected capacity change from 0 to 512 [ 105.082019][ T9565] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 105.099753][ T9565] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1094: invalid indirect mapped block 4294967295 (level 0) [ 105.124005][ T9565] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.1094: invalid indirect mapped block 4294967295 (level 1) [ 105.126301][ T29] audit: type=1326 audit(1766262595.017:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9568 comm="syz.2.1096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x0 [ 105.141255][ T9565] EXT4-fs (loop9): 1 orphan inode deleted [ 105.167086][ T9565] EXT4-fs (loop9): 1 truncate cleaned up [ 105.173852][ T9565] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.209537][ T9080] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.259685][ T9576] loop9: detected capacity change from 0 to 512 [ 105.267435][ T9579] loop5: detected capacity change from 0 to 1024 [ 105.275454][ T9579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.282802][ T9576] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.299491][ T9579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.318602][ T9576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.348034][ T9576] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #2: block 18: comm syz.9.1098: lblock 23 mapped to illegal pblock 18 (length 1) [ 105.391644][ T29] audit: type=1400 audit(1766262595.287:2604): avc: denied { create } for pid=9586 comm="syz.8.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.414719][ T9080] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.587609][ T9596] SELinux: failed to load policy [ 105.611777][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.758783][ T29] audit: type=1400 audit(1766262595.657:2605): avc: denied { write } for pid=9601 comm="syz.9.1108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.841201][ T29] audit: type=1400 audit(1766262595.737:2606): avc: denied { read } for pid=9606 comm="syz.7.1110" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.864806][ T29] audit: type=1400 audit(1766262595.737:2607): avc: denied { open } for pid=9606 comm="syz.7.1110" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.889539][ T29] audit: type=1400 audit(1766262595.767:2608): avc: denied { connect } for pid=9608 comm="syz.5.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 105.912466][ T29] audit: type=1400 audit(1766262595.817:2609): avc: denied { ioctl } for pid=9606 comm="syz.7.1110" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 105.974508][ T9611] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.984864][ T9611] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.041541][ T9611] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.051922][ T9611] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.071074][ T9620] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 106.083818][ T29] audit: type=1400 audit(1766262595.967:2610): avc: denied { bind } for pid=9619 comm="syz.2.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.112313][ T9620] team0: Failed to send options change via netlink (err -105) [ 106.119887][ T9620] team0: Port device dummy0 added [ 106.125730][ T9625] netlink: 'syz.2.1116': attribute type 10 has an invalid length. [ 106.134456][ T9625] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.145451][ T9625] team0: Failed to send options change via netlink (err -105) [ 106.153079][ T9625] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 106.162436][ T9625] team0: Port device dummy0 removed [ 106.174067][ T9625] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.199391][ T9611] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.209781][ T9611] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.238911][ T29] audit: type=1400 audit(1766262596.127:2611): avc: denied { execute } for pid=9628 comm="syz.7.1119" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=17403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 106.331652][ T9611] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.342121][ T9611] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.356281][ T9638] netlink: 'syz.7.1132': attribute type 30 has an invalid length. [ 106.426472][ T3989] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.434801][ T3989] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.456617][ T3989] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.464962][ T3989] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.477618][ T3989] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.485903][ T3989] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.494593][ T3989] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.502864][ T3989] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.643320][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1127'. [ 106.655053][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1127'. [ 106.944551][ T9659] EXT4-fs: Ignoring removed bh option [ 106.956277][ T9659] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.970480][ T9659] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.019677][ T9675] netlink: 'syz.5.1136': attribute type 12 has an invalid length. [ 107.055609][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.079764][ T9678] IPv4: Oversized IP packet from 127.202.26.0 [ 107.095381][ T9679] netlink: 'syz.7.1139': attribute type 10 has an invalid length. [ 107.122613][ T9679] team0 (unregistering): Port device team_slave_0 removed [ 107.135198][ T9679] team0 (unregistering): Port device team_slave_1 removed [ 107.152822][ T9683] netlink: 'syz.5.1140': attribute type 4 has an invalid length. [ 107.199616][ T9683] netlink: 'syz.5.1140': attribute type 4 has an invalid length. [ 107.362221][ T9705] netlink: 'syz.7.1150': attribute type 10 has an invalid length. [ 107.402714][ T9705] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.468064][ T9714] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1154'. [ 107.499202][ T9714] .`: renamed from bond0 (while UP) [ 107.587241][ T9720] tipc: Started in network mode [ 107.592185][ T9720] tipc: Node identity 1ec44d1b0d12, cluster identity 4711 [ 107.599435][ T9720] tipc: Enabled bearer , priority 0 [ 107.615401][ T9719] tipc: Resetting bearer [ 107.655461][ T9719] tipc: Disabling bearer [ 107.793622][ T9747] EXT4-fs: Ignoring removed nobh option [ 107.799386][ T9747] EXT4-fs: Ignoring removed bh option [ 107.819102][ T9747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.835530][ T9747] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.913524][ T9758] EXT4-fs: inline encryption not supported [ 107.919459][ T9758] EXT4-fs: Ignoring removed orlov option [ 107.954109][ T9758] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 107.975824][ T9758] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 107.977167][ T9762] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.008692][ T9758] System zones: 0-1, 3-12 [ 108.025349][ T9758] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.044503][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.193062][ T9758] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 108.205548][ T9758] EXT4-fs (loop8): This should not happen!! Data will be lost [ 108.205548][ T9758] [ 108.215538][ T9758] EXT4-fs (loop8): Total free blocks count 0 [ 108.221548][ T9758] EXT4-fs (loop8): Free/Dirty block details [ 108.227546][ T9758] EXT4-fs (loop8): free_blocks=0 [ 108.232568][ T9758] EXT4-fs (loop8): dirty_blocks=0 [ 108.237655][ T9758] EXT4-fs (loop8): Block reservation details [ 108.243842][ T9758] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 108.280992][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.611445][ T9864] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1181'. [ 108.620794][ T9864] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1181'. [ 108.693531][ T9875] netlink: 320 bytes leftover after parsing attributes in process `syz.7.1185'. [ 108.721886][ T9877] syzkaller1: entered promiscuous mode [ 108.727622][ T9877] syzkaller1: entered allmulticast mode [ 108.871482][ T9883] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1190'. [ 109.297598][ T3387] Process accounting resumed [ 110.193174][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 110.193194][ T29] audit: type=1326 audit(1766262600.087:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.251403][ T29] audit: type=1326 audit(1766262600.087:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.275051][ T29] audit: type=1326 audit(1766262600.087:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.298536][ T29] audit: type=1326 audit(1766262600.087:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.322124][ T29] audit: type=1326 audit(1766262600.087:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.345586][ T29] audit: type=1326 audit(1766262600.087:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.369282][ T29] audit: type=1326 audit(1766262600.087:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.393022][ T29] audit: type=1326 audit(1766262600.087:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.416570][ T29] audit: type=1326 audit(1766262600.087:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.440019][ T29] audit: type=1326 audit(1766262600.087:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9940 comm="syz.7.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 110.513629][ T9953] VFS: Mount too revealing [ 110.578878][ T3779] Bluetooth: hci0: command 0x1003 tx timeout [ 110.594003][ T5570] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 110.742475][ T9965] tipc: Started in network mode [ 110.747451][ T9965] tipc: Node identity 3aceb692ddaf, cluster identity 4711 [ 110.754660][ T9965] tipc: Enabled bearer , priority 0 [ 110.767070][ T9965] tipc: Disabling bearer [ 110.797884][ T9967] validate_nla: 2 callbacks suppressed [ 110.797955][ T9967] netlink: 'syz.5.1222': attribute type 10 has an invalid length. [ 110.811347][ T9967] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1222'. [ 111.270114][ T9993] set_capacity_and_notify: 4 callbacks suppressed [ 111.270136][ T9993] loop2: detected capacity change from 0 to 1024 [ 111.312005][ T9993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.348073][ T9993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.523018][T10003] hub 2-0:1.0: USB hub found [ 111.528124][T10003] hub 2-0:1.0: 8 ports detected [ 111.756332][T10016] loop5: detected capacity change from 0 to 512 [ 111.797861][T10016] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.875952][T10016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.903218][T10016] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.053516][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.090684][T10034] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1248'. [ 112.141849][T10037] tipc: Started in network mode [ 112.146800][T10037] tipc: Node identity , cluster identity 4711 [ 112.152898][T10037] tipc: Failed to obtain node identity [ 112.158434][T10037] tipc: Enabling of bearer rejected, failed to enable media [ 112.605975][T10053] netlink: 'syz.7.1254': attribute type 12 has an invalid length. [ 112.622391][T10055] loop8: detected capacity change from 0 to 1024 [ 112.638744][ T9993] syz.2.1233 (9993) used greatest stack depth: 7216 bytes left [ 112.656427][T10055] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 112.667450][T10055] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 112.688917][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.744372][T10055] JBD2: no valid journal superblock found [ 112.750191][T10055] EXT4-fs (loop8): Could not load journal inode [ 112.877329][T10073] loop2: detected capacity change from 0 to 1024 [ 113.015816][T10073] EXT4-fs: inline encryption not supported [ 113.049179][T10073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.634323][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.714141][T10103] loop2: detected capacity change from 0 to 2048 [ 113.721048][ T7821] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 113.740317][ T7821] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.768630][T10108] loop8: detected capacity change from 0 to 512 [ 113.775885][T10108] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 113.820228][T10106] fido_id[10106]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 113.844346][T10108] EXT4-fs (loop8): 1 orphan inode deleted [ 113.850140][T10108] EXT4-fs (loop8): 1 truncate cleaned up [ 113.880401][T10108] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.996602][T10122] syzkaller0: entered promiscuous mode [ 114.002252][T10122] syzkaller0: entered allmulticast mode [ 114.010787][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.106225][T10136] sd 0:0:1:0: device reset [ 114.286084][T10153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.304823][T10153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.456552][T10163] ªªªªªª: renamed from wg2 (while UP) [ 114.693287][T10180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.703655][T10180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.921797][ T3414] lo speed is unknown, defaulting to 1000 [ 115.035524][T10222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1324'. [ 115.047530][T10222] bridge_slave_1: left allmulticast mode [ 115.053221][T10222] bridge_slave_1: left promiscuous mode [ 115.058996][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.085663][T10226] loop2: detected capacity change from 0 to 512 [ 115.092357][T10226] EXT4-fs: Ignoring removed i_version option [ 115.098423][T10226] EXT4-fs: Ignoring removed bh option [ 115.114309][T10222] bridge_slave_0: left allmulticast mode [ 115.120106][T10222] bridge_slave_0: left promiscuous mode [ 115.126023][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.136089][T10226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.150320][T10226] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.204519][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.297320][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 115.297335][ T29] audit: type=1400 audit(1766262605.197:2831): avc: denied { mount } for pid=10245 comm="syz.2.1335" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 115.424921][ T29] audit: type=1326 audit(1766262605.327:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.454899][ T29] audit: type=1326 audit(1766262605.327:2833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.478567][ T29] audit: type=1326 audit(1766262605.327:2834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.502277][ T29] audit: type=1326 audit(1766262605.327:2835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.525815][ T29] audit: type=1326 audit(1766262605.327:2836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.549363][ T29] audit: type=1326 audit(1766262605.327:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.572965][ T29] audit: type=1326 audit(1766262605.327:2838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.596496][ T29] audit: type=1326 audit(1766262605.327:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.620222][ T29] audit: type=1326 audit(1766262605.347:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10250 comm="syz.2.1338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 115.696324][T10264] netlink: 4 bytes leftover after parsing attributes in process `+°ç@'. [ 115.714044][T10264] bridge_slave_1: left allmulticast mode [ 115.719840][T10264] bridge_slave_1: left promiscuous mode [ 115.725971][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.746899][ T23] Process accounting resumed [ 115.761611][T10271] loop2: detected capacity change from 0 to 512 [ 115.769733][T10264] bridge_slave_0: left allmulticast mode [ 115.775504][T10264] bridge_slave_0: left promiscuous mode [ 115.781217][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.796672][T10271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1346: bg 0: block 5: invalid block bitmap [ 115.811541][T10271] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 115.828256][T10271] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1346: invalid indirect mapped block 3 (level 2) [ 115.841885][T10271] EXT4-fs (loop2): 2 truncates cleaned up [ 115.848420][T10271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.955370][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.199391][T10309] syzkaller0: entered promiscuous mode [ 116.204957][T10309] syzkaller0: entered allmulticast mode [ 116.351687][T10319] tipc: Started in network mode [ 116.356741][T10319] tipc: Node identity b2bb3861acaa, cluster identity 4711 [ 116.364085][T10319] tipc: Enabled bearer , priority 0 [ 116.372204][T10318] tipc: Resetting bearer [ 116.392114][T10318] tipc: Disabling bearer [ 116.505195][T10331] loop8: detected capacity change from 0 to 128 [ 116.516544][T10331] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.537126][T10331] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 116.631082][ T9055] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.717984][T10344] netlink: 'syz.5.1376': attribute type 4 has an invalid length. [ 116.816510][T10362] IPv4: Oversized IP packet from 127.202.26.0 [ 116.860942][T10368] loop8: detected capacity change from 0 to 512 [ 116.871570][T10368] EXT4-fs (loop8): orphan cleanup on readonly fs [ 116.878897][T10368] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 116.894333][T10368] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 116.901746][T10368] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #13: comm syz.8.1384: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 116.920410][T10368] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.1384: couldn't read orphan inode 13 (err -117) [ 116.933463][T10368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.951867][T10368] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 116.967204][T10368] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 116.982170][T10372] loop5: detected capacity change from 0 to 512 [ 117.003123][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.050015][T10377] IPv4: Oversized IP packet from 127.202.26.0 [ 117.104945][T10382] loop8: detected capacity change from 0 to 2048 [ 117.113743][T10382] EXT4-fs (loop8): #clusters per group too big: 16384 [ 117.132367][T10386] loop5: detected capacity change from 0 to 512 [ 117.140981][T10386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.177584][T10386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.190261][T10390] loop8: detected capacity change from 0 to 512 [ 117.191110][T10386] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.206622][T10390] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.226072][T10390] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1391: invalid indirect mapped block 4294967295 (level 1) [ 117.259454][T10390] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1391: invalid indirect mapped block 4294967295 (level 1) [ 117.274641][T10390] EXT4-fs (loop8): 2 truncates cleaned up [ 117.281615][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.294703][T10390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.345840][T10399] syz_tun: entered allmulticast mode [ 117.351868][T10399] vcan0: entered allmulticast mode [ 117.357950][T10398] syz_tun: left allmulticast mode [ 117.397554][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.424258][T10406] netlink: 'syz.8.1397': attribute type 10 has an invalid length. [ 117.436886][T10406] team0: Failed to send options change via netlink (err -105) [ 117.444540][T10406] team0: Port device dummy0 added [ 117.455185][T10406] netlink: 'syz.8.1397': attribute type 10 has an invalid length. [ 117.463990][T10406] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 117.479492][T10406] team0: Failed to send options change via netlink (err -105) [ 117.487984][T10406] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 117.499474][T10406] team0: Port device dummy0 removed [ 117.510058][T10406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.581890][T10415] loop8: detected capacity change from 0 to 128 [ 117.828425][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1409'. [ 117.996757][T10453] loop8: detected capacity change from 0 to 512 [ 118.028427][T10453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.085090][T10453] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.095987][T10462] loop5: detected capacity change from 0 to 512 [ 118.135612][T10462] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1420: bg 0: block 5: invalid block bitmap [ 118.165374][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.187251][T10462] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 118.207212][T10462] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1420: invalid indirect mapped block 3 (level 2) [ 118.235593][T10462] EXT4-fs (loop5): 2 truncates cleaned up [ 118.241894][T10462] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.260425][T10467] loop8: detected capacity change from 0 to 1024 [ 118.274873][T10467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.292849][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1433'. [ 118.427436][T10467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.475111][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.590670][T10483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 119.132706][T10518] netlink: 'syz.5.1442': attribute type 10 has an invalid length. [ 119.213158][T10518] team0: Failed to send options change via netlink (err -105) [ 119.220793][T10518] team0: Port device dummy0 added [ 119.254198][T10530] netlink: 'syz.5.1442': attribute type 10 has an invalid length. [ 119.271724][T10530] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 119.323377][T10530] team0: Failed to send options change via netlink (err -105) [ 119.353149][T10530] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 119.368298][T10530] team0: Port device dummy0 removed [ 119.383548][T10530] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.555871][T10548] netlink: 'syz.2.1453': attribute type 39 has an invalid length. [ 119.910448][T10467] syz.8.1422 (10467) used greatest stack depth: 7192 bytes left [ 119.923244][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.935435][T10558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.974619][T10558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.992055][T10558] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.093647][T10566] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.1458: corrupted inode contents [ 120.128390][T10566] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.1458: mark_inode_dirty error [ 120.147939][T10566] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.1458: corrupted inode contents [ 120.170348][T10566] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #18: comm syz.2.1458: mark_inode_dirty error [ 120.195980][T10566] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #18: comm syz.2.1458: mark inode dirty (error -117) [ 120.219273][T10566] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 120.261790][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.324090][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 120.324105][ T29] audit: type=1326 audit(1766262610.217:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.354607][ T29] audit: type=1326 audit(1766262610.257:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.380360][T10582] IPv6: Can't replace route, no match found [ 120.387593][ T29] audit: type=1326 audit(1766262610.257:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.411370][ T29] audit: type=1326 audit(1766262610.257:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.434924][ T29] audit: type=1326 audit(1766262610.277:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.459857][ T29] audit: type=1326 audit(1766262610.277:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.483394][ T29] audit: type=1326 audit(1766262610.277:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.507262][ T29] audit: type=1326 audit(1766262610.277:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.530802][ T29] audit: type=1326 audit(1766262610.277:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.554429][ T29] audit: type=1326 audit(1766262610.277:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10580 comm="syz.2.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88a85ff749 code=0x7ffc0000 [ 120.636937][T10589] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.669644][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1468'. [ 120.729577][T10589] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.740536][T10598] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 120.750268][T10575] loop8: p1 p2 p3 < p5 p6 > [ 120.756812][T10575] loop8: p2 size 16775168 extends beyond EOD, truncated [ 120.767642][T10575] loop8: p5 start 4294970168 is beyond EOD, truncated [ 120.785637][T10598] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.817625][T10589] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.869102][T10589] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.913310][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 120.919575][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 120.934620][ T3683] udevd[3683]: inotify_add_watch(7, /dev/loop8p6, 10) failed: No such file or directory [ 120.959756][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 121.005215][ T3996] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.046162][ T3996] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.068543][ T3996] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.117120][ T3996] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.516443][T10642] bridge: RTM_NEWNEIGH with invalid ether address [ 121.590768][T10648] set_capacity_and_notify: 4 callbacks suppressed [ 121.590782][T10648] loop2: detected capacity change from 0 to 128 [ 122.067923][T10666] pim6reg1: entered promiscuous mode [ 122.073285][T10666] pim6reg1: entered allmulticast mode [ 122.303076][T10681] netlink: 'syz.2.1506': attribute type 12 has an invalid length. [ 122.435200][T10688] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1509'. [ 122.552961][T10694] tipc: New replicast peer: 255.255.255.255 [ 122.559280][T10694] tipc: Enabled bearer , priority 10 [ 122.619305][T10696] loop5: detected capacity change from 0 to 512 [ 122.654779][T10696] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 122.682494][T10696] EXT4-fs (loop5): 1 truncate cleaned up [ 122.693516][T10696] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.700718][T10696] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.763821][ T3994] batman_adv: batadv1: IGMP Querier appeared [ 122.769881][ T3994] batman_adv: batadv1: MLD Querier appeared [ 122.846542][T10705] tipc: New replicast peer: 255.255.255.83 [ 122.852481][T10705] tipc: Enabled bearer , priority 10 [ 123.039657][T10714] loop8: detected capacity change from 0 to 1024 [ 123.052007][T10707] loop5: detected capacity change from 0 to 128 [ 123.058883][T10714] EXT4-fs: inline encryption not supported [ 123.108706][T10714] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.1519: Allocating blocks 385-513 which overlap fs metadata [ 123.126453][T10707] bio_check_eod: 22 callbacks suppressed [ 123.126471][T10707] syz.5.1516: attempt to access beyond end of device [ 123.126471][T10707] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 123.151971][T10714] EXT4-fs (loop8): pa ffff8881079cc5b0: logic 16, phys. 129, len 24 [ 123.160207][T10714] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 123.175158][T10714] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 123.187736][T10714] EXT4-fs (loop8): This should not happen!! Data will be lost [ 123.187736][T10714] [ 123.197435][T10714] EXT4-fs (loop8): Total free blocks count 0 [ 123.203475][T10714] EXT4-fs (loop8): Free/Dirty block details [ 123.209438][T10714] EXT4-fs (loop8): free_blocks=128 [ 123.214650][T10714] EXT4-fs (loop8): dirty_blocks=0 [ 123.219749][T10714] EXT4-fs (loop8): Block reservation details [ 123.225798][T10714] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 123.413447][T10727] loop8: detected capacity change from 0 to 8192 [ 123.496236][ T9055] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 123.504316][ T9055] FAT-fs (loop8): Filesystem has been set read-only [ 123.573965][ T23] tipc: Node number set to 3881940626 [ 123.610372][T10765] lo speed is unknown, defaulting to 1000 [ 123.737717][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1537'. [ 123.843880][ T23] tipc: Node number set to 332811547 [ 123.876135][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 124.459100][T10815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.466407][T10815] IPv6: NLM_F_CREATE should be set when creating new route [ 124.473641][T10815] IPv6: NLM_F_CREATE should be set when creating new route [ 124.484936][T10816] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 124.570030][T10822] loop8: detected capacity change from 0 to 512 [ 124.609756][T10822] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 124.826032][T10822] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.972999][T10843] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.1556: corrupted inode contents [ 125.035595][T10843] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #18: comm syz.8.1556: mark_inode_dirty error [ 125.132029][T10843] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #18: comm syz.8.1556: corrupted inode contents [ 125.171144][T10843] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #18: comm syz.8.1556: mark_inode_dirty error [ 125.195736][T10848] netlink: 'syz.5.1564': attribute type 12 has an invalid length. [ 125.254928][T10843] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #18: comm syz.8.1556: mark inode dirty (error -117) [ 125.267905][T10843] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 125.382507][T10854] netlink: 'syz.8.1568': attribute type 4 has an invalid length. [ 125.413009][T10857] qrtr: Invalid version 80 [ 125.437756][T10859] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.516019][T10859] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.575922][T10859] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.596526][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 125.596541][ T29] audit: type=1326 audit(1766262615.497:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10868 comm="syz.8.1572" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1c74af749 code=0x0 [ 125.628047][T10859] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.643326][ T29] audit: type=1400 audit(1766262615.537:3092): avc: denied { append } for pid=10870 comm="syz.2.1573" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.713278][ T3983] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.734848][ T3983] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.757738][ T3983] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.786614][ T3983] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.039850][ T29] audit: type=1326 audit(1766262615.937:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.063479][ T29] audit: type=1326 audit(1766262615.937:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.087303][ T29] audit: type=1326 audit(1766262615.937:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.120659][ T29] audit: type=1326 audit(1766262615.937:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.144476][ T29] audit: type=1326 audit(1766262615.937:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.168107][ T29] audit: type=1326 audit(1766262615.937:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.195933][T10896] loop2: detected capacity change from 0 to 256 [ 126.366437][ T29] audit: type=1326 audit(1766262616.267:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.390209][ T29] audit: type=1326 audit(1766262616.267:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10887 comm="syz.7.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 126.566820][T10913] Invalid argument reading file caps for ./file0 [ 126.801568][T10928] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 126.881841][T10934] loop8: detected capacity change from 0 to 128 [ 126.918654][T10934] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.074513][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1603'. [ 127.445410][T10971] loop8: detected capacity change from 0 to 128 [ 127.452543][T10971] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 127.533859][T10971] loop8: detected capacity change from 128 to 0 [ 127.558893][T10971] FAT-fs (loop8): unable to read boot sector to mark fs as dirty [ 127.593609][T10977] loop8: detected capacity change from 0 to 256 [ 127.793053][T10992] loop8: detected capacity change from 0 to 1024 [ 128.034755][T11004] netlink: 'syz.7.1626': attribute type 12 has an invalid length. [ 128.771063][T11032] syzkaller0: entered promiscuous mode [ 128.776787][T11032] syzkaller0: entered allmulticast mode [ 128.795682][T11036] syz_tun: entered allmulticast mode [ 128.802879][T11036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1639'. [ 128.815307][T11036] syz_tun (unregistering): left allmulticast mode [ 128.945937][T11046] loop5: detected capacity change from 0 to 512 [ 128.968181][T11046] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.089358][T11061] ip6gre1: entered promiscuous mode [ 129.094790][T11061] ip6gre1: entered allmulticast mode [ 129.103265][T11059] IPv6: Can't replace route, no match found [ 129.196180][T11073] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1654'. [ 129.205827][T11073] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1654'. [ 129.388701][T11093] netlink: 184 bytes leftover after parsing attributes in process `syz.8.1661'. [ 129.493398][T11091] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1659'. [ 129.547016][T11101] pim6reg: entered allmulticast mode [ 129.586844][T11108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1667'. [ 129.595981][T11108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1667'. [ 129.633443][T11108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1667'. [ 129.642584][T11108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1667'. [ 129.674777][T11114] xt_hashlimit: max too large, truncated to 1048576 [ 129.712150][T11108] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1667'. [ 129.801902][T11125] bond0: entered promiscuous mode [ 129.807046][T11125] bond_slave_0: entered promiscuous mode [ 129.812848][T11125] bond_slave_1: entered promiscuous mode [ 129.831639][T11125] dummy0: entered promiscuous mode [ 129.850958][T11125] ipvlan1: entered promiscuous mode [ 129.863856][T11125] ipvlan1: left promiscuous mode [ 129.872777][T11125] bond0: left promiscuous mode [ 129.877694][T11125] bond_slave_0: left promiscuous mode [ 129.883247][T11125] bond_slave_1: left promiscuous mode [ 129.894002][T11125] dummy0: left promiscuous mode [ 129.927046][T11133] loop5: detected capacity change from 0 to 512 [ 129.938407][T11133] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.984030][T11133] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #17: comm syz.5.1675: inode has both inline data and extents flags [ 130.003996][T11133] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1675: couldn't read orphan inode 17 (err -117) [ 130.140828][T11161] pimreg: entered allmulticast mode [ 130.146804][T11161] pimreg: left allmulticast mode [ 130.444834][T11176] loop8: detected capacity change from 0 to 512 [ 130.453386][T11176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.485605][T11176] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.562522][T11181] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #19: comm syz.8.1692: corrupted inode contents [ 130.575169][T11181] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #19: comm syz.8.1692: mark_inode_dirty error [ 130.587208][T11181] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #19: comm syz.8.1692: corrupted inode contents [ 130.599347][T11181] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #19: comm syz.8.1692: mark_inode_dirty error [ 130.617182][T11181] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #19: comm syz.8.1692: mark inode dirty (error -117) [ 130.630222][T11181] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 130.649906][ T3478] Process accounting resumed [ 131.078435][T11198] syzkaller0: entered promiscuous mode [ 131.084018][T11198] syzkaller0: entered allmulticast mode [ 131.387219][T11204] lo speed is unknown, defaulting to 1000 [ 131.522272][T11207] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.566802][T11209] loop8: detected capacity change from 0 to 2048 [ 131.655580][T11212] 9p: Bad value for 'rfdno' [ 131.730445][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 131.730460][ T29] audit: type=1400 audit(1766262621.627:3214): avc: denied { read } for pid=11213 comm="syz.9.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 131.831673][T11219] netlink: 'syz.7.1706': attribute type 12 has an invalid length. [ 131.843415][T11209] EXT4-fs mount: 18 callbacks suppressed [ 131.843430][T11209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.904519][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.937401][ T29] audit: type=1326 audit(1766262621.837:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 131.968125][ T29] audit: type=1326 audit(1766262621.837:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 131.991743][ T29] audit: type=1326 audit(1766262621.857:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 132.015443][ T29] audit: type=1326 audit(1766262621.857:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 132.038976][ T29] audit: type=1326 audit(1766262621.857:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 132.062564][ T29] audit: type=1326 audit(1766262621.857:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 132.086221][ T29] audit: type=1326 audit(1766262621.857:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 132.109769][ T29] audit: type=1326 audit(1766262621.857:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 132.133416][ T29] audit: type=1326 audit(1766262621.867:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.7.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15d4231667 code=0x7ffc0000 [ 132.326720][T11250] loop8: detected capacity change from 0 to 128 [ 132.354464][T11246] syzkaller0: entered promiscuous mode [ 132.360063][T11246] syzkaller0: entered allmulticast mode [ 132.366633][T11250] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.430031][T11250] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.476754][ T9055] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.804152][T11285] team0 (unregistering): Port device team_slave_0 removed [ 132.814594][T11285] team0 (unregistering): Port device team_slave_1 removed [ 132.857822][T11288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.899713][T11288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.977787][T11288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.059150][T11288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.147191][ T3996] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.175639][ T3954] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.197637][ T3954] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.226274][ T3954] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.277299][T11299] syzkaller1: entered promiscuous mode [ 133.282927][T11299] syzkaller1: entered allmulticast mode [ 133.664876][T11314] loop8: detected capacity change from 0 to 512 [ 133.691061][T11314] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 133.706358][T11314] EXT4-fs (loop8): invalid journal inode [ 133.727582][T11314] EXT4-fs (loop8): can't get journal size [ 133.742249][T11314] EXT4-fs (loop8): 1 truncate cleaned up [ 133.748504][T11314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.814882][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.884838][T11320] __nla_validate_parse: 11 callbacks suppressed [ 133.884859][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1745'. [ 133.900298][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1745'. [ 133.937327][T11322] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 133.957043][T11322] SELinux: failed to load policy [ 133.971968][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1745'. [ 133.981080][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1745'. [ 134.006885][T11325] loop5: detected capacity change from 0 to 512 [ 134.042532][T11325] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.060775][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1745'. [ 134.066668][T11325] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.069984][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1745'. [ 134.090475][T11325] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1747: bg 0: block 64: padding at end of block bitmap is not set [ 134.114425][T11325] EXT4-fs (loop5): Remounting filesystem read-only [ 134.206878][T11333] loop8: detected capacity change from 0 to 128 [ 134.254550][T11337] netlink: 'syz.2.1750': attribute type 12 has an invalid length. [ 134.325323][T11343] loop2: detected capacity change from 0 to 1024 [ 134.332520][T11343] EXT4-fs: Ignoring removed bh option [ 134.340234][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1754'. [ 134.351012][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1754'. [ 134.361164][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1754'. [ 134.371555][T11343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.389921][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1754'. [ 134.416839][T11343] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1751: Allocating blocks 385-513 which overlap fs metadata [ 134.459540][T11343] EXT4-fs (loop2): pa ffff8881079cc620: logic 16, phys. 129, len 24 [ 134.467759][T11343] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 134.495978][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.695121][T11361] loop2: detected capacity change from 0 to 512 [ 134.702047][T11361] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.715804][T11361] EXT4-fs (loop2): 1 truncate cleaned up [ 134.722105][T11361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.738384][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.745613][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.767227][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.848926][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.029531][T11384] loop2: detected capacity change from 0 to 512 [ 135.039389][T11384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.081573][T11384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.095065][T11384] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.245582][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.296247][T11403] loop2: detected capacity change from 0 to 512 [ 135.303432][T11403] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.326532][T11403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.341242][T11403] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.435157][T11411] lo speed is unknown, defaulting to 1000 [ 135.641242][T11422] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=11422 comm=syz.5.1777 [ 135.737539][T11426] loop8: detected capacity change from 0 to 2048 [ 135.744543][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.767799][T11426] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.870568][T11437] loop2: detected capacity change from 0 to 8192 [ 135.952809][ T9104] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 135.960817][ T9104] FAT-fs (loop2): Filesystem has been set read-only [ 136.034715][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.111006][T11448] EXT4-fs: Ignoring removed bh option [ 136.138051][T11448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.211277][T11448] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4215: comm syz.8.1788: Allocating blocks 385-513 which overlap fs metadata [ 136.226153][T11458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 136.255237][T11458] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.269877][T11448] EXT4-fs (loop8): pa ffff888107a91a80: logic 16, phys. 129, len 24 [ 136.277975][T11448] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 136.291419][T11462] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 136.306227][T11458] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.346632][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.399238][T11469] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 136.486033][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.497885][T11474] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.512949][T11474] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.539600][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.586331][T11481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.809839][T11499] SELinux: ebitmap: truncated map [ 136.815379][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.827263][T11499] SELinux: failed to load policy [ 136.914981][T11499] lo speed is unknown, defaulting to 1000 [ 136.994455][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 136.994474][ T29] audit: type=1326 audit(1766262626.897:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.028878][ T29] audit: type=1326 audit(1766262626.897:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.052502][ T29] audit: type=1326 audit(1766262626.897:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.076165][ T29] audit: type=1326 audit(1766262626.897:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.099867][ T29] audit: type=1326 audit(1766262626.897:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.101386][T11511] netlink: 'syz.9.1809': attribute type 39 has an invalid length. [ 137.123503][ T29] audit: type=1326 audit(1766262626.897:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.123546][ T29] audit: type=1326 audit(1766262626.897:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.178433][ T29] audit: type=1326 audit(1766262626.897:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11505 comm="syz.5.1808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d46b8f749 code=0x7ffc0000 [ 137.355311][T11516] netlink: 'syz.8.1812': attribute type 3 has an invalid length. [ 137.363129][T11516] netlink: 'syz.8.1812': attribute type 1 has an invalid length. [ 137.372400][T11515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.395987][T11515] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.432260][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.678113][ T29] audit: type=1400 audit(1766262627.577:3344): avc: denied { firmware_load } for pid=11524 comm="syz.7.1815" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 137.718680][T11527] set_capacity_and_notify: 5 callbacks suppressed [ 137.718697][T11527] loop5: detected capacity change from 0 to 2048 [ 137.784474][T11527] loop5: p2 < > p4 [ 137.789998][T11527] loop5: p4 size 262144 extends beyond EOD, truncated [ 137.889448][ T3762] udevd[3762]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 137.897436][T10611] udevd[10611]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 138.105244][ T29] audit: type=1326 audit(1766262628.007:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11537 comm="syz.7.1819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15d422f749 code=0x7ffc0000 [ 138.233912][T11549] syzkaller0: entered promiscuous mode [ 138.239445][T11549] syzkaller0: entered allmulticast mode [ 138.387596][T11558] uprobe: syz.2.1827:11558 failed to unregister, leaking uprobe [ 138.395937][T11559] loop8: detected capacity change from 0 to 1764 [ 138.448256][T11566] loop8: detected capacity change from 0 to 512 [ 138.457767][T11566] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.489410][T11566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.502815][T11566] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.521967][T11571] loop2: detected capacity change from 0 to 2048 [ 138.538097][T11571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.600516][ T9104] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 138.615691][ T9104] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 138.629774][ T9104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.641403][ T9055] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.156154][T11606] netlink: 'syz.7.1847': attribute type 12 has an invalid length. [ 139.341583][T11608] __nla_validate_parse: 8 callbacks suppressed [ 139.341599][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1848'. [ 139.734363][T11647] syzkaller0: entered promiscuous mode [ 139.739880][T11647] syzkaller0: entered allmulticast mode [ 139.750029][T11649] lo speed is unknown, defaulting to 1000 [ 139.845655][T11658] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=11658 comm=syz.7.1863 [ 139.859944][T11658] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1863'. [ 139.937622][T11663] loop5: detected capacity change from 0 to 1764 [ 139.949052][T11661] lo speed is unknown, defaulting to 1000 [ 140.021957][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1866'. [ 140.051629][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1866'. [ 140.202404][T11670] loop5: detected capacity change from 0 to 2048 [ 140.227617][T11670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.266514][T11675] all: renamed from team_slave_0 [ 140.295654][ T7882] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 140.314813][ T7882] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 140.331465][ T7882] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.587729][T11697] syzkaller0: entered promiscuous mode [ 140.593277][T11697] syzkaller0: entered allmulticast mode [ 140.641807][T11700] syzkaller0: entered promiscuous mode [ 140.647400][T11700] syzkaller0: entered allmulticast mode [ 140.684775][T11702] loop5: detected capacity change from 0 to 8192 [ 140.701750][T11702] syz.5.1878: attempt to access beyond end of device [ 140.701750][T11702] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 140.813411][T11706] loop8: detected capacity change from 0 to 8192 [ 140.898179][T11719] serio: Serial port ptm0 [ 141.017067][T11711] loop2: detected capacity change from 0 to 128 [ 141.050018][T11711] syz.2.1884: attempt to access beyond end of device [ 141.050018][T11711] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 141.213837][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 141.402878][T11742] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1895'. [ 141.468725][ T3004] ================================================================== [ 141.476972][ T3004] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 141.485017][ T3004] [ 141.487369][ T3004] write to 0xffff88811be52030 of 8 bytes by task 3762 on cpu 1: [ 141.495027][ T3004] dentry_unlink_inode+0x65/0x260 [ 141.500113][ T3004] d_delete+0x164/0x180 [ 141.504318][ T3004] d_delete_notify+0x32/0x100 [ 141.509022][ T3004] vfs_unlink+0x32c/0x440 [ 141.513389][ T3004] do_unlinkat+0x1cd/0x4b0 [ 141.517832][ T3004] __x64_sys_unlink+0x2e/0x40 [ 141.522534][ T3004] x64_sys_call+0x2f48/0x3000 [ 141.527236][ T3004] do_syscall_64+0xd8/0x2c0 [ 141.531794][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.537703][ T3004] [ 141.540040][ T3004] read to 0xffff88811be52030 of 8 bytes by task 3004 on cpu 0: [ 141.547609][ T3004] step_into_slowpath+0x113/0x480 [ 141.552668][ T3004] path_lookupat+0x330/0x500 [ 141.557332][ T3004] filename_lookup+0x147/0x340 [ 141.562127][ T3004] do_readlinkat+0x7d/0x320 [ 141.566674][ T3004] __x64_sys_readlink+0x47/0x60 [ 141.571568][ T3004] x64_sys_call+0x2af1/0x3000 [ 141.576269][ T3004] do_syscall_64+0xd8/0x2c0 [ 141.580825][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.586743][ T3004] [ 141.589113][ T3004] value changed: 0xffff88810a5af7b8 -> 0x0000000000000000 [ 141.596340][ T3004] [ 141.598679][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 141.604865][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 141.615736][ T3004] Tainted: [W]=WARN [ 141.619556][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.629634][ T3004] ==================================================================