last executing test programs: 1m50.302872767s ago: executing program 32 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0xd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1m49.883653621s ago: executing program 33 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1000) 1m44.173726632s ago: executing program 34 (id=832): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x8000000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) 1m27.664822284s ago: executing program 35 (id=1527): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1m25.887393568s ago: executing program 36 (id=1573): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000000e100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = socket(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r4 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) socket$packet(0x11, 0x3, 0x300) pause() getsockopt(r3, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) r7 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r7) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000006c0)=@ethtool_ringparam={0x1, 0x18, 0x8, 0x10000, 0x6, 0x9, 0x800, 0x10001, 0x6}}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000808500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x8147}, {r10, 0x20a1}, {r10, 0x2}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='wbt_stat\x00', r9, 0x0, 0x1}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="e1701351267807ea72f705697abd5c849c36076841d0c2b211023bfb9667b2174b600caf69c027d38820d6d6f881b9148a54e01620f64df6595b2ab99d8ea49ee44dca9aa023598c19c878f28700da1a314b5619174f7fdc1db4d16e9e74d8127e4b0e3d5bdd2bf70dc6e0cf8cbe4e0bbfecd1d1c43f0998807daa4949a62baa828d3985c10ffa497072bf4231a98157c9e76c44b52c2f47490c1e83a3fe9653ba01f38c5fdea114e0c6ba825d8b810c66ead797339f4414f4cb550a154654ee63e2c4f49ee2820b83e8b13cdc3d007ca1a0f06f53e5cee271dae80f7fd473c958c927665f24e5f40e82f873b16dba82", @ANYRES32=r0, @ANYBLOB="fa4cb410ae6d184d016af49b035ae1d622f00d27158231833da95fbacd418a8851bc9b4ef985fd5d6a6adf7338b38056f2d4ab06cf31ff3693b6675c17c9d2f4ed4083082ea6655179972002719eaf57d29e94bfb7664ff10d1ed51532641d4e970185861f01b427e90e6fb74477bab57c6d31efe0c2fa3122be58843c81639a1118a225533159dd686e34d7948082ef2dfe630b8754182dafd5f1992a386446c7c4cb61c1112dfd443667c36332008a3fba7ea241bccd1a84b75580871b8678a2eafdf2ed40fe337b8310b434a14f8b0a", @ANYRESOCT, @ANYRESDEC=r0, @ANYRES64, @ANYRES32], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) 56.408398427s ago: executing program 7 (id=2603): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 56.344213332s ago: executing program 7 (id=2605): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 56.343390852s ago: executing program 7 (id=2607): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) io_submit(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 56.329411624s ago: executing program 7 (id=2609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000001, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "035f47c6780820d1cbf7966da2dc499b060000002ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00002f00", "f28359738e229a4c66810000000000d300e6d602000004000000000000000001", [0x81, 0x1]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) 56.177230376s ago: executing program 7 (id=2613): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0xfffffffffffffffd) getgroups(0x1, &(0x7f0000000540)=[0xffffffffffffffff]) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x20) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 55.908189587s ago: executing program 7 (id=2619): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000080) 55.907920387s ago: executing program 37 (id=2619): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000080) 44.028496776s ago: executing program 9 (id=2972): perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x24, 0x1, 0x0, 0x4, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f0000000040), 0x3}, 0x1, 0x10003, 0x8, 0x1, 0x3, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0x7, 0x934, 0x6}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x48000) 43.86260351s ago: executing program 9 (id=2978): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x1}}}}}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000"], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) 43.839287292s ago: executing program 9 (id=2979): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 43.810213964s ago: executing program 9 (id=2982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_continue}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4000001, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "035f47c6780820d1cbf7966da2dc499b060000002ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00002f00", "f28359738e229a4c66810000000000d300e6d602000004000000000000000001", [0x81, 0x1]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x800001, 0x0, 0x0) 43.678601694s ago: executing program 9 (id=2989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setuid(0x0) stat(0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id\xf7\xff\xffe{') 43.435101454s ago: executing program 9 (id=3002): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 43.434695874s ago: executing program 38 (id=3002): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 39.256084371s ago: executing program 2 (id=3119): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffbfe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffffffdc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 39.255564871s ago: executing program 2 (id=3120): bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={0x0, 0xffffffffffffffff, 0x40000}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000004cc0)="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", 0x55d}, {0x0}], 0x2}, 0x4000000) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) msgsnd(0xffffffffffffffff, &(0x7f0000003040)=ANY=[], 0xb81, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 39.089753125s ago: executing program 2 (id=3123): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) 39.039471019s ago: executing program 2 (id=3125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 38.972828194s ago: executing program 2 (id=3126): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000006890086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 38.954906175s ago: executing program 2 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 38.939662907s ago: executing program 39 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x9}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d3, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 33.371846396s ago: executing program 6 (id=3214): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000340)='\x00!', 0x2}], 0x1, 0x73a, 0x21) 33.277966364s ago: executing program 6 (id=3217): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000002600)={0x32, 0x1, '\x00', [@padn, @ra={0x5, 0x2, 0x40}, @padn]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) sendto$inet6(r0, &(0x7f0000000700)='\x00', 0x1, 0x4090, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 33.20209079s ago: executing program 6 (id=3221): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 33.131979605s ago: executing program 6 (id=3225): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x20, 0x11e2, &(0x7f0000002480)="$eJzs3MFrHFUcB/BfYm1rarNRa7UF8aEXvQzdHLzoZZEUpAtK2xVaQZiaWV123A2ZJbAiVk9e/TvEozdBvOklF/8Gb7l4zCE44m5iElkPQZOF8Plc5gfvfee9x8DADPNm561vPu13q6ybj2JxYSEWNyLSbooUi3Hgy3j9zZ9/eeneg4d3Wu322t2UbrfuN99IKS2//OMHn3/3yk+jK+9/v/zDpdhe+XDn99Xftq9v39j54/4nvSr1qjQYjlKeHg2Ho/xRWaT1XtXPUnqvLPKqSL1BVWwea++Ww42NccoH6wsRUVRVygfj1C/GaTRMo81xyj/Oe4OUZVm6uhT8F51vd+u6jqjrJ+Ni1HVdPxVLcSWejquxHI1YiWfi2XgursXzcT1eiBfjxqTXvOcNAAAAAAAAAAAAAAAAAAAA54v9/wAAAAAAAAAAAAAAAAAAADB/9x48vNNqt9fupnQ5ovx6q7PVmR6n7a1u9KKMIm5FI/Zisvt/alrffqe9ditNrMRX5eP9/OOtzhPH883J7wRm5pvTfDqevxRLR/Or0Yhrs/OrM/OX47VXj+SzaMSvH8UwyliPv7KH+S+aKb39bvsf+ZuTfgAAAHAeZOlvM5/fs+zf2qf5E7wfqPaH3M9fiJsX5rdupqrxZ/28LIvNUysuxqkPoVAoDoq9uq7/h/PM+87EWTi86POeCQAAAAAAAAAAACdxFp8lznuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzJDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//9N2dOT") chdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 32.938138911s ago: executing program 6 (id=3234): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r1) 32.439879611s ago: executing program 6 (id=3252): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 32.403983144s ago: executing program 40 (id=3252): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x0) 14.854196201s ago: executing program 3 (id=3669): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 14.638423938s ago: executing program 3 (id=3677): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f00000011c0)='mm_page_free\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, r5, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) 14.600357542s ago: executing program 3 (id=3678): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 14.570087644s ago: executing program 3 (id=3679): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 14.162564636s ago: executing program 3 (id=3682): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) pause() getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000006c0)=@ethtool_ringparam={0x1, 0x18, 0x8, 0x10000, 0x6, 0x9, 0x800, 0x10001, 0x6}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000007000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="e1701351267807ea72f705697abd5c849c36076841d0c2b211023bfb9667b2174b600caf69c027d38820d6d6f881b9148a54e01620f64df6595b2ab99d8ea49ee44dca9aa023598c19c878f28700da1a314b5619174f7fdc1db4d16e9e74d8127e4b0e3d5bdd2bf70dc6e0cf8cbe4e0bbfecd1d1c43f0998807daa4949a62baa828d3985c10ffa497072bf4231a98157c9e76c44b52c2f47490c1e83a3fe9653ba01f38c5fdea114e0c6ba825d8b810c66ead797339f4414f4cb550a154654ee63e2c4f49ee2820b83e8b13cdc3d007ca1a0f06f53e5cee271dae80f7fd473c958c927665f24e5f40e82f873b16dba82", @ANYRES32, @ANYBLOB="fa4cb410ae6d184d016af49b035ae1d622f00d27158231833da95fbacd418a8851bc9b4ef985fd5d6a6adf7338b38056f2d4ab06cf31ff3693b6675c17c9d2f4ed4083082ea6655179972002719eaf57d29e94bfb7664ff10d1ed51532641d4e970185861f01b427e90e6fb74477bab57c6d31efe0c2fa3122be58843c81639a1118a225533159dd686e34d7948082ef2dfe630b8754182dafd5f1992a386446c7c4cb61c1112dfd443667c36332008a3fba7ea241bccd1a84b75580871b8678a2eafdf2ed40fe337b8310b434a14f8b0a", @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES32], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) 14.159335337s ago: executing program 41 (id=3682): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x3, r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) pause() getsockopt(r0, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'bond_slave_1\x00', &(0x7f00000006c0)=@ethtool_ringparam={0x1, 0x18, 0x8, 0x10000, 0x6, 0x9, 0x800, 0x10001, 0x6}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000007000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) openat$random(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="e1701351267807ea72f705697abd5c849c36076841d0c2b211023bfb9667b2174b600caf69c027d38820d6d6f881b9148a54e01620f64df6595b2ab99d8ea49ee44dca9aa023598c19c878f28700da1a314b5619174f7fdc1db4d16e9e74d8127e4b0e3d5bdd2bf70dc6e0cf8cbe4e0bbfecd1d1c43f0998807daa4949a62baa828d3985c10ffa497072bf4231a98157c9e76c44b52c2f47490c1e83a3fe9653ba01f38c5fdea114e0c6ba825d8b810c66ead797339f4414f4cb550a154654ee63e2c4f49ee2820b83e8b13cdc3d007ca1a0f06f53e5cee271dae80f7fd473c958c927665f24e5f40e82f873b16dba82", @ANYRES32, @ANYBLOB="fa4cb410ae6d184d016af49b035ae1d622f00d27158231833da95fbacd418a8851bc9b4ef985fd5d6a6adf7338b38056f2d4ab06cf31ff3693b6675c17c9d2f4ed4083082ea6655179972002719eaf57d29e94bfb7664ff10d1ed51532641d4e970185861f01b427e90e6fb74477bab57c6d31efe0c2fa3122be58843c81639a1118a225533159dd686e34d7948082ef2dfe630b8754182dafd5f1992a386446c7c4cb61c1112dfd443667c36332008a3fba7ea241bccd1a84b75580871b8678a2eafdf2ed40fe337b8310b434a14f8b0a", @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES32], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) 2.507012647s ago: executing program 4 (id=3926): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2.440324803s ago: executing program 0 (id=3929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x0) 2.439763393s ago: executing program 0 (id=3930): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000014c0)=0x7, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x40, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) 2.360141749s ago: executing program 0 (id=3931): syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.359474899s ago: executing program 0 (id=3933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) mlockall(0x2) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000940)='R', 0x1, 0x4fed3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2000006, 0x4012011, r1, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.97633519s ago: executing program 4 (id=3936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7}, {0x7, 0xffffffffffffff5c}}}]}]}]}}]}, 0x54}}, 0x0) 1.754373118s ago: executing program 8 (id=3938): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$eJzs281qE1EYBuA3tdW2LtKFK3Ex4MZVaHsFFqkgBgSlCwVBsQ1IRwIWArqw2bnwJrwct3olLrsQRppp7Q+piNoMJM+zyQfnvMl3DiSZMzAvbr3Z3e7v9Z73vmSx1crc3arKQSsrmcuxYQCAaXJQVfleVVV1bZilz6mqqumOAIDL5v8fAGbPk6fPHm50u5uPi2IxKT8OtgZb9Ws9vtHL65TZyWra+ZHDC4QjdX3/QXdztRhZyady/yi/P9i6cja/lnZWxufX6nxxNr+Q5dP59bRzY3x+fWz+au7cPpXvpJ1vr9JPme0cZk/yH9aK4t6j7rn89dE8AAAAmAad4pex5/dO56LxOr/R+uP7A+fO1/O5Od/s2gFgVu29e7/7six33jZWJBn+Zs7X5brRyTVW/GX8eEub3Mx/K5by/995Ic2va3qK/txlf8RiklHR4I8SMBEn3/6mOwEAAAAAAAAAAAAAAC4yiUeXml4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPnZwAAAP//RL2Oaw==") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x200, 0x1000000000000001, 0x5, 0x42, 0x1, 0xfffffffffffffffd, 0x66c}) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x8008}]) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 1.664247095s ago: executing program 4 (id=3939): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x5, 0x2, 0x483}) 1.279183336s ago: executing program 1 (id=3950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) 1.172990655s ago: executing program 1 (id=3952): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) 816.850444ms ago: executing program 0 (id=3954): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a903fcffffff000000001600000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket(0xa, 0x3, 0xff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0x11, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000e80)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xf, 0x3a, '@', 0x3a, '', 0x3a, './bus', 0x3a, [0x46]}, 0x27) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{0xe, 0x6, 0xb2, 0x7}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@known='system.posix_acl_default\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x2a) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x40000, 0x0, 0xffff, 0x3, 0x4, 0x1, 0x0, 0x6}) 816.413844ms ago: executing program 1 (id=3955): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000180)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x15) pwrite64(r2, 0x0, 0x0, 0xe7c) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) ptrace$getregset(0x4204, 0x0, 0x100, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) ftruncate(r2, 0x7) 781.788376ms ago: executing program 8 (id=3956): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x3, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 714.103602ms ago: executing program 1 (id=3959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06000000040000000d00000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 684.300515ms ago: executing program 5 (id=3960): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 663.976446ms ago: executing program 5 (id=3961): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES32, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000780)='./bus\x00', 0x145c7e, 0x0) io_setup(0x5ff, &(0x7f0000000400)=0x0) io_submit(r3, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 612.3194ms ago: executing program 4 (id=3962): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) 612.1647ms ago: executing program 1 (id=3963): sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8010101}, 0x40858) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 611.99674ms ago: executing program 8 (id=3964): socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 592.088792ms ago: executing program 4 (id=3965): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r3 = open_tree(r2, &(0x7f0000000280)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 562.388854ms ago: executing program 1 (id=3966): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 561.698834ms ago: executing program 5 (id=3967): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 557.403744ms ago: executing program 4 (id=3968): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001800)='@', 0x1}], 0x1}, 0x10004024) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) 525.021357ms ago: executing program 5 (id=3969): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 512.454108ms ago: executing program 8 (id=3970): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 430.737875ms ago: executing program 5 (id=3971): write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x6f, 0x0, @opaque="dafc3fec9b284c93cf0da2c96b67919fb5146b8da82ae0aeddf99df0c319ce538cfc3de7eecc9ee2c173b54c6c0dd496bfebc9ed9b21bd9ab1a4d9cf48807509455fd4eb5a9323540f9281a9a9c0eb6d8df6bc10fdb2b3ad85dbd44027717a1056b0a157baa3ff"}}}}}}, 0x95) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000940019452e9e0a2f100c36a7dd0a4e06ea157cc3252ea3239e2a46f69e479e5d2bc3371448d8caa8f9ad23aaa2d8bc395bbc066f78febbc6505de5a64e9143dc138045179ab1327b24f98097183a61b7b080bdd57701e980171acc957a7f5996c8a4d631659d72aa740ba9c627078ee9fc82618f8b81"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r3, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 368.12664ms ago: executing program 5 (id=3972): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x6, 0x5, 0x2, 0x483}) 182.823175ms ago: executing program 8 (id=3973): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 73.183824ms ago: executing program 8 (id=3974): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 0s ago: executing program 0 (id=3975): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x2207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) kernel console output (not intermixed with test programs): idge_slave_1: left promiscuous mode [ 106.182490][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.192901][T10203] bond0: (slave bond_slave_0): Releasing backup interface [ 106.197037][T10208] loop4: detected capacity change from 0 to 512 [ 106.208929][T10203] bond0: (slave bond_slave_1): Releasing backup interface [ 106.220577][T10203] team0: Port device team_slave_0 removed [ 106.228934][T10203] team0: Port device team_slave_1 removed [ 106.229718][T10208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.235787][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.248287][T10208] ext4 filesystem being mounted at /603/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.254932][T10203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.280541][T10203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.288065][T10203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.311574][T10203] bond1: (slave gretap1): Releasing active interface [ 106.341670][T10213] netlink: 'syz.2.2776': attribute type 5 has an invalid length. [ 106.394370][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 106.394386][ T29] audit: type=1326 audit(1756607847.021:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.426501][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.447702][ T29] audit: type=1326 audit(1756607847.021:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.471237][ T29] audit: type=1326 audit(1756607847.021:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.494768][ T29] audit: type=1326 audit(1756607847.021:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.518514][ T29] audit: type=1326 audit(1756607847.021:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.542086][ T29] audit: type=1326 audit(1756607847.021:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.562783][T10224] syzkaller0: entered promiscuous mode [ 106.565813][ T29] audit: type=1326 audit(1756607847.021:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.571100][T10224] syzkaller0: entered allmulticast mode [ 106.600218][ T29] audit: type=1326 audit(1756607847.021:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.623763][ T29] audit: type=1326 audit(1756607847.031:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.647481][ T29] audit: type=1326 audit(1756607847.031:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.9.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87cf97ebe9 code=0x7ffc0000 [ 106.705110][T10228] binfmt_misc: register: failed to install interpreter file ./bus [ 106.782260][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2784'. [ 106.798343][T10244] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2790'. [ 106.938075][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2798'. [ 107.107757][T10288] loop9: detected capacity change from 0 to 512 [ 107.118370][T10292] loop3: detected capacity change from 0 to 512 [ 107.123911][T10291] 9pnet_fd: Insufficient options for proto=fd [ 107.129128][T10292] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.143920][T10294] netlink: 340 bytes leftover after parsing attributes in process `syz.8.2812'. [ 107.144767][T10288] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.167380][T10292] EXT4-fs (loop3): 1 truncate cleaned up [ 107.174025][T10288] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.185310][T10292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.247175][ T9800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.279658][ T7245] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.325061][T10311] loop9: detected capacity change from 0 to 1024 [ 107.367307][T10311] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.418752][ T7245] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.541780][T10331] bridge_slave_0: left allmulticast mode [ 107.547532][T10331] bridge_slave_0: left promiscuous mode [ 107.553256][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.570575][T10331] bridge_slave_1: left allmulticast mode [ 107.576253][T10331] bridge_slave_1: left promiscuous mode [ 107.582124][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.592127][T10331] bond0: (slave bond_slave_0): Releasing backup interface [ 107.608183][ T3414] hid_parser_main: 33 callbacks suppressed [ 107.608240][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.621532][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.629378][T10331] bond0: (slave bond_slave_1): Releasing backup interface [ 107.629397][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.643941][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.651402][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.658779][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.666176][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.673582][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.681132][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.688562][ T3414] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 107.702865][T10331] team0: Port device team_slave_0 removed [ 107.717188][ T3414] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 107.721362][T10331] team0: Port device team_slave_1 removed [ 107.740167][T10331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.747590][T10331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.753583][T10342] loop2: detected capacity change from 0 to 512 [ 107.763108][T10331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.770639][T10331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.781347][T10342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.794335][T10342] ext4 filesystem being mounted at /616/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.814577][ T36] syz!: Port: 1 Link DOWN [ 107.873121][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.926769][T10358] binfmt_misc: register: failed to install interpreter file ./bus [ 107.954840][T10362] binfmt_misc: register: failed to install interpreter file ./bus [ 108.454680][T10395] netlink: 'syz.3.2849': attribute type 12 has an invalid length. [ 108.779385][T10417] loop4: detected capacity change from 0 to 128 [ 108.820025][T10419] SELinux: failed to load policy [ 108.842936][T10425] loop4: detected capacity change from 0 to 512 [ 108.853461][T10425] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2861: casefold flag without casefold feature [ 108.868307][T10425] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2861: couldn't read orphan inode 15 (err -117) [ 108.881381][T10425] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.905247][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.986358][T10439] netlink: 'syz.9.2866': attribute type 10 has an invalid length. [ 109.018560][T10439] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.083388][T10444] binfmt_misc: register: failed to install interpreter file ./bus [ 109.527885][T10481] __nla_validate_parse: 6 callbacks suppressed [ 109.527902][T10481] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2876'. [ 109.663992][T10487] loop9: detected capacity change from 0 to 512 [ 109.670985][T10487] ext4: Unknown parameter 'fsname' [ 109.992039][T10508] loop2: detected capacity change from 0 to 1024 [ 109.998710][T10508] EXT4-fs: Ignoring removed orlov option [ 110.004505][T10508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.029254][T10508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.056075][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.250808][T10530] loop9: detected capacity change from 0 to 1024 [ 110.261678][T10530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.288192][ T7245] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.432384][T10548] loop9: detected capacity change from 0 to 512 [ 110.440659][T10548] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 110.452198][T10548] EXT4-fs (loop9): 1 truncate cleaned up [ 110.458267][T10548] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.516585][ T7245] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.629574][T10564] loop3: detected capacity change from 0 to 1024 [ 110.647696][T10564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.675081][ T9800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.762033][T10588] loop4: detected capacity change from 0 to 512 [ 110.778727][T10589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.798408][T10588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.815845][T10589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.832700][T10588] EXT4-fs (loop4): 1 truncate cleaned up [ 110.844270][T10588] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.911976][T10602] loop3: detected capacity change from 0 to 512 [ 110.918619][T10602] ext4: Unknown parameter 'fsname' [ 110.992568][T10589] Set syz1 is full, maxelem 65536 reached [ 111.019605][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.100730][T10609] loop4: detected capacity change from 0 to 512 [ 111.113807][T10609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.120653][T10609] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.139192][T10609] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 111.159250][T10609] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 111.167427][T10609] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 111.192193][T10609] EXT4-fs (loop4): 1 truncate cleaned up [ 111.212930][T10609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.234907][T10609] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 111.284912][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.405651][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 111.405664][ T29] audit: type=1400 audit(1756607852.031:3652): avc: denied { watch watch_reads } for pid=10640 comm="syz.3.2943" path="/40/file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.416838][T10643] batman_adv: batadv0: Adding interface: dummy0 [ 111.441824][T10643] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.467676][T10643] batman_adv: batadv0: Interface activated: dummy0 [ 111.499309][T10648] loop3: detected capacity change from 0 to 1024 [ 111.516920][T10643] batadv0: mtu less than device minimum [ 111.517943][T10648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.522967][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.545449][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.556105][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.563887][T10648] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2946: Allocating blocks 449-513 which overlap fs metadata [ 111.566818][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.590986][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.594673][T10647] EXT4-fs (loop3): pa ffff88810726b230: logic 48, phys. 177, len 21 [ 111.601657][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.609354][T10647] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 111.620092][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.640565][T10643] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.660389][ T9800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.724656][ T29] audit: type=1400 audit(1756607852.351:3653): avc: denied { create } for pid=10664 comm="syz.3.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 111.744482][T10665] veth0_to_team: entered promiscuous mode [ 111.787914][T10671] syzkaller0: entered promiscuous mode [ 111.793484][T10671] syzkaller0: entered allmulticast mode [ 111.898104][T10678] lo speed is unknown, defaulting to 1000 [ 111.904098][T10678] lo speed is unknown, defaulting to 1000 [ 111.905353][ T29] audit: type=1400 audit(1756607852.521:3654): avc: denied { write } for pid=10677 comm="syz.9.2959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.931536][T10678] lo speed is unknown, defaulting to 1000 [ 111.937657][T10678] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.960104][T10678] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 111.964355][ T29] audit: type=1400 audit(1756607852.581:3655): avc: denied { getopt } for pid=10679 comm="syz.3.2958" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.992197][T10678] lo speed is unknown, defaulting to 1000 [ 111.998424][T10678] lo speed is unknown, defaulting to 1000 [ 112.004707][T10678] lo speed is unknown, defaulting to 1000 [ 112.010600][ T29] audit: type=1326 audit(1756607852.631:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3dccebe9 code=0x7ffc0000 [ 112.034222][ T29] audit: type=1326 audit(1756607852.631:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3dccebe9 code=0x7ffc0000 [ 112.057839][ T29] audit: type=1326 audit(1756607852.631:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f3dccebe9 code=0x7ffc0000 [ 112.081916][T10678] lo speed is unknown, defaulting to 1000 [ 112.088002][T10678] lo speed is unknown, defaulting to 1000 [ 112.115204][ T29] audit: type=1326 audit(1756607852.641:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3dccebe9 code=0x7ffc0000 [ 112.125350][T10688] batman_adv: batadv0: Adding interface: dummy0 [ 112.138836][ T29] audit: type=1326 audit(1756607852.641:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f3dccebe9 code=0x7ffc0000 [ 112.138864][ T29] audit: type=1326 audit(1756607852.641:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.2.2960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f3dccebe9 code=0x7ffc0000 [ 112.145114][T10688] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.145285][T10688] batman_adv: batadv0: Interface activated: dummy0 [ 112.316593][T10697] loop2: detected capacity change from 0 to 512 [ 112.325123][T10697] ext4: Unknown parameter 'fsname' [ 112.362778][T10703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.385468][T10703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.394899][T10699] lo speed is unknown, defaulting to 1000 [ 112.672261][T10715] batman_adv: batadv0: Interface deactivated: dummy0 [ 112.679222][T10715] batman_adv: batadv0: Removing interface: dummy0 [ 112.713123][T10718] loop2: detected capacity change from 0 to 512 [ 112.720614][T10718] EXT4-fs: Ignoring removed oldalloc option [ 112.728167][T10718] EXT4-fs (loop2): 1 truncate cleaned up [ 112.734299][T10718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.751862][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2973'. [ 112.761097][T10718] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 112.769114][T10718] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2973'. [ 112.786565][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.888425][T10738] loop9: detected capacity change from 0 to 512 [ 112.896004][T10738] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 112.907186][T10738] EXT4-fs (loop9): 1 truncate cleaned up [ 112.913898][T10738] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.969291][T10738] loop9: detected capacity change from 512 to 0 [ 112.978489][ C0] I/O error, dev loop9, sector 70 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 112.997838][ C0] I/O error, dev loop9, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 113.012513][T10752] syz_tun: entered allmulticast mode [ 113.026249][T10751] syz_tun: left allmulticast mode [ 113.033941][ T8526] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.217926][T10778] syz_tun: entered allmulticast mode [ 113.242875][T10777] syz_tun: left allmulticast mode [ 113.292277][T10785] siw: device registration error -23 [ 113.350600][T10801] loop4: detected capacity change from 0 to 512 [ 113.373617][T10801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.388077][T10801] ext4 filesystem being mounted at /640/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.400285][T10805] loop3: detected capacity change from 0 to 256 [ 113.406854][T10805] vfat: Unknown parameter 'xœìÝ?kse' [ 113.415977][T10788] lo speed is unknown, defaulting to 1000 [ 113.452723][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.474400][T10788] chnl_net:caif_netlink_parms(): no params data found [ 113.505896][T10788] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.512997][T10788] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.520301][T10788] bridge_slave_0: entered allmulticast mode [ 113.526667][T10788] bridge_slave_0: entered promiscuous mode [ 113.533471][T10788] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.540619][T10788] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.547812][T10788] bridge_slave_1: entered allmulticast mode [ 113.554344][T10788] bridge_slave_1: entered promiscuous mode [ 113.570862][T10788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.581171][T10788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.601571][T10788] team0: Port device team_slave_0 added [ 113.608075][T10788] team0: Port device team_slave_1 added [ 113.622544][T10788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.629549][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.655483][T10788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.666751][T10788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.673825][T10788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.699769][T10788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.734270][T10788] hsr_slave_0: entered promiscuous mode [ 113.749651][T10788] hsr_slave_1: entered promiscuous mode [ 113.759563][T10788] debugfs: 'hsr0' already exists in 'hsr' [ 113.765309][T10788] Cannot create hsr debugfs directory [ 113.860819][T10826] loop2: detected capacity change from 0 to 2048 [ 113.867481][T10826] EXT4-fs: Ignoring removed bh option [ 113.880985][T10826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.904924][T10826] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 113.920569][T10826] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 210 with error 28 [ 113.932951][T10826] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.932951][T10826] [ 113.942641][T10826] EXT4-fs (loop2): Total free blocks count 0 [ 113.948632][T10826] EXT4-fs (loop2): Free/Dirty block details [ 113.954561][T10826] EXT4-fs (loop2): free_blocks=2415919104 [ 113.960329][T10826] EXT4-fs (loop2): dirty_blocks=224 [ 113.965516][T10826] EXT4-fs (loop2): Block reservation details [ 113.971498][T10826] EXT4-fs (loop2): i_reserved_data_blocks=14 [ 113.994138][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.021637][T10837] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3021'. [ 114.117497][T10788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.128860][T10788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.136046][T10849] netlink: 'syz.2.3027': attribute type 10 has an invalid length. [ 114.147106][T10849] batman_adv: batadv0: Interface deactivated: dummy0 [ 114.155485][T10849] batman_adv: batadv0: Removing interface: dummy0 [ 114.165577][T10849] team0: Port device dummy0 added [ 114.171207][T10788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.174800][T10849] netlink: 'syz.2.3027': attribute type 10 has an invalid length. [ 114.188111][T10849] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.202198][T10849] team0: Failed to send options change via netlink (err -105) [ 114.215668][T10849] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.226560][T10849] team0: Port device dummy0 removed [ 114.235732][T10849] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.245118][T10788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 114.309900][T10863] loop2: detected capacity change from 0 to 512 [ 114.313336][T10788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.325925][T10863] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.354076][T10788] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.360016][T10863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.380633][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.387732][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.416579][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 114.440941][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.448013][ T4730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.462975][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 114.501851][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 114.554119][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 114.570482][T10788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.594780][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 114.638763][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 114.686176][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 114.728614][T10863] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz.2.3031: lblock 23 mapped to illegal pblock 18 (length 1) [ 114.752356][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 114.776035][T10863] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 20: comm syz.2.3031: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 114.780598][T10788] veth0_vlan: entered promiscuous mode [ 114.815104][T10895] netlink: 'syz.4.3041': attribute type 10 has an invalid length. [ 114.829995][T10895] team0: Port device dummy0 added [ 114.852222][T10788] veth1_vlan: entered promiscuous mode [ 114.857929][T10895] netlink: 'syz.4.3041': attribute type 10 has an invalid length. [ 114.882753][T10895] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.908038][T10895] team0: Failed to send options change via netlink (err -105) [ 114.923490][T10895] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.952727][T10895] team0: Port device dummy0 removed [ 114.962080][T10895] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.989064][T10788] veth0_macvtap: entered promiscuous mode [ 115.006369][T10788] veth1_macvtap: entered promiscuous mode [ 115.035527][T10788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.053328][T10788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.077383][ T4763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.102938][ T4763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.127106][ T4763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.165835][ T4763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.207928][ T3306] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 115.223628][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.381646][T10937] loop3: detected capacity change from 0 to 512 [ 115.388260][T10939] loop2: detected capacity change from 0 to 512 [ 115.396139][T10937] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.417402][T10939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.432263][T10937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.445151][T10939] ext4 filesystem being mounted at /655/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.458940][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 115.481473][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 12: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 115.502809][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 13: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 115.524704][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 14: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 115.557271][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 15: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 115.578588][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 115.601265][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 17: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 115.625452][T10937] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.3059: lblock 23 mapped to illegal pblock 18 (length 1) [ 115.641122][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 19: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 115.664100][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.674006][T10937] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 20: comm syz.3.3059: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 115.726205][T10953] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3063'. [ 116.026447][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3070'. [ 116.053502][T10963] lo speed is unknown, defaulting to 1000 [ 116.143581][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3074'. [ 116.267752][ T9800] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 116.285147][ T9800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.307849][T10987] loop3: detected capacity change from 0 to 512 [ 116.321710][T10987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.334659][T10987] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.382628][ T9800] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.476470][T11001] loop3: detected capacity change from 0 to 512 [ 116.485926][T11001] EXT4-fs: Ignoring removed nobh option [ 116.494769][T11001] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3084: iget: bad i_size value: 38620345925642 [ 116.508280][T11001] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3084: couldn't read orphan inode 15 (err -117) [ 116.657531][T11025] netlink: 14528 bytes leftover after parsing attributes in process `syz.0.3093'. [ 116.685405][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 116.685486][ T29] audit: type=1326 audit(1756607857.311:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11028 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a48ebe9 code=0x7ffc0000 [ 116.728256][ T29] audit: type=1326 audit(1756607857.311:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11028 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f9b3a48ebe9 code=0x7ffc0000 [ 116.733239][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3107'. [ 116.752029][ T29] audit: type=1326 audit(1756607857.311:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11028 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a48ebe9 code=0x7ffc0000 [ 116.765243][T11032] ip6gre1: entered allmulticast mode [ 116.784125][ T29] audit: type=1326 audit(1756607857.321:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11028 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b3a48ebe9 code=0x7ffc0000 [ 116.797629][T11034] loop0: detected capacity change from 0 to 512 [ 116.822759][T11034] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.835384][T11034] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3097: invalid indirect mapped block 4294967295 (level 0) [ 116.850011][T11034] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.3097: invalid indirect mapped block 4294967295 (level 1) [ 116.864497][T11034] EXT4-fs (loop0): 1 orphan inode deleted [ 116.870345][T11034] EXT4-fs (loop0): 1 truncate cleaned up [ 116.880462][ T29] audit: type=1400 audit(1756607857.501:3718): avc: denied { write } for pid=11033 comm="syz.0.3097" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 116.938417][T11041] net_ratelimit: 33 callbacks suppressed [ 116.938434][T11041] IPv4: Oversized IP packet from 127.202.26.0 [ 116.958469][T11045] sit0: entered allmulticast mode [ 117.181832][ T29] audit: type=1400 audit(1756607857.811:3719): avc: denied { shutdown } for pid=11062 comm="syz.0.3111" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 117.224007][ T29] audit: type=1326 audit(1756607857.841:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.8.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 117.247555][ T29] audit: type=1326 audit(1756607857.841:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.8.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 117.271064][ T29] audit: type=1326 audit(1756607857.841:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.8.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 117.294560][ T29] audit: type=1326 audit(1756607857.841:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11066 comm="syz.8.3113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 117.408702][T11079] loop2: detected capacity change from 0 to 2048 [ 117.492949][T11083] lo speed is unknown, defaulting to 1000 [ 117.863451][T11095] lo speed is unknown, defaulting to 1000 [ 117.908862][T11095] chnl_net:caif_netlink_parms(): no params data found [ 117.942314][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.949471][T11095] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.956664][T11095] bridge_slave_0: entered allmulticast mode [ 117.963063][T11095] bridge_slave_0: entered promiscuous mode [ 117.969923][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.976961][T11095] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.984214][T11095] bridge_slave_1: entered allmulticast mode [ 117.990898][T11095] bridge_slave_1: entered promiscuous mode [ 118.006723][T11095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.016814][T11095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.035829][T11095] team0: Port device team_slave_0 added [ 118.042711][T11095] team0: Port device team_slave_1 added [ 118.057888][T11095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.064866][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.090896][T11095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.102066][T11095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.109020][T11095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.135065][T11095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.162668][T11095] hsr_slave_0: entered promiscuous mode [ 118.168853][T11095] hsr_slave_1: entered promiscuous mode [ 118.175114][T11095] debugfs: 'hsr0' already exists in 'hsr' [ 118.180872][T11095] Cannot create hsr debugfs directory [ 118.412287][T11095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 118.421066][T11095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 118.429497][T11095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 118.438118][T11095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 118.452378][T11095] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.459456][T11095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.466757][T11095] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.473803][T11095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.499518][T11095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.511490][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.519751][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.530610][T11095] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.540501][ T4763] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.547611][ T4763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.557852][ T6819] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.564925][ T6819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.619182][T11095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.703582][T11095] veth0_vlan: entered promiscuous mode [ 118.711468][T11095] veth1_vlan: entered promiscuous mode [ 118.726008][T11095] veth0_macvtap: entered promiscuous mode [ 118.733150][T11095] veth1_macvtap: entered promiscuous mode [ 118.743645][T11095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.754455][T11095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.764330][ T4723] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.774349][ T4723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.784654][ T4723] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.793885][ T4723] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.829783][T11136] binfmt_misc: register: failed to install interpreter file ./bus [ 118.935380][T11138] lo speed is unknown, defaulting to 1000 [ 118.986144][T11138] chnl_net:caif_netlink_parms(): no params data found [ 119.020408][T11138] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.027478][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.034876][T11138] bridge_slave_0: entered allmulticast mode [ 119.041612][T11138] bridge_slave_0: entered promiscuous mode [ 119.048776][T11138] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.055948][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.063190][T11138] bridge_slave_1: entered allmulticast mode [ 119.069810][T11138] bridge_slave_1: entered promiscuous mode [ 119.086693][T11138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.098123][T11138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.117104][T11138] team0: Port device team_slave_0 added [ 119.123845][T11138] team0: Port device team_slave_1 added [ 119.140355][T11138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.147306][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.173277][T11138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.184746][T11138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.191721][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.217632][T11138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.243822][T11138] hsr_slave_0: entered promiscuous mode [ 119.250025][T11138] hsr_slave_1: entered promiscuous mode [ 119.255863][T11138] debugfs: 'hsr0' already exists in 'hsr' [ 119.261612][T11138] Cannot create hsr debugfs directory [ 119.312313][T11138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.342529][T11138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.392262][T11138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.442889][T11138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.506574][T11138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.515421][T11138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.524446][T11138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.533536][T11138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.550404][T11138] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.557449][T11138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.564760][T11138] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.571837][T11138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.600374][T11138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.609941][ T4763] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.617783][ T4763] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.633498][T11138] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.642838][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.649928][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.661681][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.668748][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.711044][T11164] macvtap0: refused to change device tx_queue_len [ 119.783405][T11173] loop3: detected capacity change from 0 to 2048 [ 119.831564][T11138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.905653][T11186] netlink: 'syz.8.3137': attribute type 13 has an invalid length. [ 119.913544][T11186] netlink: 'syz.8.3137': attribute type 14 has an invalid length. [ 119.983406][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3141'. [ 119.998569][T11138] veth0_vlan: entered promiscuous mode [ 120.021684][T11198] vlan2: entered allmulticast mode [ 120.032900][T11198] dummy0: entered allmulticast mode [ 120.053778][T11138] veth1_vlan: entered promiscuous mode [ 120.085001][T11138] veth0_macvtap: entered promiscuous mode [ 120.106409][T11138] veth1_macvtap: entered promiscuous mode [ 120.130552][T11138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.143113][T11209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3146'. [ 120.153815][T11138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.173738][ T4752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.196960][T11212] loop6: detected capacity change from 0 to 512 [ 120.214250][ T4730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.225238][T11212] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.246770][ T4730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.256780][ T4730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.267113][T11212] EXT4-fs (loop6): 1 truncate cleaned up [ 120.291566][T11212] EXT4-fs error (device loop6): ext4_ext_precache:632: inode #15: comm syz.6.3147: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 120.323569][T11220] lo: entered allmulticast mode [ 120.331794][T11220] tunl0: entered allmulticast mode [ 120.332476][T11222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3149'. [ 120.338201][T11220] gre0: left promiscuous mode [ 120.350840][T11220] gre0: entered allmulticast mode [ 120.351218][T11218] loop0: detected capacity change from 0 to 2048 [ 120.363739][T11220] erspan0: entered allmulticast mode [ 120.370863][T11220] ip_vti0: entered allmulticast mode [ 120.377207][T11220] ip6_vti0: entered allmulticast mode [ 120.384324][T11220] sit0: entered allmulticast mode [ 120.392293][T11220] ip6tnl0: entered allmulticast mode [ 120.397459][T11218] loop0: p2 p3 p7 [ 120.398996][T11220] ip6gre0: entered allmulticast mode [ 120.408900][T11220] syz_tun: entered allmulticast mode [ 120.416311][T11220] ip6gretap0: entered allmulticast mode [ 120.423407][T11220] bridge0: entered allmulticast mode [ 120.432242][T11220] bond0: entered allmulticast mode [ 120.438341][T11220] dummy0: entered allmulticast mode [ 120.446927][T11220] team0: entered allmulticast mode [ 120.456035][T11220] nlmon0: entered allmulticast mode [ 120.463353][T11220] caif0: entered allmulticast mode [ 120.468844][T11220] batadv0: entered allmulticast mode [ 120.477361][T11220] vxcan0: entered allmulticast mode [ 120.483909][T11220] vxcan1: entered allmulticast mode [ 120.490020][T11220] veth0: entered allmulticast mode [ 120.496574][T11220] veth1: entered allmulticast mode [ 120.510437][T11220] wg0: entered allmulticast mode [ 120.517114][T11220] wg1: entered allmulticast mode [ 120.523815][T11220] wg2: entered allmulticast mode [ 120.531814][T11220] veth0_to_bridge: entered allmulticast mode [ 120.541936][T11220] bridge_slave_0: entered allmulticast mode [ 120.551001][T11220] veth1_to_bridge: entered allmulticast mode [ 120.566997][T11220] bridge_slave_1: entered allmulticast mode [ 120.576420][T11220] veth0_to_bond: entered allmulticast mode [ 120.590443][T11220] bond_slave_0: entered allmulticast mode [ 120.597508][T11220] veth1_to_bond: entered allmulticast mode [ 120.606456][T11220] bond_slave_1: entered allmulticast mode [ 120.633166][T11220] veth0_to_team: entered allmulticast mode [ 120.640598][T11220] team_slave_0: entered allmulticast mode [ 120.646795][T11220] veth1_to_team: entered allmulticast mode [ 120.655578][T11220] team_slave_1: entered allmulticast mode [ 120.661970][T11220] veth0_to_batadv: entered allmulticast mode [ 120.669359][T11220] batadv_slave_0: entered allmulticast mode [ 120.676164][T11220] veth1_to_batadv: entered allmulticast mode [ 120.683187][T11220] batadv_slave_1: entered allmulticast mode [ 120.690483][T11220] xfrm0: entered allmulticast mode [ 120.696389][T11220] veth0_to_hsr: entered allmulticast mode [ 120.703092][T11220] hsr_slave_0: entered allmulticast mode [ 120.709932][T11220] veth1_to_hsr: entered allmulticast mode [ 120.716431][T11220] hsr_slave_1: entered allmulticast mode [ 120.723726][T11220] hsr0: entered allmulticast mode [ 120.729955][T11220] veth1_virt_wifi: entered allmulticast mode [ 120.736902][T11220] veth0_virt_wifi: entered allmulticast mode [ 120.747191][T11220] vlan0: entered allmulticast mode [ 120.752723][T11220] vlan1: entered allmulticast mode [ 120.758244][T11220] macvlan0: entered allmulticast mode [ 120.765287][T11220] ipvlan1: entered allmulticast mode [ 120.771079][T11220] veth1_macvtap: entered allmulticast mode [ 120.777650][T11220] veth0_macvtap: entered allmulticast mode [ 120.784499][T11220] macvtap0: entered allmulticast mode [ 120.790891][T11220] macsec0: entered allmulticast mode [ 120.796970][T11220] geneve0: entered allmulticast mode [ 120.803644][T11220] geneve1: entered allmulticast mode [ 120.809926][T11220] hsr1: entered allmulticast mode [ 120.815326][T11220] gre1: entered allmulticast mode [ 120.820929][T11220] netdevsim netdevsim4 eth0: entered allmulticast mode [ 120.827857][T11220] netdevsim netdevsim4 eth1: entered allmulticast mode [ 120.834854][T11220] netdevsim netdevsim4 eth2: entered allmulticast mode [ 120.842026][T11220] netdevsim netdevsim4 eth3: entered allmulticast mode [ 120.849038][T11220] veth2: entered allmulticast mode [ 120.854276][T11220] veth3: entered allmulticast mode [ 120.859618][T11220] veth4: entered allmulticast mode [ 120.864807][T11220] veth5: entered allmulticast mode [ 120.908482][ T4723] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.944031][ T4723] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.979322][ T4723] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.995642][T11245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3160'. [ 121.008959][T11245] netem: change failed [ 121.013982][ T4723] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.053678][T11249] netlink: 'syz.3.3161': attribute type 13 has an invalid length. [ 121.061576][T11249] netlink: 'syz.3.3161': attribute type 14 has an invalid length. [ 121.103095][T11258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.110788][T11258] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.120109][T11258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.163571][T11264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3167'. [ 121.186720][T11266] loop0: detected capacity change from 0 to 512 [ 121.194935][T11266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 121.206519][T11266] EXT4-fs (loop0): 1 truncate cleaned up [ 121.222492][T11266] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #15: comm syz.0.3168: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 121.401577][T11282] lo: entered allmulticast mode [ 121.408496][T11282] tunl0: entered allmulticast mode [ 121.415922][T11282] gre0: entered allmulticast mode [ 121.425539][T11282] gretap0: entered allmulticast mode [ 121.433670][T11282] erspan0: entered allmulticast mode [ 121.441193][T11282] ip_vti0: entered allmulticast mode [ 121.447477][T11282] ip6_vti0: entered allmulticast mode [ 121.454782][T11282] sit0: entered allmulticast mode [ 121.462659][T11282] ip6tnl0: entered allmulticast mode [ 121.469735][T11282] ip6gre0: entered allmulticast mode [ 121.476385][T11282] syz_tun: entered allmulticast mode [ 121.483717][T11282] ip6gretap0: entered allmulticast mode [ 121.490883][T11282] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.498146][T11282] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.505803][T11282] bridge0: entered allmulticast mode [ 121.512483][T11282] vcan0: entered allmulticast mode [ 121.518421][T11282] bond0: entered allmulticast mode [ 121.523710][T11282] bond_slave_0: entered allmulticast mode [ 121.529445][T11282] bond_slave_1: entered allmulticast mode [ 121.536346][T11282] team0: entered allmulticast mode [ 121.541519][T11282] team_slave_0: entered allmulticast mode [ 121.547232][T11282] team_slave_1: entered allmulticast mode [ 121.554381][T11282] dummy0: entered allmulticast mode [ 121.561426][T11282] nlmon0: entered allmulticast mode [ 121.567591][T11282] caif0: entered allmulticast mode [ 121.572964][T11282] vxcan0: entered allmulticast mode [ 121.578723][T11282] vxcan1: entered allmulticast mode [ 121.584681][T11282] veth0: entered allmulticast mode [ 121.591230][T11282] veth1: entered allmulticast mode [ 121.597603][T11282] wg0: entered allmulticast mode [ 121.604009][T11282] wg1: entered allmulticast mode [ 121.610354][T11282] wg2: entered allmulticast mode [ 121.616522][T11282] veth0_to_bridge: entered allmulticast mode [ 121.625132][T11282] veth1_to_bridge: entered allmulticast mode [ 121.632965][T11282] veth0_to_bond: entered allmulticast mode [ 121.640678][T11282] veth1_to_bond: entered allmulticast mode [ 121.647915][T11282] veth0_to_team: left promiscuous mode [ 121.653463][T11282] veth0_to_team: entered allmulticast mode [ 121.660937][T11282] veth1_to_team: entered allmulticast mode [ 121.668696][T11282] veth0_to_batadv: entered allmulticast mode [ 121.676103][T11282] batadv_slave_0: entered allmulticast mode [ 121.683517][T11282] veth1_to_batadv: entered allmulticast mode [ 121.690621][T11282] batadv_slave_1: entered allmulticast mode [ 121.697507][T11282] xfrm0: entered allmulticast mode [ 121.703788][T11282] veth0_to_hsr: entered allmulticast mode [ 121.710810][T11282] hsr_slave_0: entered allmulticast mode [ 121.717063][T11282] veth1_to_hsr: entered allmulticast mode [ 121.725321][T11282] hsr_slave_1: entered allmulticast mode [ 121.732214][T11282] hsr0: entered allmulticast mode [ 121.738397][T11282] veth1_virt_wifi: entered allmulticast mode [ 121.746297][T11282] veth0_virt_wifi: entered allmulticast mode [ 121.753784][T11282] veth1_vlan: entered allmulticast mode [ 121.760433][T11282] veth0_vlan: entered allmulticast mode [ 121.769028][T11282] vlan0: entered allmulticast mode [ 121.774350][T11282] vlan1: entered allmulticast mode [ 121.779736][T11282] macvlan0: entered allmulticast mode [ 121.786191][T11282] macvlan1: entered allmulticast mode [ 121.792735][T11282] ipvlan0: entered allmulticast mode [ 121.798135][T11282] ipvlan1: entered allmulticast mode [ 121.804215][T11282] veth1_macvtap: entered allmulticast mode [ 121.810939][T11282] veth0_macvtap: entered allmulticast mode [ 121.817977][T11282] macvtap0: entered allmulticast mode [ 121.824319][T11282] macsec0: entered allmulticast mode [ 121.830783][T11282] geneve0: entered allmulticast mode [ 121.837001][T11282] geneve1: entered allmulticast mode [ 121.843496][T11282] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 121.852071][T11282] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 121.860497][T11282] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 121.868594][T11282] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 121.877003][T11282] veth2: entered allmulticast mode [ 121.882255][T11282] veth3: entered allmulticast mode [ 121.894981][ T4752] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.910769][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3175'. [ 121.922445][ T4752] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.951881][ T4752] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.963612][ T4752] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.976079][T11289] netlink: 'syz.4.3176': attribute type 10 has an invalid length. [ 121.991503][T11295] loop6: detected capacity change from 0 to 128 [ 122.017283][T11295] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 122.029496][T11298] netlink: 'syz.8.3180': attribute type 10 has an invalid length. [ 122.031923][T11295] System zones: 1-3 [ 122.037347][T11298] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3180'. [ 122.040696][T11289] bond0: (slave dummy0): Releasing backup interface [ 122.041292][T11295] , 19-19, 35-36 [ 122.043930][T11295] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.102738][ T29] kauditd_printk_skb: 1324 callbacks suppressed [ 122.102753][ T29] audit: type=1400 audit(1756607862.731:5048): avc: denied { create } for pid=11294 comm="syz.6.3179" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 122.120229][T11289] dummy0: left allmulticast mode [ 122.132412][ T29] audit: type=1326 audit(1756607862.731:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7fe7ebe9 code=0x7ffc0000 [ 122.142858][T11289] dummy0: entered allmulticast mode [ 122.158465][ T29] audit: type=1326 audit(1756607862.731:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7fe7ebe9 code=0x7ffc0000 [ 122.158573][ T29] audit: type=1326 audit(1756607862.731:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f0b7fe7ebe9 code=0x7ffc0000 [ 122.158596][ T29] audit: type=1326 audit(1756607862.731:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7fe7ebe9 code=0x7ffc0000 [ 122.158622][ T29] audit: type=1326 audit(1756607862.731:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11294 comm="syz.6.3179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b7fe7ebe9 code=0x7ffc0000 [ 122.267415][T11289] team0: Port device dummy0 added [ 122.294972][T11298] team0: Port device geneve1 added [ 122.309482][T11303] tipc: Started in network mode [ 122.314534][T11303] tipc: Node identity e24ff2619e9, cluster identity 4711 [ 122.321786][T11303] tipc: Enabled bearer , priority 0 [ 122.345397][T11301] tipc: Disabling bearer [ 122.357700][T11312] loop3: detected capacity change from 0 to 128 [ 122.376647][T11314] binfmt_misc: register: failed to install interpreter file ./bus [ 122.392490][ T29] audit: type=1326 audit(1756607863.021:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11313 comm="syz.4.3188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8124eebe9 code=0x0 [ 122.456348][ T29] audit: type=1400 audit(1756607863.081:5055): avc: denied { create } for pid=11321 comm="syz.8.3191" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 122.497207][ T29] audit: type=1400 audit(1756607863.121:5056): avc: denied { unlink } for pid=7127 comm="syz-executor" name="file0" dev="tmpfs" ino=1997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 122.530016][ T3414] IPVS: starting estimator thread 0... [ 122.541199][ T29] audit: type=1326 audit(1756607863.161:5057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11324 comm="syz.3.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3dbebe9 code=0x7ffc0000 [ 122.586646][T11336] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3197'. [ 122.611161][T11338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3198'. [ 122.619245][T11328] IPVS: using max 2688 ests per chain, 134400 per kthread [ 122.628065][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 122.637126][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 122.662321][T11341] loop0: detected capacity change from 0 to 128 [ 122.840500][T11347] netlink: 'syz.0.3202': attribute type 1 has an invalid length. [ 122.848569][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3202'. [ 122.862741][T11347] hsr_slave_1 (unregistering): left promiscuous mode [ 123.137694][T11351] IPv6: Can't replace route, no match found [ 123.225680][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3209'. [ 123.253506][T11370] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 123.276879][T11372] netlink: 'syz.3.3213': attribute type 30 has an invalid length. [ 123.434102][T11382] netlink: 'syz.6.3217': attribute type 4 has an invalid length. [ 123.646587][T11398] loop6: detected capacity change from 0 to 8192 [ 123.656902][T11408] netlink: 'syz.3.3229': attribute type 10 has an invalid length. [ 123.683839][T11408] geneve1: left allmulticast mode [ 123.700567][T11408] geneve1: entered allmulticast mode [ 123.706542][T11408] team0: Port device geneve1 added [ 123.724277][ T6819] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.748149][T11095] FAT-fs (loop6): error, invalid access to FAT (entry 0x00006c61) [ 123.756156][T11095] FAT-fs (loop6): Filesystem has been set read-only [ 123.769179][ T4752] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.779353][T11095] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 123.782032][ T4752] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.800630][T11095] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00006c6c) [ 123.836683][ T4752] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.875845][T11420] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 123.884192][T11420] tipc: Enabled bearer , priority 10 [ 123.942919][T11430] wg2: left allmulticast mode [ 123.948554][T11430] wg2: entered promiscuous mode [ 123.953607][T11430] wg2: entered allmulticast mode [ 124.112532][ T4752] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.133058][T11450] loop4: detected capacity change from 0 to 512 [ 124.140072][T11450] EXT4-fs: Ignoring removed orlov option [ 124.147951][T11450] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 124.165051][ T4752] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.183517][T11450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 124.205247][T11450] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3250: corrupted in-inode xattr: e_value size too large [ 124.220631][T11450] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3250: couldn't read orphan inode 15 (err -117) [ 124.222724][T11452] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.247267][ T4752] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.290192][T11457] loop4: detected capacity change from 0 to 128 [ 124.298747][T11457] ext4 filesystem being mounted at /696/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.315799][ T4752] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.396480][ T4752] bridge_slave_1: left allmulticast mode [ 124.402612][ T4752] bridge_slave_1: left promiscuous mode [ 124.408257][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.417235][ T4752] bridge_slave_0: left allmulticast mode [ 124.423049][ T4752] bridge_slave_0: left promiscuous mode [ 124.428830][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.451092][T11473] loop4: detected capacity change from 0 to 128 [ 124.458682][T11473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 124.466782][T11473] System zones: 1-3, 19-19, 35-36 [ 124.472798][T11473] ext4 filesystem being mounted at /697/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.522526][ T4752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.532536][ T4752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.542270][ T4752] bond0 (unregistering): Released all slaves [ 124.556488][T11471] macvtap0: refused to change device tx_queue_len [ 124.603837][T11481] bridge_slave_1: left promiscuous mode [ 124.609647][T11481] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.618177][T11481] bridge_slave_0: left promiscuous mode [ 124.624188][T11481] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.670680][T11461] lo speed is unknown, defaulting to 1000 [ 124.690172][ T4752] hsr_slave_0: left promiscuous mode [ 124.695939][ T4752] hsr_slave_1: left promiscuous mode [ 124.701841][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.709350][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.717179][ T4752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.724678][ T4752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.735359][ T4752] veth1_macvtap: left promiscuous mode [ 124.741432][ T4752] veth0_macvtap: left promiscuous mode [ 124.747025][ T4752] veth1_vlan: left promiscuous mode [ 124.752287][ T4752] veth0_vlan: left promiscuous mode [ 124.806988][ T4752] team0 (unregistering): Port device team_slave_1 removed [ 124.822528][ T4752] team0 (unregistering): Port device team_slave_0 removed [ 124.836278][T11493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.845865][T11493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.864191][T11490] tipc: Started in network mode [ 124.869229][T11490] tipc: Node identity 32810de1fdf4, cluster identity 4711 [ 124.876398][T11490] tipc: Enabled bearer , priority 0 [ 124.885602][T11487] tipc: Disabling bearer [ 124.989019][T11461] chnl_net:caif_netlink_parms(): no params data found [ 124.999243][ T3384] tipc: Node number set to 2095051361 [ 125.066009][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.073457][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.083649][T11461] bridge_slave_0: entered allmulticast mode [ 125.090621][T11461] bridge_slave_0: entered promiscuous mode [ 125.113673][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.120847][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.130757][T11461] bridge_slave_1: entered allmulticast mode [ 125.131769][T11524] validate_nla: 2 callbacks suppressed [ 125.131783][T11524] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 125.137357][T11461] bridge_slave_1: entered promiscuous mode [ 125.142471][T11524] netlink: 'syz.4.3278': attribute type 4 has an invalid length. [ 125.165609][T11520] binfmt_misc: register: failed to install interpreter file ./bus [ 125.175818][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.188645][T11524] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 125.192254][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.196552][T11524] netlink: 'syz.4.3278': attribute type 4 has an invalid length. [ 125.229840][T11461] team0: Port device team_slave_0 added [ 125.242287][T11461] team0: Port device team_slave_1 added [ 125.265189][T11529] tipc: Enabling of bearer rejected, failed to enable media [ 125.274613][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.281861][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.308047][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.321640][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.328621][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.354558][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.392652][T11461] hsr_slave_0: entered promiscuous mode [ 125.398638][T11461] hsr_slave_1: entered promiscuous mode [ 125.404948][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 125.410898][T11461] Cannot create hsr debugfs directory [ 125.444140][T11535] lo speed is unknown, defaulting to 1000 [ 125.452750][T11540] serio: Serial port ptm0 [ 125.656416][T11570] binfmt_misc: register: failed to install interpreter file ./bus [ 125.783653][T11461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 125.794670][T11461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 125.806065][T11461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.819053][T11461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.852878][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.860054][T11461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.867373][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.874438][T11461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.924414][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.952854][ T6819] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.973527][ T6819] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.995332][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.012234][ T6819] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.019352][ T6819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.046198][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.053340][ T4723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.092100][T11461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.102606][T11461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.192873][T11461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.324426][T11461] veth0_vlan: entered promiscuous mode [ 126.333706][T11461] veth1_vlan: entered promiscuous mode [ 126.354610][T11461] veth0_macvtap: entered promiscuous mode [ 126.364985][T11461] veth1_macvtap: entered promiscuous mode [ 126.379018][T11461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.393330][T11461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.406787][ T6819] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.424722][ T6819] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.438385][ T6819] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.447447][ T6819] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.507513][T11690] loop4: detected capacity change from 0 to 512 [ 126.522812][T11690] ext4 filesystem being mounted at /707/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.546817][T11690] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm wÞ£ÿ: corrupted inode contents [ 126.563296][T11690] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #18: comm wÞ£ÿ: mark_inode_dirty error [ 126.582155][T11690] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm wÞ£ÿ: corrupted inode contents [ 126.596754][T11690] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm wÞ£ÿ: mark_inode_dirty error [ 126.609129][T11690] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm wÞ£ÿ: mark inode dirty (error -117) [ 126.630264][T11690] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 126.728091][T11728] SELinux: policydb version 0 does not match my version range 15-35 [ 126.736818][T11728] SELinux: failed to load policy [ 126.743307][T11722] Falling back ldisc for ttyS3. [ 126.758019][T11730] pim6reg1: entered promiscuous mode [ 126.763442][T11730] pim6reg1: entered allmulticast mode [ 126.785694][T11739] binfmt_misc: register: failed to install interpreter file ./bus [ 126.855302][T11749] __nla_validate_parse: 8 callbacks suppressed [ 126.855319][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3309'. [ 127.136158][T11772] syz.0.3316 (11772) used obsolete PPPIOCDETACH ioctl [ 127.147495][T11776] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3320'. [ 127.156555][T11776] 0ªî{X¹¦: renamed from gretap0 [ 127.164825][T11776] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 127.208870][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 127.208884][ T29] audit: type=1400 audit(1756607867.831:5169): avc: denied { setopt } for pid=11779 comm="syz.0.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.264400][T11783] binfmt_misc: register: failed to install interpreter file ./bus [ 127.273208][ T29] audit: type=1326 audit(1756607867.901:5170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11782 comm="syz.0.3324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58fa67ebe9 code=0x0 [ 127.322223][ T29] audit: type=1400 audit(1756607867.951:5171): avc: denied { bind } for pid=11786 comm="syz.3.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 127.389993][ T29] audit: type=1326 audit(1756607868.021:5172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.8.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 127.413675][ T29] audit: type=1326 audit(1756607868.021:5173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.8.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 127.456959][ T29] audit: type=1326 audit(1756607868.061:5174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.8.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 127.480524][ T29] audit: type=1326 audit(1756607868.061:5175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.8.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 127.504279][ T29] audit: type=1326 audit(1756607868.061:5176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.8.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 127.527805][ T29] audit: type=1326 audit(1756607868.071:5177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.8.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 127.551624][ T29] audit: type=1326 audit(1756607868.071:5178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11791 comm="syz.8.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f7a0ebe9 code=0x7ffc0000 [ 128.168353][T11823] binfmt_misc: register: failed to install interpreter file ./bus [ 128.230708][T11829] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3342'. [ 128.258229][T11831] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3346'. [ 128.346277][T11835] lo speed is unknown, defaulting to 1000 [ 128.554861][T11846] smc: net device bond0 applied user defined pnetid SYZ0 [ 128.564290][T11846] smc: net device bond0 erased user defined pnetid SYZ0 [ 128.593654][T11849] loop4: detected capacity change from 0 to 512 [ 128.600516][T11849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.613456][T11849] EXT4-fs (loop4): 1 truncate cleaned up [ 128.619504][T11849] EXT4-fs mount: 22 callbacks suppressed [ 128.619519][T11849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.658743][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.751491][T11863] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3360'. [ 128.761280][T11863] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 128.770160][T11863] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 128.829707][T11874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 128.920675][T11887] loop4: detected capacity change from 0 to 128 [ 128.935473][T11887] FAT-fs (loop4): Directory bread(block 32) failed [ 128.945276][T11887] FAT-fs (loop4): Directory bread(block 33) failed [ 128.961100][T11887] FAT-fs (loop4): Directory bread(block 34) failed [ 128.967809][T11887] FAT-fs (loop4): Directory bread(block 35) failed [ 128.974535][T11887] FAT-fs (loop4): Directory bread(block 36) failed [ 128.983422][T11887] FAT-fs (loop4): Directory bread(block 37) failed [ 128.991576][T11887] FAT-fs (loop4): Directory bread(block 38) failed [ 128.998967][T11887] FAT-fs (loop4): Directory bread(block 39) failed [ 129.006533][T11887] FAT-fs (loop4): Directory bread(block 40) failed [ 129.013548][T11887] FAT-fs (loop4): Directory bread(block 41) failed [ 129.024670][T11891] netlink: 'syz.8.3373': attribute type 298 has an invalid length. [ 129.078314][T11901] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3376'. [ 129.087979][T11901] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 129.095415][T11901] 0ªî{X¹¦: entered allmulticast mode [ 129.102498][T11901] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 129.195563][T11887] bio_check_eod: 44599 callbacks suppressed [ 129.195600][T11887] syz.4.3371: attempt to access beyond end of device [ 129.195600][T11887] loop4: rw=2049, sector=4124, nr_sectors = 4 limit=128 [ 129.268255][T11922] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3383'. [ 129.282249][T11925] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3387'. [ 129.291433][T11925] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3387'. [ 129.318198][T11925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3387'. [ 129.329807][ T3398] hid_parser_main: 17 callbacks suppressed [ 129.329824][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.343081][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.350507][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.384411][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.392043][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.399520][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.407081][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.414586][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.416829][T11928] binfmt_misc: register: failed to install interpreter file ./bus [ 129.422092][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.437305][ T3398] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 129.460493][ T3398] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 129.511315][T11951] loop5: detected capacity change from 0 to 128 [ 129.523255][T11951] FAT-fs (loop5): Directory bread(block 32) failed [ 129.530805][T11951] FAT-fs (loop5): Directory bread(block 33) failed [ 129.537405][T11951] FAT-fs (loop5): Directory bread(block 34) failed [ 129.544006][T11951] FAT-fs (loop5): Directory bread(block 35) failed [ 129.552614][T11951] FAT-fs (loop5): Directory bread(block 36) failed [ 129.559302][T11951] FAT-fs (loop5): Directory bread(block 37) failed [ 129.565881][T11951] FAT-fs (loop5): Directory bread(block 38) failed [ 129.573741][T11951] FAT-fs (loop5): Directory bread(block 39) failed [ 129.582513][T11951] FAT-fs (loop5): Directory bread(block 40) failed [ 129.601276][T11951] FAT-fs (loop5): Directory bread(block 41) failed [ 129.747906][T11951] syz.5.3397: attempt to access beyond end of device [ 129.747906][T11951] loop5: rw=2049, sector=4124, nr_sectors = 4 limit=128 [ 130.036361][T11972] loop5: detected capacity change from 0 to 1024 [ 130.065978][T11972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.098867][T11972] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.126646][T11972] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 130.166150][T11972] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 4 with error 28 [ 130.178560][T11972] EXT4-fs (loop5): This should not happen!! Data will be lost [ 130.178560][T11972] [ 130.188228][T11972] EXT4-fs (loop5): Total free blocks count 0 [ 130.194210][T11972] EXT4-fs (loop5): Free/Dirty block details [ 130.200113][T11972] EXT4-fs (loop5): free_blocks=4293918720 [ 130.205843][T11972] EXT4-fs (loop5): dirty_blocks=16 [ 130.210961][T11972] EXT4-fs (loop5): Block reservation details [ 130.216992][T11972] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 130.287540][T11461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.536968][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 131.403294][T12026] SELinux: security policydb version 17 (MLS) not backwards compatible [ 131.411926][T12026] SELinux: failed to load policy [ 131.734530][T12034] Set syz1 is full, maxelem 65536 reached [ 131.734891][T12050] hub 9-0:1.0: USB hub found [ 131.782241][T12050] hub 9-0:1.0: 8 ports detected [ 132.003929][T12099] sch_fq: defrate 4294967295 ignored. [ 132.118369][T12123] loop5: detected capacity change from 0 to 1024 [ 132.131503][T12123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 132.143800][T12123] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.165014][T12123] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 132.189151][T12123] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 132.201740][T12123] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.201740][T12123] [ 132.211501][T12123] EXT4-fs (loop5): Total free blocks count 0 [ 132.217483][T12123] EXT4-fs (loop5): Free/Dirty block details [ 132.223397][T12123] EXT4-fs (loop5): free_blocks=4293918720 [ 132.229144][T12123] EXT4-fs (loop5): dirty_blocks=192 [ 132.234333][T12123] EXT4-fs (loop5): Block reservation details [ 132.240377][T12123] EXT4-fs (loop5): i_reserved_data_blocks=12 [ 132.266659][T11461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.298181][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 132.298196][ T29] audit: type=1400 audit(1756607872.921:5348): avc: denied { create } for pid=12145 comm="syz.4.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.340771][ T29] audit: type=1400 audit(1756607872.971:5349): avc: denied { setopt } for pid=12145 comm="syz.4.3455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 132.365872][T12147] binfmt_misc: register: failed to install interpreter file ./bus [ 132.395736][ T29] audit: type=1326 audit(1756607873.021:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.5.3454" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa85bccebe9 code=0x0 [ 132.467730][ T29] audit: type=1400 audit(1756607873.091:5351): avc: denied { getopt } for pid=12154 comm="syz.4.3456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 132.498692][ T29] audit: type=1400 audit(1756607873.091:5352): avc: denied { name_connect } for pid=12154 comm="syz.4.3456" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 132.896580][ T29] audit: type=1400 audit(1756607873.521:5353): avc: denied { mount } for pid=12223 comm="syz.8.3461" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 133.064848][ T29] audit: type=1400 audit(1756607873.691:5354): avc: denied { execute } for pid=12232 comm="syz.8.3465" path="/447/file1" dev="tmpfs" ino=2326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 133.239199][ T29] audit: type=1400 audit(1756607873.861:5355): avc: denied { create } for pid=12246 comm="syz.5.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.259132][ T29] audit: type=1400 audit(1756607873.861:5356): avc: denied { connect } for pid=12246 comm="syz.5.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 133.445223][T12255] sch_fq: defrate 4294967295 ignored. [ 133.470182][T12257] hub 9-0:1.0: USB hub found [ 133.485352][T12257] hub 9-0:1.0: 8 ports detected [ 133.510333][ T23] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.689618][T12267] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 133.835777][ T29] audit: type=1400 audit(1756607874.461:5357): avc: denied { ioctl } for pid=12273 comm="syz.4.3483" path="socket:[35790]" dev="sockfs" ino=35790 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 133.888096][T12280] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 133.908452][T12282] binfmt_misc: register: failed to install interpreter file ./bus [ 133.974558][T12287] __nla_validate_parse: 5 callbacks suppressed [ 133.974572][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3486'. [ 134.196126][ T23] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 134.374931][T12322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.382196][T12322] IPv6: NLM_F_CREATE should be set when creating new route [ 134.861520][T12350] loop4: detected capacity change from 0 to 512 [ 134.875188][T12350] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 135.288843][T12413] netlink: 'syz.8.3528': attribute type 30 has an invalid length. [ 135.773869][T12426] lo speed is unknown, defaulting to 1000 [ 135.822440][ T23] hid_parser_main: 50 callbacks suppressed [ 135.822460][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.835772][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.843246][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.850816][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.858205][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.865695][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.873142][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.880666][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.888050][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.895539][ T23] hid-generic 0000:0180:2000.000D: unknown main item tag 0x0 [ 135.939258][ T23] hid-generic 0000:0180:2000.000D: hidraw0: HID v0.40 Device [sy] on syz0 [ 135.993677][T12497] vhci_hcd: invalid port number 96 [ 135.998825][T12497] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 136.087258][T12513] tipc: Started in network mode [ 136.092204][T12513] tipc: Node identity ac14140f, cluster identity 4711 [ 136.099235][T12513] tipc: New replicast peer: 255.255.255.255 [ 136.099400][T12513] tipc: Enabled bearer , priority 10 [ 136.376199][T12556] ALSA: seq fatal error: cannot create timer (-19) [ 136.466215][T12575] serio: Serial port ttyS3 [ 136.740308][T12608] loop4: detected capacity change from 0 to 1024 [ 136.754731][T12608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.769514][T12608] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.783975][T12608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.797030][T12608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.817074][T12613] loop5: detected capacity change from 0 to 512 [ 136.824462][T12613] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.836669][T12613] EXT4-fs (loop5): 1 truncate cleaned up [ 136.843359][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.854314][T12613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.868367][T12613] EXT4-fs error (device loop5): __ext4_iget:5464: inode #12: block 2: comm syz.5.3568: invalid block [ 136.880636][T12613] EXT4-fs (loop5): Remounting filesystem read-only [ 136.898686][T11461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.099147][ T36] tipc: Node number set to 2886997007 [ 137.266946][T12640] netlink: 'syz.0.3580': attribute type 30 has an invalid length. [ 137.306871][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 137.306886][ T29] audit: type=1400 audit(1756607877.931:5432): avc: denied { write } for pid=12641 comm="syz.8.3582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.526621][ T29] audit: type=1326 audit(1756607878.151:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.550419][ T29] audit: type=1326 audit(1756607878.151:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.573929][ T29] audit: type=1326 audit(1756607878.151:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.597572][ T29] audit: type=1326 audit(1756607878.151:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.621482][ T29] audit: type=1326 audit(1756607878.151:5437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.645203][ T29] audit: type=1326 audit(1756607878.151:5438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.668695][ T29] audit: type=1326 audit(1756607878.151:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.692259][ T29] audit: type=1326 audit(1756607878.151:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.715819][ T29] audit: type=1326 audit(1756607878.151:5441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.0.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 137.773234][T12664] binfmt_misc: register: failed to install interpreter file ./bus [ 138.174828][T12687] tls_set_device_offload: netdev not found [ 138.205507][T12692] 9pnet_fd: Insufficient options for proto=fd [ 138.213641][T12690] binfmt_misc: register: failed to install interpreter file ./bus [ 138.273226][T12699] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3600'. [ 138.752042][T12720] tls_set_device_offload: netdev not found [ 139.055090][T12735] binfmt_misc: register: failed to install interpreter file ./bus [ 139.120386][T12751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3627'. [ 139.697741][T12858] tls_set_device_offload: netdev not found [ 139.913263][T12895] syzkaller0: entered promiscuous mode [ 139.918908][T12895] syzkaller0: entered allmulticast mode [ 139.957898][T12900] infiniband syz1: set down [ 139.962548][T12900] infiniband syz1: added syz_tun [ 139.978115][T12900] RDS/IB: syz1: added [ 139.985096][T12900] smc: adding ib device syz1 with port count 1 [ 139.991468][T12900] smc: ib device syz1 port 1 has pnetid [ 140.065097][T12907] syzkaller0: entered promiscuous mode [ 140.070787][T12907] syzkaller0: entered allmulticast mode [ 140.280141][T12917] can0: slcan on ttyS3. [ 140.309286][T12917] can0 (unregistered): slcan off ttyS3. [ 140.317458][T12917] can0: slcan on ttyS3. [ 140.369274][T12916] can0 (unregistered): slcan off ttyS3. [ 140.680693][T12921] syzkaller0: refused to change device tx_queue_len [ 141.268411][T12959] binfmt_misc: register: failed to install interpreter file ./bus [ 142.129982][ T4723] smc: removing ib device syz1 [ 142.516635][T13006] syzkaller0: entered promiscuous mode [ 142.522249][T13006] syzkaller0: entered allmulticast mode [ 142.531174][ T4703] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.561002][ T4703] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.588213][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 142.588227][ T29] audit: type=1400 audit(1756607883.211:5528): avc: denied { mounton } for pid=13008 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 142.636736][T13011] loop5: detected capacity change from 0 to 256 [ 142.660307][ T4703] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.711532][ T4703] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.744090][T13015] infiniband syz1: set active [ 142.748825][T13015] infiniband syz1: added syz_tun [ 142.787123][T13015] RDS/IB: syz1: added [ 142.798802][T13015] smc: adding ib device syz1 with port count 1 [ 142.818074][ T29] audit: type=1107 audit(1756607883.441:5529): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 142.829203][T13015] smc: ib device syz1 port 1 has pnetid [ 142.909554][ T4703] geneve1 (unregistering): left allmulticast mode [ 142.939495][ T4703] team0: Port device geneve1 removed [ 142.961317][ T4703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.971161][ T4703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.981280][ T4703] bond0 (unregistering): Released all slaves [ 143.002288][T13008] lo speed is unknown, defaulting to 1000 [ 143.094466][T13031] pim6reg1: entered promiscuous mode [ 143.099893][T13031] pim6reg1: entered allmulticast mode [ 143.212075][ T29] audit: type=1326 audit(1756607883.841:5530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.235747][ T29] audit: type=1326 audit(1756607883.841:5531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.259318][ T29] audit: type=1326 audit(1756607883.841:5532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.282822][ T29] audit: type=1326 audit(1756607883.841:5533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.306406][ T29] audit: type=1326 audit(1756607883.841:5534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.359943][T13008] chnl_net:caif_netlink_parms(): no params data found [ 143.368190][ T29] audit: type=1326 audit(1756607883.971:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.391763][ T29] audit: type=1326 audit(1756607883.971:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.415311][ T29] audit: type=1326 audit(1756607883.971:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13033 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8124eebe9 code=0x7ffc0000 [ 143.499617][T13008] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.506704][T13008] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.515290][T13008] bridge_slave_0: entered allmulticast mode [ 143.524238][T13008] bridge_slave_0: entered promiscuous mode [ 143.540946][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3695'. [ 143.558747][T13008] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.565917][T13008] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.587187][T13008] bridge_slave_1: entered allmulticast mode [ 143.604469][T13008] bridge_slave_1: entered promiscuous mode [ 143.647395][T13008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.692443][T13060] hub 2-0:1.0: USB hub found [ 143.701275][T13060] hub 2-0:1.0: 8 ports detected [ 143.704090][T13008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.752216][T13067] loop4: detected capacity change from 0 to 256 [ 143.773211][ T4703] hsr_slave_0: left promiscuous mode [ 143.781565][ T4703] hsr_slave_1: left promiscuous mode [ 143.821782][ T4703] team0 (unregistering): Port device team_slave_1 removed [ 143.831475][ T4703] team0 (unregistering): Port device team_slave_0 removed [ 143.884720][T13008] team0: Port device team_slave_0 added [ 143.907883][T13008] team0: Port device team_slave_1 added [ 143.942092][T13008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.949176][T13008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.975186][T13008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.011201][T13008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.018190][T13008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.044715][T13008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.073741][T13008] hsr_slave_0: entered promiscuous mode [ 144.097346][T13008] hsr_slave_1: entered promiscuous mode [ 144.110609][T13008] debugfs: 'hsr0' already exists in 'hsr' [ 144.116360][T13008] Cannot create hsr debugfs directory [ 144.505962][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3718'. [ 144.514930][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3718'. [ 144.547883][T13008] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 144.583852][T13008] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 144.607593][T13008] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 144.625269][T13008] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 144.671702][T13127] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3722'. [ 144.822262][T13008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.844238][T13008] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.870676][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.870780][ T4752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.901599][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.908713][ T4752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.947684][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.971970][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.086703][T13008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.118062][T13157] loop5: detected capacity change from 0 to 8192 [ 145.335271][T13008] veth0_vlan: entered promiscuous mode [ 145.356946][T13008] veth1_vlan: entered promiscuous mode [ 145.408390][T13008] veth0_macvtap: entered promiscuous mode [ 145.430837][T13008] veth1_macvtap: entered promiscuous mode [ 145.460563][T13008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.489271][T13008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.521672][ T4763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.558691][ T4763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.586797][ T4763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.633726][ T4763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.812810][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3744'. [ 146.526065][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811446b600: rx timeout, send abort [ 146.534322][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811446b400: rx timeout, send abort [ 146.542631][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811446b600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.556960][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811446b400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.661805][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3752'. [ 146.670745][T13218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3752'. [ 146.817122][T13232] syzkaller1: entered promiscuous mode [ 146.822786][T13232] syzkaller1: entered allmulticast mode [ 147.513833][T13273] loop5: detected capacity change from 0 to 512 [ 147.569196][T13273] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 147.615917][T13273] EXT4-fs (loop5): mount failed [ 147.644757][T13288] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3781'. [ 147.660618][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 147.660644][ T29] audit: type=1400 audit(1756607888.281:5692): avc: denied { watch } for pid=13272 comm="syz.5.3775" path="/95/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 147.693512][ T29] audit: type=1400 audit(1756607888.281:5693): avc: denied { mac_admin } for pid=13272 comm="syz.5.3775" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 147.695353][T13288] batadv1: entered promiscuous mode [ 147.714977][ T29] audit: type=1400 audit(1756607888.281:5694): avc: denied { relabelto } for pid=13272 comm="syz.5.3775" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 147.719949][T13288] batadv1: entered allmulticast mode [ 147.751370][ T29] audit: type=1400 audit(1756607888.281:5695): avc: denied { associate } for pid=13272 comm="syz.5.3775" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 147.779460][T13291] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3781'. [ 147.789613][ T29] audit: type=1400 audit(1756607888.411:5696): avc: denied { unmount } for pid=11461 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.841387][T13291] batadv1: entered promiscuous mode [ 147.846617][T13291] batadv1: entered allmulticast mode [ 147.930273][T13306] syzkaller0: entered allmulticast mode [ 147.949733][T13306] syzkaller0 (unregistering): left allmulticast mode [ 148.006839][T13311] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3792'. [ 148.087728][ T29] audit: type=1400 audit(1756607888.711:5697): avc: denied { write } for pid=13326 comm="syz.1.3799" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 148.176796][ T1036] hid_parser_main: 22 callbacks suppressed [ 148.176809][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.182811][ T29] audit: type=1400 audit(1756607888.811:5698): avc: denied { read } for pid=13343 comm="syz.4.3804" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 148.190065][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.190092][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.212833][ T29] audit: type=1400 audit(1756607888.811:5699): avc: denied { open } for pid=13343 comm="syz.4.3804" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 148.220182][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.220205][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.220224][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.230551][ T4730] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 148.251524][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.293251][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.300933][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.308503][ T1036] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 148.317014][ T1036] hid-generic 0000:0000:0000.000E: reserved main item tag 0xd [ 148.326570][ T1036] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 148.748161][T13348] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3805'. [ 148.760205][T13348] batadv1: entered promiscuous mode [ 148.765419][T13348] batadv1: entered allmulticast mode [ 148.802986][T13351] batadv1: entered promiscuous mode [ 148.808227][T13351] batadv1: entered allmulticast mode [ 148.921097][T13358] loop5: detected capacity change from 0 to 512 [ 148.931317][T13358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.944324][T13358] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.959957][ T29] audit: type=1400 audit(1756607889.591:5700): avc: denied { read append open } for pid=13357 comm="syz.5.3808" path="/100/file0/cgroup.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 148.997843][T11461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.039655][ T29] audit: type=1400 audit(1756607889.661:5701): avc: denied { shutdown } for pid=13365 comm="syz.5.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.087319][T13376] netlink: 'syz.5.3816': attribute type 4 has an invalid length. [ 149.156860][T13383] batadv1: entered promiscuous mode [ 149.162283][T13383] batadv1: entered allmulticast mode [ 149.204576][T13390] batadv1: entered promiscuous mode [ 149.209828][T13390] batadv1: entered allmulticast mode [ 149.256909][T13393] loop5: detected capacity change from 0 to 512 [ 149.264968][T13393] EXT4-fs error (device loop5): __ext4_iget:5464: inode #17: block 1803188595: comm syz.5.3823: invalid block [ 149.277177][T13393] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.3823: couldn't read orphan inode 17 (err -117) [ 149.291122][T13393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.315903][T11461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.373106][ T1036] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 150.055866][T13466] loop1: detected capacity change from 0 to 512 [ 150.090273][T13466] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 150.117209][T13466] EXT4-fs (loop1): mount failed [ 150.555565][T13547] syzkaller1: entered promiscuous mode [ 150.561285][T13547] syzkaller1: entered allmulticast mode [ 150.717354][T13565] netlink: 'syz.0.3841': attribute type 4 has an invalid length. [ 150.859074][T13572] __nla_validate_parse: 6 callbacks suppressed [ 150.865328][T13572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3845'. [ 151.177104][T13578] loop1: detected capacity change from 0 to 512 [ 151.196303][T13578] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.216977][T13578] EXT4-fs (loop1): 1 truncate cleaned up [ 151.223289][T13578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.251311][T13008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.524637][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3851'. [ 151.578820][T13591] hub 9-0:1.0: USB hub found [ 151.585321][T13591] hub 9-0:1.0: 8 ports detected [ 151.652516][T13601] netlink: 'syz.0.3859': attribute type 10 has an invalid length. [ 151.680592][T13601] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 151.824981][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3855'. [ 151.833915][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3855'. [ 151.844053][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3855'. [ 152.137762][T13640] syzkaller1: entered promiscuous mode [ 152.143368][T13640] syzkaller1: entered allmulticast mode [ 152.193365][T13643] hub 6-0:1.0: USB hub found [ 152.198063][T13643] hub 6-0:1.0: 8 ports detected [ 152.241944][T13647] syzkaller0: refused to change device tx_queue_len [ 152.458945][ T4763] tipc: Subscription rejected, illegal request [ 152.542947][T13675] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3891'. [ 152.544566][T13676] program syz.5.3892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 152.742505][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 152.742520][ T29] audit: type=1326 audit(1756607893.371:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5c9cebe9 code=0x7ffc0000 [ 152.772155][ T29] audit: type=1326 audit(1756607893.371:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5c9cebe9 code=0x7ffc0000 [ 152.795710][ T29] audit: type=1326 audit(1756607893.371:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6a5c9cebe9 code=0x7ffc0000 [ 152.819144][ T29] audit: type=1326 audit(1756607893.371:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5c9cebe9 code=0x7ffc0000 [ 152.842645][ T29] audit: type=1326 audit(1756607893.371:5739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f6a5c9cebe9 code=0x7ffc0000 [ 152.866063][ T29] audit: type=1326 audit(1756607893.371:5740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5c9cebe9 code=0x7ffc0000 [ 152.889756][ T29] audit: type=1326 audit(1756607893.371:5741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13685 comm="syz.1.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5c9cebe9 code=0x7ffc0000 [ 153.288661][ T29] audit: type=1400 audit(1756607893.911:5742): avc: denied { sqpoll } for pid=13694 comm="syz.0.3896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.460949][ T29] audit: type=1326 audit(1756607894.091:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.0.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 153.484651][ T29] audit: type=1326 audit(1756607894.091:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.0.3911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58fa67ebe9 code=0x7ffc0000 [ 153.708067][T13700] Set syz1 is full, maxelem 65536 reached [ 153.739626][T13714] pim6reg1: entered promiscuous mode [ 153.745029][T13714] pim6reg1: entered allmulticast mode [ 153.844967][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3907'. [ 153.987088][T13735] loop5: detected capacity change from 0 to 2048 [ 154.033827][T13735] loop5: p3 p4 < > [ 154.041448][T13735] loop5: p3 start 301989888 is beyond EOD, truncated [ 154.214454][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3927'. [ 154.295525][T13775] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3931'. [ 154.361903][T13781] syz.1.3934: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 154.376479][T13781] CPU: 0 UID: 0 PID: 13781 Comm: syz.1.3934 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.376509][T13781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.376523][T13781] Call Trace: [ 154.376530][T13781] [ 154.376563][T13781] __dump_stack+0x1d/0x30 [ 154.376583][T13781] dump_stack_lvl+0xe8/0x140 [ 154.376600][T13781] dump_stack+0x15/0x1b [ 154.376618][T13781] warn_alloc+0x12b/0x1a0 [ 154.376656][T13781] __vmalloc_node_range_noprof+0x9c/0xe00 [ 154.376765][T13781] ? __futex_wait+0x1ff/0x260 [ 154.376802][T13781] ? __pfx_futex_wake_mark+0x10/0x10 [ 154.376832][T13781] ? __rcu_read_unlock+0x4f/0x70 [ 154.376850][T13781] ? avc_has_perm_noaudit+0x1b1/0x200 [ 154.376918][T13781] ? should_fail_ex+0x30/0x280 [ 154.376955][T13781] ? xskq_create+0x36/0xe0 [ 154.376995][T13781] vmalloc_user_noprof+0x7d/0xb0 [ 154.377157][T13781] ? xskq_create+0x80/0xe0 [ 154.377207][T13781] xskq_create+0x80/0xe0 [ 154.377294][T13781] xsk_init_queue+0x95/0xf0 [ 154.377319][T13781] xsk_setsockopt+0x477/0x640 [ 154.377342][T13781] ? __pfx_xsk_setsockopt+0x10/0x10 [ 154.377380][T13781] __sys_setsockopt+0x184/0x200 [ 154.377400][T13781] __x64_sys_setsockopt+0x64/0x80 [ 154.377420][T13781] x64_sys_call+0x20ec/0x2ff0 [ 154.377443][T13781] do_syscall_64+0xd2/0x200 [ 154.377540][T13781] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.377563][T13781] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 154.377584][T13781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.377663][T13781] RIP: 0033:0x7f6a5c9cebe9 [ 154.377677][T13781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.377691][T13781] RSP: 002b:00007f6a5b437038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.377748][T13781] RAX: ffffffffffffffda RBX: 00007f6a5cc05fa0 RCX: 00007f6a5c9cebe9 [ 154.377762][T13781] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 154.377775][T13781] RBP: 00007f6a5ca51e19 R08: 0000000000000004 R09: 0000000000000000 [ 154.377788][T13781] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 154.377802][T13781] R13: 00007f6a5cc06038 R14: 00007f6a5cc05fa0 R15: 00007ffdb7184438 [ 154.377818][T13781] [ 154.377911][T13781] Mem-Info: [ 154.599906][T13781] active_anon:5895 inactive_anon:12 isolated_anon:0 [ 154.599906][T13781] active_file:27789 inactive_file:2301 isolated_file:0 [ 154.599906][T13781] unevictable:17371 dirty:279 writeback:0 [ 154.599906][T13781] slab_reclaimable:3823 slab_unreclaimable:24905 [ 154.599906][T13781] mapped:28966 shmem:1474 pagetables:1264 [ 154.599906][T13781] sec_pagetables:0 bounce:0 [ 154.599906][T13781] kernel_misc_reclaimable:0 [ 154.599906][T13781] free:1852246 free_pcp:5703 free_cma:0 [ 154.645291][T13781] Node 0 active_anon:23580kB inactive_anon:48kB active_file:111156kB inactive_file:9204kB unevictable:81664kB isolated(anon):0kB isolated(file):0kB mapped:115864kB dirty:1116kB writeback:0kB shmem:5896kB kernel_stack:4880kB pagetables:5056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.673122][T13781] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.701714][T13781] lowmem_reserve[]: 0 2883 7862 7862 [ 154.707091][T13781] Node 0 DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 154.737366][T13781] lowmem_reserve[]: 0 0 4978 4978 [ 154.742439][T13781] Node 0 Normal free:4421228kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23580kB inactive_anon:48kB active_file:111156kB inactive_file:9204kB unevictable:95584kB writepending:1116kB present:5242880kB managed:5098240kB mlocked:95816kB bounce:0kB free_pcp:16224kB local_pcp:12044kB free_cma:0kB [ 154.775277][T13781] lowmem_reserve[]: 0 0 0 0 [ 154.779808][T13781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.792528][T13781] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 154.808772][T13781] Node 0 Normal: 135*4kB (UE) 236*8kB (UE) 66*16kB (UME) 124*32kB (UE) 63*64kB (UM) 9*128kB (U) 7*256kB (UM) 52*512kB (UME) 84*1024kB (UM) 53*2048kB (UME) 1018*4096kB (UM) = 4405340kB [ 154.827293][T13781] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 154.836596][T13781] 31586 total pagecache pages [ 154.841299][T13781] 38 pages in swap cache [ 154.845537][T13781] Free swap = 124184kB [ 154.849697][T13781] Total swap = 124996kB [ 154.853839][T13781] 2097051 pages RAM [ 154.857636][T13781] 0 pages HighMem/MovableOnly [ 154.862333][T13781] 80444 pages reserved [ 155.102962][T13795] batman_adv: batadv0: Adding interface: dummy0 [ 155.109265][T13795] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.170473][T13795] batman_adv: batadv0: Interface activated: dummy0 [ 155.271717][T13804] ªªªªªª: renamed from vlan0 (while UP) [ 155.389314][T13812] serio: Serial port ptm0 [ 155.854118][T13827] binfmt_misc: register: failed to install interpreter file ./bus [ 155.874329][T13829] loop1: detected capacity change from 0 to 1024 [ 155.921743][T13829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.936254][T13829] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.951507][T13829] EXT4-fs (loop1): shut down requested (2) [ 155.968820][T13008] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.025305][T13846] loop5: detected capacity change from 0 to 128 [ 156.130944][T13858] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3967'. [ 156.279066][T13870] loop5: detected capacity change from 0 to 2048 [ 156.290904][T13870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.412680][T13875] EXT4-fs (loop5): Online defrag not supported with bigalloc [ 156.690238][ T4752] ================================================================== [ 156.698355][ T4752] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 156.707817][ T4752] [ 156.710130][ T4752] write to 0xffff8881414af5c8 of 3 bytes by task 13870 on cpu 0: [ 156.717829][ T4752] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 156.723711][ T4752] generic_perform_write+0x2c2/0x490 [ 156.728979][ T4752] ext4_buffered_write_iter+0x1ee/0x3c0 [ 156.734524][ T4752] ext4_file_write_iter+0x383/0xf00 [ 156.739711][ T4752] iter_file_splice_write+0x663/0xa60 [ 156.745062][ T4752] direct_splice_actor+0x153/0x2a0 [ 156.750169][ T4752] splice_direct_to_actor+0x30f/0x680 [ 156.755534][ T4752] do_splice_direct+0xda/0x150 [ 156.760276][ T4752] do_sendfile+0x380/0x650 [ 156.764675][ T4752] __x64_sys_sendfile64+0x105/0x150 [ 156.769866][ T4752] x64_sys_call+0x2bb0/0x2ff0 [ 156.774542][ T4752] do_syscall_64+0xd2/0x200 [ 156.779043][ T4752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.784930][ T4752] [ 156.787251][ T4752] read to 0xffff8881414af000 of 2048 bytes by task 4752 on cpu 1: [ 156.795033][ T4752] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 156.800918][ T4752] generic_perform_write+0x2c2/0x490 [ 156.806205][ T4752] shmem_file_write_iter+0xc5/0xf0 [ 156.811303][ T4752] lo_rw_aio+0x6a0/0x760 [ 156.815534][ T4752] loop_process_work+0x52d/0xa60 [ 156.820462][ T4752] loop_workfn+0x31/0x40 [ 156.824691][ T4752] process_scheduled_works+0x4ce/0x9d0 [ 156.830138][ T4752] worker_thread+0x582/0x770 [ 156.834716][ T4752] kthread+0x486/0x510 [ 156.838767][ T4752] ret_from_fork+0xda/0x150 [ 156.843255][ T4752] ret_from_fork_asm+0x1a/0x30 [ 156.848004][ T4752] [ 156.850321][ T4752] Reported by Kernel Concurrency Sanitizer on: [ 156.856456][ T4752] CPU: 1 UID: 0 PID: 4752 Comm: kworker/u8:51 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.866416][ T4752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 156.876458][ T4752] Workqueue: loop5 loop_workfn [ 156.881237][ T4752] ================================================================== [ 157.186301][T11461] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.