last executing test programs: 14m53.518045778s ago: executing program 32 (id=293): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q;', 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 14m51.096829866s ago: executing program 33 (id=365): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000240)=""/35, 0x23}, {0x0}], 0x2}, 0x0) 14m33.000752448s ago: executing program 34 (id=1006): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) 14m28.944872029s ago: executing program 35 (id=1118): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000000) close(r2) 13m8.484726586s ago: executing program 36 (id=4055): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = io_uring_setup(0x1962, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x0, 0x214}) close(r1) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 10m25.524574791s ago: executing program 37 (id=9542): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 10m25.524385381s ago: executing program 38 (id=9543): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc14"], 0x64}, 0x1, 0x0, 0x0, 0x24004840}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newchain={0x2c, 0x64, 0xa04, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xc, 0xf}, {0x9, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m24.848177034s ago: executing program 39 (id=9548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 10m4.05760708s ago: executing program 1 (id=10183): unshare(0x28000600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) flock(r2, 0x2) 10m3.220538007s ago: executing program 1 (id=10212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000280), 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 10m3.135381628s ago: executing program 1 (id=10214): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x104}) close_range(r2, 0xffffffffffffffff, 0x0) 10m3.118581388s ago: executing program 1 (id=10217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='./file0/file0/file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x2) 10m3.093101819s ago: executing program 1 (id=10219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x6a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) write$selinux_load(0xffffffffffffffff, 0x0, 0xffa8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xffff, 0xfff1}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4c000) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 10m2.783424495s ago: executing program 1 (id=10229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x14, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 10m2.762117486s ago: executing program 40 (id=10229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x14, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) 7m38.043231636s ago: executing program 4 (id=14332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={0x0, r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x2008c014) 7m37.749497813s ago: executing program 4 (id=14336): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m37.533118377s ago: executing program 4 (id=14338): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x5) fchdir(r1) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 7m37.39283752s ago: executing program 4 (id=14345): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221) 7m37.392607519s ago: executing program 4 (id=14346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9GajdN4o8KgvUiiBYLeq9LMg0lm27JbkoTC20P9uJFiiBiQfwDvHss/gP+FQUtFClBD14is5lNt81ukqYbN3U+H5j2vZnZvPnum+/bNzu7bACFNZL9U4p4OSK+SSIOt20bjHzjyOp+yw+vTWVLEisrn/2ZRJKva+2f5P8fzCsvRcSvX0WcKK1vt764NFupVtP5vD7WmLs8Vl9cOnlxrjKTzqSXJiYnT781OfHuO2/3LNbXz/39/ad3Pzr99fHl736+f+R2EmfiUL6tPY5ncKO9MhIj+XMyFGee2HG8B43tJkm/D4BtGcjzfCiyMeBwDORZD/z/XY+IFaCgEvkPBdWaB7Su7Xt0HfzcePDB6gXQ+vgHV98biX3Na6MDy8ljV0bZ9e5wD9rP2vjljzu3syU2eR/ieg/aA2i5cTMiTg0Orh//knz8275TzTePN/ZkG0V7/YF+upvNf97oNP8prc1/osP852CH3N2OzfO/dL8HzXSVzf/e6zj/XRu6hgfy2gvNOd9QcuFiNT0VES9GxGgM7c3qG93POb18b6Xbtvb5X7Zk7bfmgvlx3B/c+/hjpiuNyrPE3O7BzYhXOs5/k7X+Tzr0f/Z8nNtiG8fSO69227Z5/Dtr5aeI1zr2/6M7WsnG9yfHmufDWOusWO+vW8d+69b+6If9jT/r/wMbxz+ctN+vrT99Gz/u+yfttm275/+e5PNmeU++7mql0Zgfj9iTfLJ+/cSjx7bqrf2z+EePbzz+dTr/90fEF1uM/9bRW1137ff5n8U//VT9//SFex9/+UO39rfW/282S6P5mq2Mf1s9wGd57gAAAAAAAGC3KUXEoUhK5bVyqVQur36+42gcKFVr9caJC7WFS9PR/K7scAyVWne6D7d9HmI8/zxsqz7xRH0yIo5ExLcD+5v18lStOt3v4AEAAAAAAAAAAAAAAAAAAGCXONjl+/+Z3wf6fXTAjvOT31Bcm+Z/L37pCdiVvP5Dccl/KC75D8Ul/6G45D8Ul/yH4pL/UFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq3Nmz2bKy/PDaVFafvrK4MFu7cnI6rc+W5xamylO1+cvlmVptppqWp2pzm/29aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fDv0nUQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6F92NXHMZOBrhqWw8f3C1RKHQt7NtG5/Z5YAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANv8GAAD//04mM/E=") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 7m36.988041928s ago: executing program 4 (id=14348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 7m36.974156328s ago: executing program 41 (id=14348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 7m26.489113787s ago: executing program 5 (id=14635): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 7m25.490583407s ago: executing program 5 (id=14647): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r0, 0x545c, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x10, 0x3, 0x9) 7m24.262296032s ago: executing program 5 (id=14664): prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setresuid(0x0, 0xee01, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 7m23.409072969s ago: executing program 5 (id=14682): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8a3ffffbfa400000000000007140000f0ffffffb70200001800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m23.228778383s ago: executing program 5 (id=14685): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24) listen(r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close_range(r0, r1, 0x0) 7m22.950320658s ago: executing program 5 (id=14689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 7m22.907651389s ago: executing program 42 (id=14689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 6m15.941663056s ago: executing program 0 (id=16034): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'team0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) connect$pppoe(r1, &(0x7f0000000200)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) close(r0) 6m15.909313597s ago: executing program 0 (id=16035): r0 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 6m15.510606485s ago: executing program 0 (id=16041): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x44010) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @remote}]}, 0x20}}, 0x0) 6m15.455135746s ago: executing program 0 (id=16042): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 6m15.225934361s ago: executing program 0 (id=16044): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r3, 0x2000}, 0x10) 6m14.660762822s ago: executing program 0 (id=16058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2}) sendmmsg$inet(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 6m14.660528702s ago: executing program 43 (id=16058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000380), &(0x7f0000000200)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r4, r2}) sendmmsg$inet(r3, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 5m58.70917321s ago: executing program 8 (id=16482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x1) flock(r3, 0x2) dup3(r3, r2, 0x0) 5m58.636365112s ago: executing program 8 (id=16485): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/rfkill\x00'}]}, 0x18) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 5m58.520727304s ago: executing program 8 (id=16489): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 5m57.941576946s ago: executing program 8 (id=16496): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 5m57.919210006s ago: executing program 8 (id=16499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 5m53.325333138s ago: executing program 8 (id=16587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m53.322998388s ago: executing program 44 (id=16587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.878421167s ago: executing program 6 (id=22013): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[], [{@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '\xcb}//}'}}, {@measure}, {@measure}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@pcr={'pcr', 0x3d, 0xc}}, {@dont_measure}]}, 0x1, 0x605, &(0x7f0000000640)="$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") add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 5.288867447s ago: executing program 6 (id=22015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 5.097246951s ago: executing program 6 (id=22018): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14c20, 0x0, 0x0, 0x0, 0x48d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) openat$tun(0xffffffffffffff9c, 0x0, 0x4a8b02, 0x0) 4.6243283s ago: executing program 2 (id=22024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 3.837617546s ago: executing program 3 (id=22027): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 3.807079206s ago: executing program 3 (id=22028): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)="84", 0x1, 0xb57a) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 3.63211488s ago: executing program 2 (id=22029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet(0x2, 0xa, 0x8) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(r5) 3.374999544s ago: executing program 3 (id=22033): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) r0 = socket(0x10, 0x3, 0x9) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x800) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000001, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004a40)='1)', 0x2}], 0x1, &(0x7f0000000900)=ANY=[], 0x440}}], 0x1, 0x50) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 3.261681597s ago: executing program 2 (id=22035): syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x63) inotify_init1(0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r0, 0x16) 2.955602603s ago: executing program 6 (id=22036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 2.442550463s ago: executing program 9 (id=22040): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x2007, @fd=r3, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.438727543s ago: executing program 2 (id=22041): ftruncate(0xffffffffffffffff, 0x2007ffc) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 2.409969423s ago: executing program 2 (id=22042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 2.355421284s ago: executing program 9 (id=22043): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/diskstats\x00', 0x0, 0x0) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.197856397s ago: executing program 9 (id=22044): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 2.09548369s ago: executing program 6 (id=22045): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.844779734s ago: executing program 6 (id=22047): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 1.378264143s ago: executing program 3 (id=22048): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 1.233661826s ago: executing program 9 (id=22049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000000), 0x4) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 1.156225618s ago: executing program 9 (id=22050): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000640)="69710c3e7b90", 0x5dc}], 0x2, 0x0, 0x0, 0xc0090}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) socket$packet(0x11, 0xa, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000005c0)='+\xfd[@\x00\xb7P\b\xdb\xda\xd7\xfe\x00)\x16\xc4\x1b\xb6rb\xc6\x04\b\x9d\xfc\xa8\x0f\xcav\x7f\x15\x1d+G\xe7\x9e\xe0,\n\xd4\xdb\x91N\b\xa0\x06\x81\xf0\x1b:dM\xcb\x98e:h\x81@\xc4U\xc5p\x9f\xc0\x87\xa4\xb6\xfe\r\xba\x1bT\xd6\x8d*\xab\xb3-\xbaS\xb6\x80\x87\x06`\x10\x99\x14~\xff\n\xec\xd4\r7Eu\xbe\xd0\x9cd\xd0\x98T\x0e\x9d\xb8\xed\x8ej9?\xb9\xb2k\xd6j\x00\x00\x00\x00\x00\x00\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.081714599s ago: executing program 7 (id=22052): ftruncate(0xffffffffffffffff, 0x2007ffc) r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socket$inet6(0xa, 0x3, 0xff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 1.0236706s ago: executing program 7 (id=22053): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sync() r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, &(0x7f0000000d80)) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") unshare(0x2040400) r3 = timerfd_create(0x8, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) setuid(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_settime(r3, 0x0, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) setsockopt(r0, 0xb39, 0x5, 0x0, 0x0) 760.464326ms ago: executing program 7 (id=22054): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 334.806304ms ago: executing program 3 (id=22055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='console\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 240.071506ms ago: executing program 3 (id=22056): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) msgget(0x1, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) sync() 203.952196ms ago: executing program 7 (id=22057): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x4, 0xc, 0x4, 0x5, 0x6, 0xa9, 0x3, 0xb2, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) sync() 113.984418ms ago: executing program 7 (id=22058): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x445c5, 0x24) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x7ffffffe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r3, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) 107.853798ms ago: executing program 9 (id=22059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 99.959978ms ago: executing program 2 (id=22060): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_regs={0x4, 0x0, 0x1}}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x20000008}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c64) socket$nl_route(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000002540)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 0s ago: executing program 7 (id=22061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESOCT], 0x8, 0x300, &(0x7f0000000b80)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kernel console output (not intermixed with test programs): [ 831.743630][ T6660] bond13: entered promiscuous mode [ 831.748983][ T6660] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 831.756898][ T6660] bond13: left promiscuous mode [ 832.094858][ T6709] lo speed is unknown, defaulting to 1000 [ 832.611903][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20802'. [ 832.854630][ T6746] netlink: 32 bytes leftover after parsing attributes in process `syz.6.20803'. [ 832.942769][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.20796'. [ 833.452568][ T6763] lo speed is unknown, defaulting to 1000 [ 835.048781][ T6828] netlink: 'syz.6.20820': attribute type 4 has an invalid length. [ 835.107291][ T6833] netlink: 'syz.6.20820': attribute type 4 has an invalid length. [ 835.133710][T20818] lo speed is unknown, defaulting to 1000 [ 835.139557][T20818] syz2: Port: 1 Link DOWN [ 835.189105][T25066] lo speed is unknown, defaulting to 1000 [ 835.194959][T25066] syz2: Port: 1 Link ACTIVE [ 835.564773][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 835.564790][ T29] audit: type=1326 audit(835.543:46393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.636540][ T29] audit: type=1326 audit(835.583:46394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.655992][ T6843] lo speed is unknown, defaulting to 1000 [ 835.659659][ T29] audit: type=1326 audit(835.583:46395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.688382][ T29] audit: type=1326 audit(835.583:46396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0f495ec23 code=0x7ffc0000 [ 835.711434][ T29] audit: type=1326 audit(835.583:46397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc0f495ec23 code=0x7ffc0000 [ 835.734370][ T29] audit: type=1326 audit(835.583:46398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.757667][ T29] audit: type=1326 audit(835.583:46399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.780752][ T29] audit: type=1326 audit(835.583:46400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.803754][ T29] audit: type=1326 audit(835.583:46401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.826739][ T29] audit: type=1326 audit(835.583:46402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6847 comm="syz.6.20825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 835.911535][ T6880] netlink: 'syz.7.20831': attribute type 1 has an invalid length. [ 835.957612][ T6880] 8021q: adding VLAN 0 to HW filter on device bond14 [ 835.965795][ T6903] loop9: detected capacity change from 0 to 764 [ 835.979180][ T6903] rock: directory entry would overflow storage [ 835.985549][ T6903] rock: sig=0x4f50, size=4, remaining=3 [ 835.991192][ T6903] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 836.016074][ T6904] bond14 (unregistering): Released all slaves [ 836.023798][ T6903] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 836.236573][ T6961] tipc: Enabling of bearer rejected, failed to enable media [ 836.397924][ T6977] __nla_validate_parse: 8 callbacks suppressed [ 836.397942][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20840'. [ 836.417022][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20840'. [ 836.520152][ T6985] netlink: 36 bytes leftover after parsing attributes in process `syz.3.20842'. [ 836.703497][ T6989] lo speed is unknown, defaulting to 1000 [ 836.831788][ T7006] tipc: Started in network mode [ 836.836733][ T7006] tipc: Node identity 22017036686f, cluster identity 4711 [ 836.844049][ T7006] tipc: Enabled bearer , priority 0 [ 836.852944][ T7005] tipc: Resetting bearer [ 836.912417][ T7005] tipc: Disabling bearer [ 837.387870][ T7058] lo speed is unknown, defaulting to 1000 [ 838.003433][ T7082] loop9: detected capacity change from 0 to 128 [ 838.039645][ T7082] syz.9.20859: attempt to access beyond end of device [ 838.039645][ T7082] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 838.069490][ T7082] syz.9.20859: attempt to access beyond end of device [ 838.069490][ T7082] loop9: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 838.100120][ T7082] syz.9.20859: attempt to access beyond end of device [ 838.100120][ T7082] loop9: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 838.120183][ T7094] syz.9.20859: attempt to access beyond end of device [ 838.120183][ T7094] loop9: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 838.137288][ T7082] syz.9.20859: attempt to access beyond end of device [ 838.137288][ T7082] loop9: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 838.151974][ T7094] syz.9.20859: attempt to access beyond end of device [ 838.151974][ T7094] loop9: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 838.155359][ T7098] netlink: 'syz.2.20863': attribute type 1 has an invalid length. [ 838.165757][ T7082] syz.9.20859: attempt to access beyond end of device [ 838.165757][ T7082] loop9: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 838.203459][ T7098] 8021q: adding VLAN 0 to HW filter on device bond18 [ 838.205793][ T7082] syz.9.20859: attempt to access beyond end of device [ 838.205793][ T7082] loop9: rw=2049, sector=289, nr_sectors = 9 limit=128 [ 838.223869][ T7094] syz.9.20859: attempt to access beyond end of device [ 838.223869][ T7094] loop9: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 838.225562][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20863'. [ 838.248857][ T7098] bond18 (unregistering): Released all slaves [ 838.344860][ T7172] tipc: Enabling of bearer rejected, failed to enable media [ 838.652194][ T7206] netlink: 'syz.6.20878': attribute type 1 has an invalid length. [ 838.655043][ T7207] netlink: 'syz.7.20879': attribute type 4 has an invalid length. [ 838.674182][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.688905][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20878'. [ 838.701205][ T7206] bond0 (unregistering): Released all slaves [ 838.731677][ T7207] netlink: 'syz.7.20879': attribute type 4 has an invalid length. [ 838.813236][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20883'. [ 838.841797][ T7294] 8021q: adding VLAN 0 to HW filter on device bond18 [ 838.915577][ T7294] macvlan2: entered promiscuous mode [ 838.921026][ T7294] macvlan2: entered allmulticast mode [ 838.935276][ T7294] bond18: entered promiscuous mode [ 838.941186][ T7339] netlink: 'syz.6.20886': attribute type 1 has an invalid length. [ 838.943303][ T7294] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 838.956986][ T7294] bond18: left promiscuous mode [ 838.978632][ T7339] bond0: entered promiscuous mode [ 838.988313][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.007052][ T7380] 8021q: adding VLAN 0 to HW filter on device bond21 [ 839.017679][ T7380] bond0: (slave bond21): making interface the new active one [ 839.025253][ T7380] bond21: entered promiscuous mode [ 839.033255][ T7380] bond0: (slave bond21): Enslaving as an active interface with an up link [ 839.125864][ T7428] netlink: 'syz.6.20897': attribute type 4 has an invalid length. [ 839.135970][ T3405] lo speed is unknown, defaulting to 1000 [ 839.141837][ T3405] syz2: Port: 1 Link DOWN [ 839.153306][ T7428] netlink: 'syz.6.20897': attribute type 4 has an invalid length. [ 839.166979][ T3405] lo speed is unknown, defaulting to 1000 [ 839.172827][ T3405] syz2: Port: 1 Link ACTIVE [ 839.185002][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20896'. [ 839.196790][ T7431] ip6gre1: entered allmulticast mode [ 839.278582][ T7439] syzkaller0: entered promiscuous mode [ 839.284431][ T7439] syzkaller0: entered allmulticast mode [ 839.718143][ T7474] tipc: Enabling of bearer rejected, failed to enable media [ 840.095503][ T7488] netlink: 'syz.6.20915': attribute type 4 has an invalid length. [ 840.105225][T20818] lo speed is unknown, defaulting to 1000 [ 840.111011][T20818] syz2: Port: 1 Link DOWN [ 840.117282][ T7488] netlink: 'syz.6.20915': attribute type 4 has an invalid length. [ 840.127226][T20818] lo speed is unknown, defaulting to 1000 [ 840.132999][T20818] syz2: Port: 1 Link ACTIVE [ 840.638868][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.6.20932'. [ 840.693350][ T7541] netlink: 'syz.3.20933': attribute type 1 has an invalid length. [ 840.803105][ T7541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 840.811800][ T7541] bond0: (slave bond1): making interface the new active one [ 840.819730][ T7541] bond0: (slave bond1): Enslaving as an active interface with an up link [ 840.841441][ T7600] bond0: (slave gretap0): Enslaving as a backup interface with an up link [ 840.851598][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 840.851617][ T29] audit: type=1326 audit(840.823:46673): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 840.881284][ T29] audit: type=1326 audit(840.823:46674): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 840.904882][ T29] audit: type=1326 audit(840.823:46675): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 840.928210][ T29] audit: type=1326 audit(840.823:46676): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 840.951682][ T29] audit: type=1326 audit(840.823:46677): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 840.975200][ T29] audit: type=1326 audit(840.823:46678): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 840.998607][ T29] audit: type=1326 audit(840.823:46679): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 841.021968][ T29] audit: type=1326 audit(840.823:46680): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 841.045282][ T29] audit: type=1326 audit(840.823:46681): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 841.068655][ T29] audit: type=1326 audit(840.823:46682): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7625 comm="syz.7.20939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 841.281924][ T7658] netlink: 'syz.7.20950': attribute type 10 has an invalid length. [ 841.641612][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20958'. [ 841.646619][ T7689] netlink: 52 bytes leftover after parsing attributes in process `syz.7.20959'. [ 841.686907][ T7695] tipc: Enabling of bearer rejected, failed to enable media [ 841.702074][ T7698] netfs: Couldn't get user pages (rc=-14) [ 842.062575][T25066] lo speed is unknown, defaulting to 1000 [ 842.068349][T25066] syz2: Port: 1 Link DOWN [ 842.093517][ T7726] netlink: 'syz.7.20972': attribute type 1 has an invalid length. [ 842.164778][ T7726] 8021q: adding VLAN 0 to HW filter on device bond14 [ 842.228433][ T7762] macvlan2: entered promiscuous mode [ 842.234077][ T7762] macvlan2: entered allmulticast mode [ 842.295229][ T7762] bond14: entered promiscuous mode [ 842.333311][ T7762] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 842.375482][ T7762] bond14: left promiscuous mode [ 842.515267][ T7783] netlink: 96 bytes leftover after parsing attributes in process `syz.7.20978'. [ 842.980840][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.9.20980'. [ 842.990018][ T7787] netlink: 212 bytes leftover after parsing attributes in process `syz.9.20980'. [ 843.406954][ T7820] loop9: detected capacity change from 0 to 512 [ 843.493385][ T7820] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.20986: bg 0: block 393: padding at end of block bitmap is not set [ 843.508858][ T7820] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 843.524583][ T7820] EXT4-fs (loop9): 2 truncates cleaned up [ 843.531354][ T7820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.756809][ T7829] netlink: 'syz.2.20994': attribute type 4 has an invalid length. [ 844.848388][ T7850] netlink: 'gtp': attribute type 1 has an invalid length. [ 844.856199][ T7850] netlink: 180900 bytes leftover after parsing attributes in process `gtp'. [ 845.708953][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.827873][ T7892] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.21018' sets config #0 [ 845.874984][ T7896] netlink: 'syz.9.21020': attribute type 1 has an invalid length. [ 845.903547][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.927885][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21020'. [ 845.946058][ T7896] bond0 (unregistering): Released all slaves [ 845.983895][ T7937] bond19: entered promiscuous mode [ 845.989079][ T7937] bond19: entered allmulticast mode [ 845.995046][ T7937] 8021q: adding VLAN 0 to HW filter on device bond19 [ 846.005763][ T7937] bond19 (unregistering): Released all slaves [ 846.006184][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 846.006201][ T29] audit: type=1326 audit(845.983:46763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.21023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 846.041111][ T29] audit: type=1326 audit(845.983:46764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.21023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 846.065332][ T29] audit: type=1326 audit(846.003:46765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.21023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 846.090983][ T29] audit: type=1326 audit(846.073:46766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.21023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 846.130267][ T29] audit: type=1326 audit(846.073:46767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.6.21023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 846.207007][ T8049] tipc: Enabling of bearer rejected, already enabled [ 846.207582][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21025'. [ 846.456021][ T8076] bond15: entered promiscuous mode [ 846.461224][ T8076] bond15: entered allmulticast mode [ 846.466687][ T8076] 8021q: adding VLAN 0 to HW filter on device bond15 [ 846.477710][ T8076] bond15 (unregistering): Released all slaves [ 846.492834][ T8111] loop9: detected capacity change from 0 to 128 [ 846.499884][ T29] audit: type=1400 audit(846.473:46768): avc: denied { mounton } for pid=8110 comm="syz.9.21039" path="/791/mnt" dev="tmpfs" ino=4186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 846.540946][ T8111] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 846.573644][ T8111] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 846.755906][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21042'. [ 846.994168][ T29] audit: type=1326 audit(846.973:46769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.6.21043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 847.017355][ T29] audit: type=1326 audit(846.973:46770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.6.21043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 847.040531][ T29] audit: type=1326 audit(846.973:46771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.6.21043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 847.139127][ T29] audit: type=1326 audit(847.093:46772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8202 comm="syz.6.21043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 847.377454][ T8224] tipc: Enabling of bearer rejected, failed to enable media [ 847.975453][ T8271] lo speed is unknown, defaulting to 1000 [ 848.057689][ T8279] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.192341][ T8281] lo speed is unknown, defaulting to 1000 [ 848.242535][ T8279] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.426843][ T8332] loop9: detected capacity change from 0 to 2048 [ 848.487603][ T8279] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.635227][ T8279] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.647364][ T8332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.790179][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.895324][ T1672] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.915242][ T3881] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.939813][ T1672] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.975981][ T1672] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.995396][ T8384] vlan0: entered promiscuous mode [ 849.000544][ T8384] : entered promiscuous mode [ 849.089448][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21082'. [ 849.417806][ T8410] lo speed is unknown, defaulting to 1000 [ 850.200588][ T8450] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 850.298289][ T8450] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 850.366492][ T8450] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 850.495136][ T8450] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 850.862283][ T1672] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 850.961664][T20750] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.034308][T20750] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.046359][T20750] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 851.198117][ T8508] netlink: 'syz.3.21105': attribute type 4 has an invalid length. [ 851.213523][ T8508] netlink: 'syz.3.21105': attribute type 4 has an invalid length. [ 851.394676][ T8509] lo speed is unknown, defaulting to 1000 [ 852.196473][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 852.196490][ T29] audit: type=1326 audit(852.173:46873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 852.238743][ T29] audit: type=1326 audit(852.203:46874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 852.239892][ T8542] netlink: 'syz.7.21117': attribute type 3 has an invalid length. [ 852.261882][ T29] audit: type=1326 audit(852.203:46875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 852.261925][ T29] audit: type=1326 audit(852.203:46876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 852.261958][ T29] audit: type=1326 audit(852.203:46877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 852.338883][ T29] audit: type=1326 audit(852.213:46878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 852.362124][ T29] audit: type=1326 audit(852.213:46879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0dbe95ec23 code=0x7ffc0000 [ 852.384975][ T29] audit: type=1326 audit(852.213:46880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0dbe95d69f code=0x7ffc0000 [ 852.408414][ T29] audit: type=1326 audit(852.273:46881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0dbe95ec77 code=0x7ffc0000 [ 852.431447][ T29] audit: type=1326 audit(852.303:46882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8540 comm="syz.3.21108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0dbe95d550 code=0x7ffc0000 [ 852.533066][ T8557] tipc: Enabled bearer , priority 0 [ 852.554059][ T8555] tipc: Disabling bearer [ 852.741655][ T8579] loop9: detected capacity change from 0 to 512 [ 852.801760][ T8579] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 852.895758][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21121'. [ 852.954800][ T8602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8602 comm=syz.6.21127 [ 853.050144][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.237255][ T8612] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 853.674272][ T8671] sctp: [Deprecated]: syz.7.21145 (pid 8671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 853.674272][ T8671] Use struct sctp_sack_info instead [ 853.769873][ T8677] bridge26: entered allmulticast mode [ 854.856612][ T8694] netlink: 'syz.9.21154': attribute type 13 has an invalid length. [ 854.965418][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21156'. [ 854.974667][ T8699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.21156'. [ 855.218530][ T8728] loop9: detected capacity change from 0 to 2048 [ 855.258793][ T8721] lo speed is unknown, defaulting to 1000 [ 855.337075][ T8728] loop9: unable to read partition table [ 855.345127][ T8728] loop9: partition table beyond EOD, truncated [ 855.351440][ T8728] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 855.452652][ T8777] tipc: Enabling of bearer rejected, failed to enable media [ 855.614976][ T8791] tipc: Enabling of bearer rejected, failed to enable media [ 855.655033][ T8794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=8794 comm=syz.2.21182 [ 855.699939][ T8796] wireguard3: entered promiscuous mode [ 855.705541][ T8796] wireguard3: entered allmulticast mode [ 855.734090][ T8802] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.782317][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21184'. [ 855.802712][ T8802] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.892196][ T8802] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.895364][ T8825] netlink: 'syz.2.21191': attribute type 1 has an invalid length. [ 855.943042][ T8825] bond19: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 855.955260][ T8802] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.982856][ T8825] veth33: entered promiscuous mode [ 855.989934][ T8825] bond19: (slave veth33): Enslaving as a backup interface with a down link [ 856.028917][ T8881] siw: device registration error -23 [ 856.362340][ T8920] netlink: 20 bytes leftover after parsing attributes in process `syz.7.21201'. [ 856.499027][ T8925] lo speed is unknown, defaulting to 1000 [ 856.944071][ T3847] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.964319][ T3847] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.983457][ T3847] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.992668][ T3847] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.211131][ T8968] lo speed is unknown, defaulting to 1000 [ 858.005668][ T9021] SELinux: failed to load policy [ 858.052297][ T9029] netlink: 'syz.7.21220': attribute type 4 has an invalid length. [ 858.086288][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 858.086305][ T29] audit: type=1326 audit(858.063:46993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.115654][ T29] audit: type=1326 audit(858.063:46994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.206581][ T29] audit: type=1326 audit(858.113:46995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.229694][ T29] audit: type=1326 audit(858.113:46996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.252738][ T29] audit: type=1326 audit(858.113:46997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.275818][ T29] audit: type=1326 audit(858.113:46998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.298909][ T29] audit: type=1326 audit(858.113:46999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.321957][ T29] audit: type=1326 audit(858.113:47000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.345031][ T29] audit: type=1326 audit(858.113:47001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.350684][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21226'. [ 858.367924][ T29] audit: type=1326 audit(858.113:47002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9030 comm="syz.9.21222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 858.700821][ T9064] syz_tun: entered allmulticast mode [ 858.722964][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21231'. [ 858.750260][ T9063] syz_tun (unregistering): left allmulticast mode [ 859.833957][ T9094] loop9: detected capacity change from 0 to 512 [ 859.848681][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21240'. [ 859.872467][ T9094] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.672547][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.782302][ T9110] loop9: detected capacity change from 0 to 2048 [ 860.940996][ T9110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.016862][T19183] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 861.039997][T19183] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 861.121679][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.184300][ T9106] Set syz1 is full, maxelem 65536 reached [ 861.204627][ T9126] loop9: detected capacity change from 0 to 128 [ 861.235603][ T9126] loop9: detected capacity change from 0 to 512 [ 861.242287][ T9126] EXT4-fs: Ignoring removed nobh option [ 861.271850][ T9126] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.21247: corrupted inode contents [ 861.272157][ T9134] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 861.301677][ T9126] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.21247: mark_inode_dirty error [ 861.333861][ T9126] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.21247: corrupted inode contents [ 861.348019][ T9126] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.21247: mark_inode_dirty error [ 861.361976][ T9126] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.21247: Failed to acquire dquot type 0 [ 861.373922][ T9126] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21247: corrupted inode contents [ 861.387560][ T9126] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.21247: mark_inode_dirty error [ 861.399524][ T9126] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21247: corrupted inode contents [ 861.408018][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21252'. [ 861.415410][ T9126] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.21247: mark_inode_dirty error [ 861.433370][ T9126] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21247: corrupted inode contents [ 861.454596][ T9126] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 861.463590][ T9126] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21247: corrupted inode contents [ 861.479629][ T9126] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.21247: mark_inode_dirty error [ 861.496570][ T9126] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 861.520827][ T9126] EXT4-fs (loop9): 1 truncate cleaned up [ 861.534963][ T9126] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.553727][ T9155] netlink: 'syz.2.21255': attribute type 10 has an invalid length. [ 861.561818][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21255'. [ 861.589690][ T9155] veth1_vlan: left promiscuous mode [ 861.596602][ T9155] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 861.614247][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.663008][ T9163] tipc: Enabled bearer , priority 0 [ 861.795340][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21263'. [ 862.000949][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21266'. [ 862.052584][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21265'. [ 862.394863][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21268'. [ 862.404080][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21268'. [ 862.433245][ T9228] loop9: detected capacity change from 0 to 512 [ 862.526694][ T9228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.536726][ T9234] netlink: 'syz.3.21271': attribute type 1 has an invalid length. [ 862.566523][ T9234] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 862.585721][ T9228] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.21269: corrupted inode contents [ 862.604372][ T9228] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #2: comm syz.9.21269: mark_inode_dirty error [ 862.616525][ T9234] veth1: entered promiscuous mode [ 862.629134][ T9228] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #2: comm syz.9.21269: corrupted inode contents [ 862.630255][ T9234] bond2: (slave veth1): Enslaving as a backup interface with a down link [ 862.650678][ T9228] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #2: comm syz.9.21269: mark_inode_dirty error [ 862.729100][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.776826][ T9288] lo speed is unknown, defaulting to 1000 [ 862.804643][ T9307] netlink: 'syz.6.21277': attribute type 30 has an invalid length. [ 862.813290][ T9316] loop9: detected capacity change from 0 to 1024 [ 862.837079][ T9316] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 862.917492][ T9325] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm syz.9.21279: lblock 0 mapped to illegal pblock 0 (length 6) [ 862.961319][ T9325] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 862.973861][ T9325] EXT4-fs (loop9): This should not happen!! Data will be lost [ 862.973861][ T9325] [ 863.035330][ T9348] netlink: 'syz.3.21291': attribute type 10 has an invalid length. [ 863.075610][ T9348] batman_adv: batadv0: Adding interface: veth1_vlan [ 863.082309][ T9348] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 863.108376][ T9348] batman_adv: batadv0: Interface activated: veth1_vlan [ 863.220614][ T9374] netlink: 'syz.7.21286': attribute type 1 has an invalid length. [ 863.330664][ T9396] bond15: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 863.468328][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 863.468377][ T29] audit: type=1400 audit(863.443:47057): avc: denied { read write } for pid=9414 comm="syz.3.21289" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 863.498363][ T29] audit: type=1400 audit(863.443:47058): avc: denied { open } for pid=9414 comm="syz.3.21289" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 863.551815][ T9374] veth39: entered promiscuous mode [ 863.558756][ T9374] bond15: (slave veth39): Enslaving as a backup interface with a down link [ 864.337995][ T3847] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:38: lblock 8 mapped to illegal pblock 8 (length 8) [ 864.364505][ T3847] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 864.377028][ T3847] EXT4-fs (loop9): This should not happen!! Data will be lost [ 864.377028][ T3847] [ 864.437525][ T3847] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 864.473765][ T3847] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 864.486598][ T3847] EXT4-fs (loop9): This should not happen!! Data will be lost [ 864.486598][ T3847] [ 864.496364][ T3847] EXT4-fs (loop9): Total free blocks count 0 [ 864.502415][ T3847] EXT4-fs (loop9): Free/Dirty block details [ 864.508326][ T3847] EXT4-fs (loop9): free_blocks=4293918720 [ 864.528759][ T9440] lo speed is unknown, defaulting to 1000 [ 864.558071][ T29] audit: type=1326 audit(864.533:47059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.581235][ T29] audit: type=1326 audit(864.533:47060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.604425][ T29] audit: type=1326 audit(864.533:47061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.708731][ T9451] netlink: 'syz.7.21298': attribute type 10 has an invalid length. [ 864.716858][ T9451] __nla_validate_parse: 19 callbacks suppressed [ 864.716873][ T9451] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21298'. [ 864.724601][ T9463] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 864.742118][ T29] audit: type=1326 audit(864.613:47062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.765221][ T29] audit: type=1326 audit(864.613:47063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.788324][ T29] audit: type=1326 audit(864.613:47064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.796792][ T9451] veth1_vlan: left promiscuous mode [ 864.811460][ T29] audit: type=1326 audit(864.613:47065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.839810][ T29] audit: type=1326 audit(864.613:47066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9450 comm="syz.3.21299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0dbe95ebe9 code=0x7ffc0000 [ 864.874280][ T9451] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 865.037005][ T9480] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 865.043568][ T9480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 865.051368][ T9480] vhci_hcd vhci_hcd.0: Device attached [ 865.428933][ T9489] loop9: detected capacity change from 0 to 512 [ 865.485611][ T9489] EXT4-fs (loop9): orphan cleanup on readonly fs [ 865.530418][ T9489] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.21303: bad orphan inode 13 [ 865.598059][ T9489] ext4_test_bit(bit=12, block=18) = 1 [ 865.603589][ T9489] is_bad_inode(inode)=0 [ 865.607758][ T9489] NEXT_ORPHAN(inode)=2130706432 [ 865.612708][ T9489] max_ino=32 [ 865.615905][ T9489] i_nlink=1 [ 865.668350][ T9489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 865.730319][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.745361][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.922876][T31408] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 865.931125][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21304'. [ 866.002830][ T9483] vhci_hcd: connection reset by peer [ 866.008326][ T37] vhci_hcd: stop threads [ 866.012749][ T37] vhci_hcd: release socket [ 866.017172][ T37] vhci_hcd: disconnect device [ 866.300128][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.055678][ T9543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21316'. [ 867.065265][ T9540] loop9: detected capacity change from 0 to 512 [ 867.065310][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21316'. [ 867.083424][ T9544] tipc: Enabling of bearer rejected, already enabled [ 867.187932][ T9540] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 867.203472][ T9549] siw: device registration error -23 [ 867.273246][ T9540] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.21312: Failed to acquire dquot type 1 [ 867.302530][ T9540] EXT4-fs (loop9): 1 truncate cleaned up [ 867.312605][ T9540] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.332580][ T9540] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.392828][ T9555] bridge0: entered promiscuous mode [ 867.428742][ T9555] bridge0: port 1(macvtap1) entered blocking state [ 867.435372][ T9555] bridge0: port 1(macvtap1) entered disabled state [ 867.516327][ T9555] macvtap1: entered allmulticast mode [ 867.521918][ T9555] bridge0: entered allmulticast mode [ 867.574709][ T9555] macvtap1: left allmulticast mode [ 867.579950][ T9555] bridge0: left allmulticast mode [ 867.898055][ T9555] bridge0: left promiscuous mode [ 867.936750][ T9536] Set syz1 is full, maxelem 65536 reached [ 868.127847][ T9581] netlink: 568 bytes leftover after parsing attributes in process `syz.7.21324'. [ 868.226666][ T9588] netlink: 'syz.7.21326': attribute type 30 has an invalid length. [ 868.243136][ T9592] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 868.270465][ T9593] bridge0: entered promiscuous mode [ 868.282536][ T9593] macsec1: entered promiscuous mode [ 868.290663][ T9600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21328'. [ 868.303480][ T9593] bridge0: left promiscuous mode [ 868.402033][ T9592] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 868.451045][ T9610] Falling back ldisc for ttyS3. [ 868.456844][ T9592] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 868.483957][ T9622] bridge27: entered allmulticast mode [ 868.643707][ T9592] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 869.666553][ T3882] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.722029][ T3882] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.780381][ T3882] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.825696][ T3882] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 869.950873][ T9675] netlink: 'syz.7.21341': attribute type 1 has an invalid length. [ 869.984440][ T9675] bond16: entered promiscuous mode [ 869.989830][ T9675] 8021q: adding VLAN 0 to HW filter on device bond16 [ 870.021680][ T9675] 8021q: adding VLAN 0 to HW filter on device bond17 [ 870.030751][ T9675] bond16: (slave bond17): making interface the new active one [ 870.038261][ T9675] bond17: entered promiscuous mode [ 870.045724][ T9675] bond16: (slave bond17): Enslaving as an active interface with an up link [ 870.073266][ T9675] bond16: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 870.085822][ T9675] bond16: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 870.149453][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 870.149525][ T29] audit: type=1326 audit(870.123:47170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.179300][ T29] audit: type=1326 audit(870.133:47171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.202729][ T29] audit: type=1326 audit(870.133:47172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.225798][ T29] audit: type=1326 audit(870.133:47173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f121f82ec23 code=0x7ffc0000 [ 870.248828][ T29] audit: type=1326 audit(870.133:47174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f121f82ec23 code=0x7ffc0000 [ 870.271737][ T29] audit: type=1326 audit(870.133:47175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.294718][ T29] audit: type=1326 audit(870.133:47176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.317831][ T29] audit: type=1326 audit(870.133:47177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.341147][ T29] audit: type=1326 audit(870.133:47178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.364250][ T29] audit: type=1326 audit(870.133:47179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9754 comm="syz.7.21342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 870.901802][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21350'. [ 871.030801][T31408] usb 7-1: enqueue for inactive port 0 [ 871.062077][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21355'. [ 871.100922][T31408] vhci_hcd: vhci_device speed not set [ 871.150075][ T9791] netlink: 'syz.7.21358': attribute type 13 has an invalid length. [ 871.476352][ T9807] netlink: 'syz.2.21364': attribute type 10 has an invalid length. [ 871.484879][ T9807] dummy0: left promiscuous mode [ 871.521656][ T9817] netlink: 'syz.2.21367': attribute type 10 has an invalid length. [ 872.565412][ T9868] netlink: 'syz.2.21377': attribute type 3 has an invalid length. [ 872.782667][ T9876] lo speed is unknown, defaulting to 1000 [ 872.859463][ T9823] syz.7.21368 (9823) used greatest stack depth: 6112 bytes left [ 873.137592][ T9911] loop9: detected capacity change from 0 to 2048 [ 873.185328][ T9911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 873.227868][ T9915] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 873.330772][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 873.430877][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21387'. [ 873.490242][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21387'. [ 873.521368][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.9.21388'. [ 873.530515][ T9934] netlink: 28 bytes leftover after parsing attributes in process `syz.9.21388'. [ 873.821799][ T9953] netlink: 'syz.6.21394': attribute type 13 has an invalid length. [ 875.193049][ T9946] lo speed is unknown, defaulting to 1000 [ 875.358485][ T9993] lo speed is unknown, defaulting to 1000 [ 875.367834][ T9977] lo speed is unknown, defaulting to 1000 [ 875.628182][T10009] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.817396][T10009] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 875.944581][T10009] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 876.147610][T10009] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 876.405931][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 876.405949][ T29] audit: type=1400 audit(876.383:47332): avc: denied { accept } for pid=10096 comm="syz.3.21410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 876.445022][T10097] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 876.455734][ T29] audit: type=1400 audit(876.443:47333): avc: denied { relabelto } for pid=10096 comm="syz.3.21410" name="161" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 876.467627][ T3835] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.482627][ T29] audit: type=1400 audit(876.443:47334): avc: denied { associate } for pid=10096 comm="syz.3.21410" name="161" dev="tmpfs" ino=853 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 876.501407][T10097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21410'. [ 876.520511][ T29] audit: type=1400 audit(876.483:47335): avc: denied { write } for pid=10096 comm="syz.3.21410" name="161" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 876.574353][ T3835] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.597829][ T3835] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.616718][ T3824] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.632155][ T29] audit: type=1400 audit(876.603:47336): avc: denied { remove_name } for pid=4209 comm="syz-executor" name="binderfs" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 876.659563][ T29] audit: type=1400 audit(876.613:47337): avc: denied { rmdir } for pid=4209 comm="syz-executor" name="161" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 876.808843][ T29] audit: type=1326 audit(876.773:47338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.6.21418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 876.832894][ T29] audit: type=1326 audit(876.783:47339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.6.21418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 876.915721][ T29] audit: type=1326 audit(876.833:47340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.6.21418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 876.938930][ T29] audit: type=1326 audit(876.833:47341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10123 comm="syz.6.21418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 877.391589][T10140] lo speed is unknown, defaulting to 1000 [ 878.133685][T10175] all: renamed from bridge_slave_0 [ 878.159992][T10166] lo speed is unknown, defaulting to 1000 [ 878.565409][T10196] lo speed is unknown, defaulting to 1000 [ 878.637081][T10229] atomic_op ffff88812a588d28 conn xmit_atomic 0000000000000000 [ 878.806561][T10223] lo speed is unknown, defaulting to 1000 [ 878.840194][T10225] lo speed is unknown, defaulting to 1000 [ 879.746710][T10306] netlink: 'syz.2.21437': attribute type 30 has an invalid length. [ 881.094145][T25066] Process accounting resumed [ 881.188170][T10332] loop9: detected capacity change from 0 to 2048 [ 881.223498][T10332] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.289648][T10332] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 881.520799][T10342] lo speed is unknown, defaulting to 1000 [ 881.865484][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 881.865500][ T29] audit: type=1326 audit(881.843:47384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 881.975895][ T29] audit: type=1326 audit(881.873:47385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 881.999015][ T29] audit: type=1326 audit(881.883:47386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.022191][ T29] audit: type=1326 audit(881.883:47387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.045356][ T29] audit: type=1326 audit(881.883:47388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.068422][ T29] audit: type=1326 audit(881.883:47389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.091550][ T29] audit: type=1326 audit(881.883:47390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.114671][ T29] audit: type=1326 audit(881.883:47391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.137742][ T29] audit: type=1326 audit(881.883:47392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.177845][T10400] tipc: Enabling of bearer rejected, already enabled [ 882.205622][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21456'. [ 882.217083][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21456'. [ 882.233011][ T29] audit: type=1326 audit(882.123:47393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.9.21451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 882.259175][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21456'. [ 882.270512][T10407] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21456'. [ 882.572607][T10428] loop9: detected capacity change from 0 to 512 [ 882.595495][T10428] EXT4-fs: Ignoring removed nobh option [ 882.652347][T10428] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.21461: corrupted inode contents [ 882.680495][T10428] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.21461: mark_inode_dirty error [ 882.718609][T10428] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.21461: corrupted inode contents [ 882.747959][T10428] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.21461: mark_inode_dirty error [ 882.768823][T10428] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.21461: Failed to acquire dquot type 0 [ 882.786366][T10438] syzkaller0: entered promiscuous mode [ 882.792012][T10438] syzkaller0: entered allmulticast mode [ 882.804937][T10428] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21461: corrupted inode contents [ 882.831584][T10428] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.21461: mark_inode_dirty error [ 882.857590][T10428] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21461: corrupted inode contents [ 882.881262][T10428] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.21461: mark_inode_dirty error [ 882.908141][T10428] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21461: corrupted inode contents [ 882.933405][T10428] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 882.953957][T10428] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.21461: corrupted inode contents [ 882.976916][T10428] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.21461: mark_inode_dirty error [ 882.993240][T10428] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 883.012194][T10428] EXT4-fs (loop9): 1 truncate cleaned up [ 883.018487][T10428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.094505][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.479856][T10484] netlink: 64 bytes leftover after parsing attributes in process `syz.7.21477'. [ 883.789663][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21481'. [ 883.824730][T10502] netlink: 'syz.9.21483': attribute type 10 has an invalid length. [ 883.859140][T10502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.880451][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21494'. [ 883.882724][T10502] batadv0: entered promiscuous mode [ 884.061046][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.082035][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.209815][T10532] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 884.272865][T10532] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 884.331827][T10532] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 884.382749][T10532] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 884.466138][ T3862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 884.493359][ T3862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 884.516038][ T3862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 884.544828][ T3862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 886.153030][T10588] netlink: 'syz.2.21506': attribute type 13 has an invalid length. [ 886.308137][T10588] tipc: Resetting bearer [ 886.420440][ T3835] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 886.440471][ T3835] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 886.450377][ T3835] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 886.471203][ T3835] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 886.800132][T10625] netlink: 'syz.2.21516': attribute type 4 has an invalid length. [ 886.814181][T10625] netlink: 'syz.2.21516': attribute type 4 has an invalid length. [ 887.012344][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 887.012360][ T29] audit: type=1326 audit(886.993:47481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.053550][ T29] audit: type=1326 audit(887.023:47482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.076743][ T29] audit: type=1326 audit(887.023:47483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.099993][ T29] audit: type=1326 audit(887.023:47484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.123107][ T29] audit: type=1326 audit(887.033:47485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.146242][ T29] audit: type=1326 audit(887.033:47486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.169343][ T29] audit: type=1326 audit(887.033:47487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.192383][ T29] audit: type=1326 audit(887.033:47488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.279281][T10636] SELinux: Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped). [ 887.294238][ T29] audit: type=1326 audit(887.193:47489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.317506][ T29] audit: type=1326 audit(887.193:47490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.7.21520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 887.397768][T10647] netlink: 36 bytes leftover after parsing attributes in process `syz.9.21522'. [ 887.406877][T10647] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21522'. [ 887.415928][T10647] netlink: 36 bytes leftover after parsing attributes in process `syz.9.21522'. [ 887.447830][T10647] netlink: 36 bytes leftover after parsing attributes in process `syz.9.21522'. [ 888.008420][T10660] IPv6: Can't replace route, no match found [ 888.215970][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21532'. [ 888.546355][T10691] loop9: detected capacity change from 0 to 128 [ 888.676155][T10699] lo speed is unknown, defaulting to 1000 [ 891.390677][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21553'. [ 891.451748][T10772] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.480036][T10774] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 891.524633][T10772] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.614766][T10772] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.662974][T10790] netlink: 14 bytes leftover after parsing attributes in process `syz.2.21559'. [ 891.689226][T10772] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.802469][T10801] netlink: 40 bytes leftover after parsing attributes in process `syz.6.21561'. [ 891.812401][T10790] hsr_slave_0: left promiscuous mode [ 891.836694][T10790] hsr_slave_1: left promiscuous mode [ 891.905437][ T54] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.925375][T10799] lo speed is unknown, defaulting to 1000 [ 891.936574][ T54] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.964457][ T54] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.015844][ T54] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.063540][T10842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21563'. [ 892.422007][T10778] lo speed is unknown, defaulting to 1000 [ 892.494356][T10854] lo speed is unknown, defaulting to 1000 [ 892.767634][T10864] netlink: 'syz.6.21569': attribute type 4 has an invalid length. [ 892.777766][T10864] netlink: 'syz.6.21569': attribute type 4 has an invalid length. [ 892.787786][T20818] lo speed is unknown, defaulting to 1000 [ 892.793766][T20818] syz2: Port: 1 Link ACTIVE [ 893.246617][T10926] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 893.296712][T10926] batman_adv: batadv0: Removing interface: veth1_vlan [ 893.521665][T10954] loop9: detected capacity change from 0 to 1024 [ 893.528505][T10954] EXT4-fs: Ignoring removed orlov option [ 893.543267][T10954] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.896734][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 893.896752][ T29] audit: type=1326 audit(893.873:47520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 893.926317][ T29] audit: type=1326 audit(893.873:47521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 893.949574][ T29] audit: type=1326 audit(893.873:47522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 893.972852][ T29] audit: type=1326 audit(893.873:47523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 893.995967][ T29] audit: type=1326 audit(893.873:47524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 894.019208][ T29] audit: type=1326 audit(893.873:47525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 894.042400][ T29] audit: type=1326 audit(893.883:47526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 894.065629][ T29] audit: type=1326 audit(893.883:47527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 894.088983][ T29] audit: type=1326 audit(893.883:47528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 894.112446][ T29] audit: type=1326 audit(893.883:47529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10976 comm="syz.7.21586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f121f830b07 code=0x7ffc0000 [ 894.199351][T10985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.420943][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.593180][T11005] syzkaller0: entered promiscuous mode [ 894.598797][T11005] syzkaller0: entered allmulticast mode [ 894.772528][T11023] netlink: 277 bytes leftover after parsing attributes in process `syz.2.21601'. [ 894.784308][T11023] futex_wake_op: syz.2.21601 tries to shift op by -1; fix this program [ 894.946455][T10990] Set syz1 is full, maxelem 65536 reached [ 895.048338][T11034] lo speed is unknown, defaulting to 1000 [ 895.185491][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21608'. [ 895.206102][T11060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21608'. [ 895.286819][T11066] netlink: 'syz.7.21609': attribute type 4 has an invalid length. [ 895.296450][T11066] netlink: 'syz.7.21609': attribute type 4 has an invalid length. [ 895.510114][T11082] lo speed is unknown, defaulting to 1000 [ 895.524220][T11089] loop9: detected capacity change from 0 to 128 [ 895.548615][T11096] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21620'. [ 895.559414][T11089] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 895.589478][T11111] 9pnet_fd: Insufficient options for proto=fd [ 895.613593][T11096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21620'. [ 895.632456][T11111] 9pnet_fd: Insufficient options for proto=fd [ 895.664975][T19183] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 895.726534][T11140] tipc: New replicast peer: 255.255.255.83 [ 895.732886][T11140] tipc: Enabled bearer , priority 10 [ 896.862222][T11185] loop9: detected capacity change from 0 to 512 [ 896.881415][T11185] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 896.910192][T11185] EXT4-fs (loop9): 1 truncate cleaned up [ 896.923918][T11185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.974472][T11185] EXT4-fs error (device loop9): ext4_ext_precache:632: inode #15: comm syz.9.21635: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 897.048870][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.104376][T11210] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21639'. [ 897.167878][T11210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11210 comm=syz.9.21639 [ 897.477345][T11242] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21646'. [ 897.504276][T11242] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11242 comm=syz.6.21646 [ 897.574031][T11262] ------------[ cut here ]------------ [ 897.579619][T11262] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 897.603974][T11262] WARNING: CPU: 1 PID: 11262 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 897.614462][T11262] Modules linked in: [ 897.618513][T11262] CPU: 1 UID: 0 PID: 11262 Comm: syz.9.21649 Not tainted syzkaller #0 PREEMPT(voluntary) [ 897.628514][T11262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 897.638764][T11262] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 897.645371][T11262] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 7f ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 897.665121][T11262] RSP: 0018:ffffc90001ac7440 EFLAGS: 00010292 [ 897.671405][T11262] RAX: 4868b31c42572900 RBX: ffff88814b0369a8 RCX: 0000000000080000 [ 897.679636][T11262] RDX: ffffc90003e94000 RSI: 0000000000012875 RDI: 0000000000012876 [ 897.687692][T11262] RBP: fffffffe00000030 R08: 0001c90001ac727f R09: 0000000000000000 [ 897.695711][T11262] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88814b036968 [ 897.703869][T11262] R13: ffff88814dc78000 R14: ffff88814dc78000 R15: ffff88814b0369a0 [ 897.711882][T11262] FS: 00007fe2742ff6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 897.720984][T11262] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 897.727705][T11262] CR2: 0000200000004000 CR3: 0000000137a8e000 CR4: 00000000003506f0 [ 897.735831][T11262] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000006 [ 897.744013][T11262] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 897.752243][T11262] Call Trace: [ 897.755741][T11262] [ 897.758673][T11262] reg_set_min_max+0x215/0x260 [ 897.763620][T11262] check_cond_jmp_op+0x1080/0x16e0 [ 897.768854][T11262] do_check+0x332a/0x7a10 [ 897.773318][T11262] do_check_common+0xc3a/0x12a0 [ 897.778180][T11262] bpf_check+0x942b/0xd9e0 [ 897.782719][T11262] ? __rcu_read_unlock+0x4f/0x70 [ 897.787665][T11262] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 897.793759][T11262] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 897.799421][T11262] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 897.805383][T11262] ? pcpu_block_update+0x24e/0x3b0 [ 897.810610][T11262] ? _find_next_zero_bit+0x64/0xa0 [ 897.815875][T11262] ? pcpu_block_update+0x24e/0x3b0 [ 897.821102][T11262] ? _find_next_zero_bit+0x64/0xa0 [ 897.826218][T11262] ? pcpu_block_refresh_hint+0x157/0x170 [ 897.831972][T11262] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 897.838085][T11262] ? css_rstat_updated+0xb7/0x240 [ 897.843207][T11262] ? __rcu_read_unlock+0x4f/0x70 [ 897.848150][T11262] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 897.854012][T11262] ? should_fail_ex+0x30/0x280 [ 897.858780][T11262] ? selinux_bpf_prog_load+0x36/0xf0 [ 897.864078][T11262] ? should_failslab+0x8c/0xb0 [ 897.868933][T11262] ? __kmalloc_cache_noprof+0x189/0x320 [ 897.874586][T11262] ? selinux_bpf_prog_load+0xbf/0xf0 [ 897.879933][T11262] ? security_bpf_prog_load+0x2c/0xa0 [ 897.885334][T11262] bpf_prog_load+0xedd/0x1070 [ 897.890082][T11262] ? security_bpf+0x2b/0x90 [ 897.894618][T11262] __sys_bpf+0x462/0x7b0 [ 897.898919][T11262] __x64_sys_bpf+0x41/0x50 [ 897.903367][T11262] x64_sys_call+0x2aea/0x2ff0 [ 897.908052][T11262] do_syscall_64+0xd2/0x200 [ 897.912599][T11262] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 897.918680][T11262] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 897.924463][T11262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.930401][T11262] RIP: 0033:0x7fe27589ebe9 [ 897.934841][T11262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 897.954592][T11262] RSP: 002b:00007fe2742ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 897.963055][T11262] RAX: ffffffffffffffda RBX: 00007fe275ad5fa0 RCX: 00007fe27589ebe9 [ 897.971070][T11262] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 897.979140][T11262] RBP: 00007fe275921e19 R08: 0000000000000000 R09: 0000000000000000 [ 897.987311][T11262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.995344][T11262] R13: 00007fe275ad6038 R14: 00007fe275ad5fa0 R15: 00007ffe6c4810d8 [ 898.003342][T11262] [ 898.006443][T11262] ---[ end trace 0000000000000000 ]--- [ 898.179991][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21654'. [ 898.451877][ T3405] IPVS: starting estimator thread 0... [ 898.580480][T11282] IPVS: using max 2400 ests per chain, 120000 per kthread [ 898.814559][T11288] lo speed is unknown, defaulting to 1000 [ 898.885877][T11300] netlink: 'syz.3.21663': attribute type 4 has an invalid length. [ 898.937580][T11300] dvmrp1: entered allmulticast mode [ 899.242289][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.251254][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.616709][T11352] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21671'. [ 899.678190][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 899.678204][ T29] audit: type=1326 audit(899.653:47614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.783813][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21673'. [ 899.793278][ T29] audit: type=1326 audit(899.693:47615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.816644][ T29] audit: type=1326 audit(899.693:47616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.839743][ T29] audit: type=1326 audit(899.693:47617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.862934][ T29] audit: type=1326 audit(899.693:47618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.874860][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21673'. [ 899.886232][ T29] audit: type=1326 audit(899.693:47619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.918357][ T29] audit: type=1326 audit(899.693:47620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.941447][ T29] audit: type=1326 audit(899.693:47621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.964646][ T29] audit: type=1326 audit(899.693:47622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 899.987800][ T29] audit: type=1326 audit(899.693:47623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11354 comm="syz.2.21672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 900.413251][T11379] netlink: 'syz.6.21677': attribute type 4 has an invalid length. [ 900.434305][ T2957] lo speed is unknown, defaulting to 1000 [ 900.440166][ T2957] syz2: Port: 1 Link DOWN [ 900.456319][T11379] netlink: 'syz.6.21677': attribute type 4 has an invalid length. [ 900.478963][ T2957] lo speed is unknown, defaulting to 1000 [ 900.484772][ T2957] syz2: Port: 1 Link ACTIVE [ 900.558743][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21679'. [ 901.152605][T11409] sch_fq: defrate 4294967295 ignored. [ 901.733714][T11446] loop9: detected capacity change from 0 to 512 [ 901.741174][T11446] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 901.752567][T11446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 902.587359][T11461] 8021q: adding VLAN 0 to HW filter on device .` [ 902.599723][T11461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 902.647966][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.684510][T11470] netlink: 'syz.2.21705': attribute type 4 has an invalid length. [ 902.716649][T11476] 9pnet: p9_errstr2errno: server reported unknown error [ 902.733061][T11470] dvmrp1: entered allmulticast mode [ 902.759253][T11488] loop9: detected capacity change from 0 to 512 [ 902.778074][T11488] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 902.803167][T11488] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.21710: invalid indirect mapped block 4294967295 (level 0) [ 902.835859][T11488] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.21710: invalid indirect mapped block 4294967295 (level 1) [ 902.855769][T11501] netlink: 76 bytes leftover after parsing attributes in process `syz.7.21712'. [ 902.867998][T11488] EXT4-fs (loop9): 1 orphan inode deleted [ 902.873848][T11488] EXT4-fs (loop9): 1 truncate cleaned up [ 902.881814][T11488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.941958][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.974627][T11510] netlink: 256 bytes leftover after parsing attributes in process `syz.9.21714'. [ 903.028423][T11523] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.069276][T11506] lo speed is unknown, defaulting to 1000 [ 903.092394][T11523] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.174431][T11523] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.242774][T11523] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.339647][ T3835] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.378357][ T3835] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.410305][ T3835] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.428886][ T3835] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.464790][T11565] sch_fq: defrate 4294967295 ignored. [ 904.181893][T11582] serio: Serial port ptm0 [ 904.476946][T11608] netlink: 'syz.3.21731': attribute type 10 has an invalid length. [ 904.534011][T11610] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21732'. [ 904.890700][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.7.21734'. [ 904.900163][T11614] netlink: 84 bytes leftover after parsing attributes in process `syz.7.21734'. [ 904.962302][T11608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.150392][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 905.150456][ T29] audit: type=1326 audit(905.123:48220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.179741][ T29] audit: type=1326 audit(905.123:48221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.202832][ T29] audit: type=1326 audit(905.123:48222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.225968][ T29] audit: type=1326 audit(905.123:48223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.249019][ T29] audit: type=1326 audit(905.123:48224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.637537][ T29] audit: type=1326 audit(905.473:48225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.660881][ T29] audit: type=1326 audit(905.473:48226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.684121][ T29] audit: type=1326 audit(905.473:48227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.707226][ T29] audit: type=1326 audit(905.473:48228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.785398][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21739'. [ 905.838255][ T29] audit: type=1326 audit(905.723:48229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11617 comm="syz.7.21736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 905.961964][T11627] bridge0: port 1(macvlan2) entered blocking state [ 905.968534][T11627] bridge0: port 1(macvlan2) entered disabled state [ 905.977065][T11627] macvlan2: entered allmulticast mode [ 905.982507][T11627] bridge0: entered allmulticast mode [ 906.002597][T11627] macvlan2: left allmulticast mode [ 906.007852][T11627] bridge0: left allmulticast mode [ 907.710066][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21747'. [ 907.719146][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21747'. [ 907.818076][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21747'. [ 907.827152][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21747'. [ 908.055636][T11665] syzkaller0: entered promiscuous mode [ 908.061227][T11665] syzkaller0: entered allmulticast mode [ 908.167650][T11671] netlink: 'syz.6.21751': attribute type 10 has an invalid length. [ 908.405580][T11675] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.484252][T11675] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.575254][T11675] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.662533][T11675] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.878402][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21769'. [ 908.922800][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21769'. [ 909.063382][T11714] netlink: 'syz.7.21761': attribute type 1 has an invalid length. [ 909.071479][T11714] netlink: 'syz.7.21761': attribute type 4 has an invalid length. [ 909.079366][T11714] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.21761'. [ 909.195816][T11714] netlink: 'syz.7.21761': attribute type 1 has an invalid length. [ 909.203946][T11714] netlink: 'syz.7.21761': attribute type 4 has an invalid length. [ 909.271420][T11716] tipc: Enabling of bearer rejected, failed to enable media [ 909.396327][ T3847] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.416691][ T3847] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.434883][ T3847] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.456209][ T3847] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.604709][T11752] loop9: detected capacity change from 0 to 128 [ 909.677132][T11752] syz.9.21772: attempt to access beyond end of device [ 909.677132][T11752] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 909.728055][T11749] lo speed is unknown, defaulting to 1000 [ 909.921849][T11805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11805 comm=syz.6.21780 [ 910.130007][T11824] loop9: detected capacity change from 0 to 512 [ 910.280201][T11824] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 910.334881][T11845] tipc: Enabling of bearer rejected, already enabled [ 910.396922][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 910.396957][ T29] audit: type=1400 audit(910.373:48302): avc: denied { append } for pid=11823 comm="syz.9.21782" name="file2" dev="loop9" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 910.478997][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.492892][T11861] __nla_validate_parse: 2 callbacks suppressed [ 910.492911][T11861] netlink: 104 bytes leftover after parsing attributes in process `syz.7.21797'. [ 910.703820][T11877] lo: entered promiscuous mode [ 910.725802][T11877] tunl0: entered promiscuous mode [ 910.770889][T11877] gre0: entered promiscuous mode [ 910.794598][T11877] 0ªî{X¹¦: entered promiscuous mode [ 910.800035][T11877] 0ªî{X¹¦: left allmulticast mode [ 910.830654][T11877] erspan0: entered promiscuous mode [ 910.841171][T11877] ip_vti0: entered promiscuous mode [ 910.846903][T11877] v: entered promiscuous mode [ 910.878010][T11877] sit0: entered promiscuous mode [ 910.903983][T11877] ip6tnl0: entered promiscuous mode [ 910.916707][T11877] ip6gre0: entered promiscuous mode [ 910.960012][T11877] ip6gretap0: entered promiscuous mode [ 910.985330][T11877] nlmon0: entered promiscuous mode [ 911.010706][T11877] caif0: entered promiscuous mode [ 911.015942][T11877] wg1: entered promiscuous mode [ 911.021211][T11877] ªªªªªªÿÿòÿÿÿòÿÿ: entered promiscuous mode [ 911.027248][T11877] ªªªªªªÿÿòÿÿÿòÿÿ: left allmulticast mode [ 911.033162][T11877] veth0_to_bridge: entered promiscuous mode [ 911.039156][T11877] bridge_slave_0: entered promiscuous mode [ 911.045216][T11877] veth1_to_bridge: entered promiscuous mode [ 911.051254][T11877] bridge_slave_1: entered promiscuous mode [ 911.057204][T11877] veth0_to_bond: entered promiscuous mode [ 911.063146][T11877] bond_slave_0: entered promiscuous mode [ 911.068864][T11877] veth0_to_team: entered promiscuous mode [ 911.074844][T11877] team_slave_0: entered promiscuous mode [ 911.080688][T11877] veth1_to_team: entered promiscuous mode [ 911.086522][T11877] team_slave_1: entered promiscuous mode [ 911.092322][T11877] veth0_to_batadv: entered promiscuous mode [ 911.098324][T11877] batadv_slave_0: entered promiscuous mode [ 911.104451][T11877] xfrm0: entered promiscuous mode [ 911.109626][T11877] veth0_to_hsr: entered promiscuous mode [ 911.115445][T11877] hsr_slave_0: entered promiscuous mode [ 911.121274][T11877] veth1_to_hsr: entered promiscuous mode [ 911.127064][T11877] hsr_slave_1: entered promiscuous mode [ 911.132832][T11877] veth1_virt_wifi: entered promiscuous mode [ 911.138852][T11877] veth0_virt_wifi: entered promiscuous mode [ 911.144997][T11877] veth1_vlan: entered promiscuous mode [ 911.150690][T11877] ÿÿÿÿÿÿ: entered promiscuous mode [ 911.155933][T11877] macvlan0: entered promiscuous mode [ 911.161406][T11877] macvlan1: entered promiscuous mode [ 911.166880][T11877] ipvlan0: entered promiscuous mode [ 911.172195][T11877] ipvlan1: entered promiscuous mode [ 911.177647][T11877] geneve0: entered promiscuous mode [ 911.182965][T11877] geneve1: entered promiscuous mode [ 911.188277][T11877] veth2: entered promiscuous mode [ 911.193532][T11877] veth3: entered promiscuous mode [ 911.198657][T11877] @: entered promiscuous mode [ 911.203448][T11877] macsec1: entered promiscuous mode [ 911.208990][T11877] ip6gre1: entered promiscuous mode [ 911.214324][T11877] bond1: entered promiscuous mode [ 911.219475][T11877] gre1: entered promiscuous mode [ 911.224567][T11877] bridge1: entered promiscuous mode [ 911.229865][T11877] bridge2: entered promiscuous mode [ 911.235349][T11877] bridge3: entered promiscuous mode [ 911.240701][T11877] veth4: entered promiscuous mode [ 911.245847][T11877] veth5: entered promiscuous mode [ 911.251008][T11877] sit1: entered promiscuous mode [ 911.256050][T11877] veth6: entered promiscuous mode [ 911.261221][T11877] veth7: entered promiscuous mode [ 911.266394][T11877] team1: entered promiscuous mode [ 911.271632][T11877] veth8: entered promiscuous mode [ 911.276821][T11877] veth9: entered promiscuous mode [ 911.282056][T11877] bridge4: entered promiscuous mode [ 911.287516][T11877] ip6tnl1: entered promiscuous mode [ 911.292823][T11877] team2: entered promiscuous mode [ 911.297980][T11877] veth10: entered promiscuous mode [ 911.303325][T11877] veth11: entered promiscuous mode [ 911.308553][T11877] bridge5: entered promiscuous mode [ 911.313970][T11877] veth12: entered promiscuous mode [ 911.319296][T11877] veth13: entered promiscuous mode [ 911.324547][T11877] veth14: entered promiscuous mode [ 911.329919][T11877] veth15: entered promiscuous mode [ 911.335148][T11877] bridge6: entered promiscuous mode [ 911.340528][T11877] vti60: entered promiscuous mode [ 911.345663][T11877] bridge7: entered promiscuous mode [ 911.350973][T11877] : entered promiscuous mode [ 911.355865][T11877] veth16: entered promiscuous mode [ 911.361103][T11877] veth17: entered promiscuous mode [ 911.366297][T11877] veth18: entered promiscuous mode [ 911.371543][T11877] veth19: entered promiscuous mode [ 911.376791][T11877] veth20: entered promiscuous mode [ 911.382004][T11877] veth21: entered promiscuous mode [ 911.387318][T11877] bridge8: entered promiscuous mode [ 911.392715][T11877] bridge9: entered promiscuous mode [ 911.398091][T11877] bond2: entered promiscuous mode [ 911.403267][T11877] ip6gre2: entered promiscuous mode [ 911.408597][T11877] ip6_vti1: entered promiscuous mode [ 911.413994][T11877] bridge10: entered promiscuous mode [ 911.419450][T11877] ip6_vti2: entered promiscuous mode [ 911.424958][T11877] bridge11: entered promiscuous mode [ 911.430451][T11877] bond3: entered promiscuous mode [ 911.435590][T11877] syztnl2: entered promiscuous mode [ 911.440915][T11877] veth0: entered promiscuous mode [ 911.446026][T11877] veth1: entered promiscuous mode [ 911.451183][T11877] veth22: entered promiscuous mode [ 911.456389][T11877] veth23: entered promiscuous mode [ 911.461605][T11877] bond4: entered promiscuous mode [ 911.466743][T11877] gre2: entered promiscuous mode [ 911.471784][T11877] bridge12: entered promiscuous mode [ 911.477206][T11877] bridge13: entered promiscuous mode [ 911.482768][T11877] bond5: entered promiscuous mode [ 911.487995][T11877] ip6gre3: entered promiscuous mode [ 911.493287][T11877] ip6gre3: left allmulticast mode [ 911.498465][T11877] bridge14: entered promiscuous mode [ 911.503971][T11877] team3: entered promiscuous mode [ 911.509010][T11877] team3: left allmulticast mode [ 911.514062][T11877] ip6tnl2: entered promiscuous mode [ 911.519379][T11877] wireguard0: entered promiscuous mode [ 911.524990][T11877] bridge15: entered promiscuous mode [ 911.530323][ T29] audit: type=1326 audit(911.473:48303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.530559][T11877] bond6: entered promiscuous mode [ 911.553552][ T29] audit: type=1326 audit(911.473:48304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.558620][T11877] : entered promiscuous mode [ 911.581614][ T29] audit: type=1326 audit(911.473:48305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.581652][ T29] audit: type=1326 audit(911.473:48306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.586465][T11877] bridge16: entered promiscuous mode [ 911.609692][ T29] audit: type=1326 audit(911.473:48307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.632886][T11877] ip6tnl3: entered promiscuous mode [ 911.638104][ T29] audit: type=1326 audit(911.483:48308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.661283][T11877] ip6tnl4: entered promiscuous mode [ 911.666353][ T29] audit: type=1326 audit(911.483:48309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.666380][ T29] audit: type=1326 audit(911.483:48310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.689508][T11877] bridge17: entered promiscuous mode [ 911.694747][ T29] audit: type=1326 audit(911.483:48311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.2.21805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 911.770037][T11877] bond7: entered promiscuous mode [ 911.775272][T11877] vlan0: entered promiscuous mode [ 911.780548][T11877] veth24: entered promiscuous mode [ 911.785772][T11877] veth25: entered promiscuous mode [ 911.791034][T11877] bond8: entered promiscuous mode [ 911.796197][T11877] ip6gretap1: entered promiscuous mode [ 911.801803][T11877] veth26: entered promiscuous mode [ 911.807079][T11877] veth27: entered promiscuous mode [ 911.812299][T11877] ip6tnl5: entered promiscuous mode [ 911.817638][T11877] gtp0: entered promiscuous mode [ 911.822926][T11877] bond9: entered promiscuous mode [ 911.828175][T11877] wireguard1: entered promiscuous mode [ 911.833813][T11877] wireguard2: entered promiscuous mode [ 911.839339][T11877] gre3: entered promiscuous mode [ 911.844420][T11877] bridge18: entered promiscuous mode [ 911.849856][T11877] bridge19: entered promiscuous mode [ 911.855358][T11877] gre4: entered promiscuous mode [ 911.860430][T11877] veth28: entered promiscuous mode [ 911.865621][T11877] veth29: entered promiscuous mode [ 911.870846][T11877] bridge20: entered promiscuous mode [ 911.876316][T11877] veth30: entered promiscuous mode [ 911.881582][T11877] veth31: entered promiscuous mode [ 911.886838][T11877] bond10: entered promiscuous mode [ 911.892111][T11877] bridge0: entered promiscuous mode [ 911.897420][T11877] bridge21: entered promiscuous mode [ 911.902992][T11877] ip6gre4: entered promiscuous mode [ 911.908220][T11877] ip6gre4: left allmulticast mode [ 911.913371][T11877] bridge22: entered promiscuous mode [ 911.919243][T11877] vlan1: entered promiscuous mode [ 911.924398][T11877] vlan1: left allmulticast mode [ 911.929321][T11877] ip6gre5: entered promiscuous mode [ 911.934684][T11877] bond11: entered promiscuous mode [ 911.939962][T11877] bridge23: entered promiscuous mode [ 911.945452][T11877] ip6tnl6: entered promiscuous mode [ 911.950763][T11877] ip6gre6: entered promiscuous mode [ 911.955987][T11877] ip6gre6: left allmulticast mode [ 911.961183][T11877] veth32: entered promiscuous mode [ 911.966421][T11877] veth33: entered promiscuous mode [ 911.971702][T11877] veth34: entered promiscuous mode [ 911.977061][T11877] veth35: entered promiscuous mode [ 911.982487][T11877] bridge24: entered promiscuous mode [ 911.987871][T11877] veth36: entered promiscuous mode [ 911.993150][T11877] veth37: entered promiscuous mode [ 911.998414][T11877] syztnl1: entered promiscuous mode [ 912.003777][T11877] bond0: entered promiscuous mode [ 912.008906][T11877] bond12: entered promiscuous mode [ 912.014124][T11877] vti61: entered promiscuous mode [ 912.019459][T11877] bridge25: entered promiscuous mode [ 912.025054][T11877] bond13: entered promiscuous mode [ 912.030313][T11877] bridge26: entered promiscuous mode [ 912.035772][T11877] ip6erspan0: entered promiscuous mode [ 912.041446][T11877] bond14: entered promiscuous mode [ 912.046638][T11877] bond15: entered promiscuous mode [ 912.051846][T11877] ip6gretap2: entered promiscuous mode [ 912.057793][T11877] veth38: entered promiscuous mode [ 912.063231][T11877] bridge27: entered promiscuous mode [ 912.068653][T11877] bridge27: left allmulticast mode [ 912.121050][T11877] bridge28: entered promiscuous mode [ 912.147457][T11877] bridge29: entered promiscuous mode [ 912.160620][T11877] netdevsim netdevsim7 eth0: entered promiscuous mode [ 912.176296][T11877] netdevsim netdevsim7 eth1: entered promiscuous mode [ 912.183961][T11877] netdevsim netdevsim7 eth2: entered promiscuous mode [ 912.191390][T11877] netdevsim netdevsim7 eth3: entered promiscuous mode [ 912.273590][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21818'. [ 912.323319][T11896] lo speed is unknown, defaulting to 1000 [ 912.345700][T11910] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11910 comm=syz.2.21818 [ 912.672426][T11968] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21812'. [ 913.106181][T11987] lo speed is unknown, defaulting to 1000 [ 913.745964][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21837'. [ 914.163075][T12096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.180572][T12096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.462165][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.7.21849'. [ 914.503011][T12132] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 914.527153][T12132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 914.576219][T12147] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12147 comm=syz.7.21849 [ 915.561848][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 915.561880][ T29] audit: type=1326 audit(915.353:48358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe275895ba7 code=0x7ffc0000 [ 915.590998][ T29] audit: type=1326 audit(915.353:48359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe27583adb9 code=0x7ffc0000 [ 915.614242][ T29] audit: type=1326 audit(915.353:48360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe275895ba7 code=0x7ffc0000 [ 915.637292][ T29] audit: type=1326 audit(915.353:48361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe27583adb9 code=0x7ffc0000 [ 915.660332][ T29] audit: type=1326 audit(915.353:48362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe275895ba7 code=0x7ffc0000 [ 915.683344][ T29] audit: type=1326 audit(915.353:48363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe27583adb9 code=0x7ffc0000 [ 915.706460][ T29] audit: type=1326 audit(915.353:48364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe275895ba7 code=0x7ffc0000 [ 915.729710][ T29] audit: type=1326 audit(915.353:48365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe27583adb9 code=0x7ffc0000 [ 915.752779][ T29] audit: type=1326 audit(915.353:48366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe275895ba7 code=0x7ffc0000 [ 915.775859][ T29] audit: type=1326 audit(915.353:48367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12183 comm="syz.9.21861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe27583adb9 code=0x7ffc0000 [ 917.011724][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21876'. [ 917.088700][T12218] lo speed is unknown, defaulting to 1000 [ 917.260584][T12268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21884'. [ 918.246971][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21891'. [ 918.340102][T12290] loop9: detected capacity change from 0 to 512 [ 918.381479][T12290] msdos: Unknown parameter '' [ 919.893941][T12321] netlink: 277 bytes leftover after parsing attributes in process `syz.9.21900'. [ 919.921223][T12321] futex_wake_op: syz.9.21900 tries to shift op by -1; fix this program [ 920.445319][T12282] lo speed is unknown, defaulting to 1000 [ 920.850020][T12326] loop9: detected capacity change from 0 to 512 [ 920.882300][T12326] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 920.911323][T12326] EXT4-fs (loop9): 1 truncate cleaned up [ 920.934970][T12326] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.936518][ T29] kauditd_printk_skb: 267 callbacks suppressed [ 920.936616][ T29] audit: type=1400 audit(920.913:48635): avc: denied { append } for pid=12331 comm="syz.3.21902" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 920.964786][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21902'. [ 920.979498][ T29] audit: type=1400 audit(920.963:48636): avc: denied { write } for pid=12324 comm="syz.9.21911" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 921.022775][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.446512][T12345] loop9: detected capacity change from 0 to 8192 [ 922.289237][T12378] loop9: detected capacity change from 0 to 512 [ 922.312353][T12378] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 922.338498][T12378] EXT4-fs (loop9): 1 truncate cleaned up [ 922.346215][T12378] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 922.385235][ T29] audit: type=1400 audit(922.353:48637): avc: denied { setattr } for pid=12377 comm="syz.9.21909" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 922.507838][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.525626][T12396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21910'. [ 922.698675][T12404] smc: net device bond0 applied user defined pnetid SYZ0 [ 922.754648][T12402] netlink: 48 bytes leftover after parsing attributes in process `syz.7.21913'. [ 922.990183][ T29] audit: type=1326 audit(922.963:48638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.9.21921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 923.019150][ T29] audit: type=1326 audit(922.993:48639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.9.21921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe27589d550 code=0x7ffc0000 [ 923.042519][ T29] audit: type=1326 audit(922.993:48640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.9.21921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 923.065908][ T29] audit: type=1326 audit(922.993:48641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.9.21921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 923.089026][ T29] audit: type=1326 audit(922.993:48642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.9.21921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 923.112021][ T29] audit: type=1326 audit(922.993:48643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.9.21921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 923.135327][ T29] audit: type=1326 audit(922.993:48644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.9.21921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe27589ebe9 code=0x7ffc0000 [ 923.285670][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21929'. [ 923.816051][T12470] netlink: 277 bytes leftover after parsing attributes in process `syz.3.21935'. [ 923.839096][T12470] futex_wake_op: syz.3.21935 tries to shift op by -1; fix this program [ 923.893486][T12472] bond15: (slave ip6gretap2): Releasing backup interface [ 923.900697][T12472] bond15: (slave ip6gretap2): the permanent HWaddr of slave - 82:a6:25:7d:f4:a6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 923.936425][T12472] bond15: (slave veth39): Releasing backup interface [ 923.954249][T12472] bond16: (slave bond17): Releasing backup interface [ 923.962043][T12473] netlink: 'syz.7.21936': attribute type 10 has an invalid length. [ 923.969997][T12473] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21936'. [ 923.999786][T12473] veth1_vlan: left promiscuous mode [ 924.020494][T12473] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 924.261543][T12488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.445868][T12461] lo speed is unknown, defaulting to 1000 [ 924.602596][T12540] loop9: detected capacity change from 0 to 1024 [ 924.609644][T12540] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 926.039952][T12598] lo speed is unknown, defaulting to 1000 [ 926.072807][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 926.072825][ T29] audit: type=1326 audit(926.053:48665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.102473][ T29] audit: type=1326 audit(926.053:48666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.125832][ T29] audit: type=1326 audit(926.053:48667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.148972][ T29] audit: type=1326 audit(926.053:48668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.172053][ T29] audit: type=1326 audit(926.053:48669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.195126][ T29] audit: type=1326 audit(926.053:48670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.218287][ T29] audit: type=1326 audit(926.053:48671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.241408][ T29] audit: type=1326 audit(926.053:48672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.266075][ T29] audit: type=1326 audit(926.243:48673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.320624][ T29] audit: type=1326 audit(926.293:48674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12603 comm="syz.6.21955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0f495ebe9 code=0x7ffc0000 [ 926.340173][T12634] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21958'. [ 926.483248][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21960'. [ 927.346168][T12653] loop9: detected capacity change from 0 to 512 [ 927.397279][T12653] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 927.464837][T12653] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.21975: Failed to acquire dquot type 1 [ 927.492502][T12653] EXT4-fs (loop9): 1 truncate cleaned up [ 927.505387][T12653] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.557993][T12653] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.819889][T12667] loop9: detected capacity change from 0 to 8192 [ 927.866686][T12676] siw: device registration error -23 [ 928.403490][T12685] lo speed is unknown, defaulting to 1000 [ 930.270719][T12724] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21979'. [ 931.449920][T12728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21980'. [ 931.494796][T12733] msdos: Unknown parameter 'ÿ' [ 931.570944][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 931.570962][ T29] audit: type=1400 audit(931.543:48682): avc: denied { getopt } for pid=12727 comm="syz.2.21980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 931.713727][T12772] loop9: detected capacity change from 0 to 128 [ 931.797860][ T29] audit: type=1326 audit(931.773:48683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 931.850519][ T29] audit: type=1326 audit(931.773:48684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 931.873640][ T29] audit: type=1326 audit(931.773:48685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 931.896888][ T29] audit: type=1326 audit(931.773:48686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 931.920139][ T29] audit: type=1326 audit(931.773:48687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 931.943234][ T29] audit: type=1326 audit(931.773:48688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 931.966316][ T29] audit: type=1326 audit(931.773:48689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 931.989488][ T29] audit: type=1326 audit(931.773:48690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 932.012555][ T29] audit: type=1326 audit(931.773:48691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.2.21986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce6198ebe9 code=0x7ffc0000 [ 932.597370][T12797] netlink: 52 bytes leftover after parsing attributes in process `syz.7.21992'. [ 932.606697][T12798] raw_sendmsg: syz.3.21991 forgot to set AF_INET. Fix it! [ 932.727718][T12804] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 932.736958][T12804] netlink: 7 bytes leftover after parsing attributes in process `+}[@'. [ 932.745624][T12804] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 933.468325][T12824] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 933.754363][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.7.22001'. [ 933.862851][T12854] netlink: 'syz.3.22007': attribute type 4 has an invalid length. [ 933.871478][T12854] netlink: 'syz.3.22007': attribute type 4 has an invalid length. [ 933.959723][T12858] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.980143][T12860] netlink: 100 bytes leftover after parsing attributes in process `syz.6.22011'. [ 934.012566][T12858] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.043074][T12867] netlink: 'syz.6.22012': attribute type 1 has an invalid length. [ 934.064175][T12867] 8021q: adding VLAN 0 to HW filter on device bond22 [ 934.080197][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22012'. [ 934.091270][T12867] bond22 (unregistering): Released all slaves [ 934.107851][T12858] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.203669][T12858] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.621946][T12948] lo speed is unknown, defaulting to 1000 [ 935.793913][ T3816] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.967125][ T3878] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.000540][ T3818] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.019208][ T3818] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.033837][T12989] netlink: zone id is out of range [ 936.041085][T12991] netlink: 'syz.9.22020': attribute type 4 has an invalid length. [ 936.054423][T12991] netlink: 'syz.9.22020': attribute type 4 has an invalid length. [ 936.063432][T12989] netlink: zone id is out of range [ 936.068590][T12989] netlink: zone id is out of range [ 936.073782][T12989] netlink: zone id is out of range [ 936.099711][T12989] netlink: zone id is out of range [ 936.108050][T12989] netlink: zone id is out of range [ 936.129751][T12989] netlink: zone id is out of range [ 936.142000][T12989] netlink: zone id is out of range [ 936.148511][T12989] netlink: zone id is out of range [ 936.157851][T12989] netlink: zone id is out of range [ 936.297287][T13013] netlink: 16 bytes leftover after parsing attributes in process `syz.9.22022'. [ 936.501232][T13023] bond19: (slave ip6gretap1): Releasing backup interface [ 936.508336][T13023] bond19: (slave ip6gretap1): the permanent HWaddr of slave - 4a:43:d6:ad:4c:4d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 936.532248][T13024] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 936.541822][T13024] block device autoloading is deprecated and will be removed. [ 936.587636][T13027] netlink: 'syz.2.22024': attribute type 10 has an invalid length. [ 936.595735][T13027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.22024'. [ 936.668833][T13023] bond19: (slave veth33): Releasing backup interface [ 936.899789][T13032] netlink: 'syz.7.22026': attribute type 1 has an invalid length. [ 937.036688][T13033] veth43: entered promiscuous mode [ 937.231639][T13032] 8021q: adding VLAN 0 to HW filter on device bond18 [ 937.262794][T13042] erspan0: left promiscuous mode [ 937.267819][T13042] erspan0: entered allmulticast mode [ 937.316051][T13042] bond18: (slave erspan0): making interface the new active one [ 937.325162][T13042] bond18: (slave erspan0): Enslaving as an active interface with an up link [ 937.385114][T12987] lo speed is unknown, defaulting to 1000 [ 937.781752][T13105] serio: Serial port ptm0 [ 938.571785][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22038'. [ 938.655411][T13149] loop9: detected capacity change from 0 to 8192 [ 939.017588][T13166] bond0: (slave bond21): Releasing backup interface [ 939.061491][T13166] bond21: left promiscuous mode [ 939.082592][T13168] netlink: 'syz.6.22045': attribute type 10 has an invalid length. [ 939.090649][T13168] netlink: 40 bytes leftover after parsing attributes in process `syz.6.22045'. [ 939.233101][T13170] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.22046'. [ 940.735344][T13204] veth1_macvtap: left promiscuous mode [ 940.756587][T13204] macsec0: entered promiscuous mode [ 941.029797][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 941.029812][ T29] audit: type=1401 audit(941.024:48765): op=setxattr invalid_context="" [ 941.208834][T13219] loop9: detected capacity change from 0 to 1024 [ 941.215802][T13219] EXT4-fs: Ignoring removed orlov option [ 941.225284][T13219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.367237][T13225] ================================================================== [ 941.375816][T13225] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 941.383838][T13225] [ 941.386180][T13225] write to 0xffff88811a421300 of 4 bytes by task 13219 on cpu 0: [ 941.393909][T13225] writeback_single_inode+0x14a/0x3e0 [ 941.399329][T13225] sync_inode_metadata+0x5b/0x90 [ 941.404295][T13225] generic_buffers_fsync_noflush+0xd9/0x120 [ 941.410214][T13225] ext4_sync_file+0x1ab/0x690 [ 941.414990][T13225] vfs_fsync_range+0x10a/0x130 [ 941.419782][T13225] ext4_buffered_write_iter+0x34f/0x3c0 [ 941.425364][T13225] ext4_file_write_iter+0x383/0xf00 [ 941.430592][T13225] iter_file_splice_write+0x666/0xa60 [ 941.435998][T13225] direct_splice_actor+0x156/0x2a0 [ 941.441143][T13225] splice_direct_to_actor+0x312/0x680 [ 941.446544][T13225] do_splice_direct+0xda/0x150 [ 941.451342][T13225] do_sendfile+0x380/0x650 [ 941.455808][T13225] __x64_sys_sendfile64+0x105/0x150 [ 941.461052][T13225] x64_sys_call+0x2bb0/0x2ff0 [ 941.465772][T13225] do_syscall_64+0xd2/0x200 [ 941.470318][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.476232][T13225] [ 941.478576][T13225] read to 0xffff88811a421300 of 4 bytes by task 13225 on cpu 1: [ 941.486227][T13225] vfs_fsync_range+0x9b/0x130 [ 941.490943][T13225] ext4_buffered_write_iter+0x34f/0x3c0 [ 941.496528][T13225] ext4_file_write_iter+0x383/0xf00 [ 941.501791][T13225] iter_file_splice_write+0x666/0xa60 [ 941.507196][T13225] direct_splice_actor+0x156/0x2a0 [ 941.512328][T13225] splice_direct_to_actor+0x312/0x680 [ 941.517732][T13225] do_splice_direct+0xda/0x150 [ 941.523021][T13225] do_sendfile+0x380/0x650 [ 941.527478][T13225] __x64_sys_sendfile64+0x105/0x150 [ 941.532706][T13225] x64_sys_call+0x2bb0/0x2ff0 [ 941.537417][T13225] do_syscall_64+0xd2/0x200 [ 941.541972][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.547995][T13225] [ 941.550337][T13225] value changed: 0x00000038 -> 0x00000002 [ 941.556097][T13225] [ 941.558433][T13225] Reported by Kernel Concurrency Sanitizer on: [ 941.564609][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.9.22059 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 941.576145][T13225] Tainted: [W]=WARN [ 941.579969][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 941.590082][T13225] ================================================================== [ 941.829654][ T29] audit: type=1326 audit(941.830:48766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.7.22061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 941.852956][ T29] audit: type=1326 audit(941.830:48767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13217 comm="syz.7.22061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121f82ebe9 code=0x7ffc0000 [ 941.935773][T19183] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.