last executing test programs: 6m9.426855295s ago: executing program 2 (id=504): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 6m9.37438818s ago: executing program 2 (id=506): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x66a8, 0x4000, 0xc, 0x0, 0x0) 6m9.327227763s ago: executing program 2 (id=509): close(0xffffffffffffffff) open$dir(0x0, 0x10400, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0x2, 0x3, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 6m9.297387576s ago: executing program 2 (id=510): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f41e236ffc6234b02e86dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 6m8.971444072s ago: executing program 2 (id=519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioperm(0x21, 0xfffffffffffffffd, 0xffffffffffffffff) 6m8.689028856s ago: executing program 2 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 6m8.679330096s ago: executing program 32 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1m21.8166299s ago: executing program 4 (id=6237): sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m21.286224793s ago: executing program 4 (id=6250): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m21.221487598s ago: executing program 4 (id=6254): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffff7f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}, {@version_u}], [], 0x6b}}) 1m21.125028786s ago: executing program 4 (id=6256): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf952) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') syslog(0x2, &(0x7f0000000440)=""/176, 0xb0) 1m21.07873244s ago: executing program 4 (id=6257): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) fsetxattr$trusted_overlay_upper(r3, 0x0, 0x0, 0x0, 0x0) 1m20.962469999s ago: executing program 4 (id=6259): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m20.94839806s ago: executing program 33 (id=6259): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 1m19.324946702s ago: executing program 3 (id=6284): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) 1m18.406130186s ago: executing program 3 (id=6303): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) 1m18.205614873s ago: executing program 3 (id=6304): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") r0 = io_uring_setup(0x1d48, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 1m18.185382804s ago: executing program 3 (id=6306): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x2) readv(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 1m18.146010588s ago: executing program 3 (id=6307): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 1m18.076362023s ago: executing program 3 (id=6308): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x2, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m18.049710975s ago: executing program 34 (id=6308): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x2, &(0x7f0000fd7ff0)={0x0, 0x3938700}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r5, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m16.8891482s ago: executing program 6 (id=6260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x9, 0x59, 0x1, 0x1000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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") chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f00000001c0), 0x0) 1m16.867456412s ago: executing program 35 (id=6260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x9, 0x59, 0x1, 0x1000}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTJL217dfYq0vfVGjVQy+JE1atQcvioIHBcFLPcYkLbXbRpoIthStIvUoBcGjeBT8CzzpRdST4FXvUijSi9XTyuzOdF+6u0nTTabNfj4w2eeZeWbn+c4zz+4z82QDGFjj2Z8kYmdE/B4Ro/Vsa4Hx+sv1axfm/rl2YS6JavWtv5Jaub+vXZgrihb77cgzE2lE+mkS+zscd+nc+VOzlcrC2Tw/tXz6vamlc+efPXl69sTCiYUzM0ePHjk8/cLzM8/1Jc57srru+3DxwN7X3r78xtyxy+/8/G1SxN8WR5+M99r4RLXa58OVa1dTOhlexQ5D61gZVi1rhqy5Rmr9fzSGotF4o/HqJ6VWDlhX1VyXzRerwCaWRNk1AMpRfNFn97/FsnGjj/Jdfal+A5TFfT1f6luGI83LjLTd3/bTeEQcu/jvV9kS6/McAgCgxffZ+OeZTuO/NO5vKvf/2FqbGxrL51J2R8S9EbEnIu6LqJV9ICIe7HSQHhMC7ZMkN49/0itrj25l2fjvxXxuq3X8V4z+Ymwoz+2qxT+SHD9ZWThUOycREzGyNctP9zjGD6/89nm3bc3jv2zJjl+MBfN6XBne2rrP/Ozy7O3E3OzqxxH7hjvFn9yYCUgiYm9E7FvjMU4+9c2BbttWjr+H1cwzraD6dcST9fa/GG3xF5Le85NT/4vKwqGp4qq42S+/Xnqz2/FvK/4+yNp/e8fr/0b8Y0nzfO3Srbx7vXdf+uOzrvc0k2u6/hsrtuSvH8wuL5+djtiSvF6vdPP6mca+Rb4on8U/cbBz/98djTOxPyKyi/ihiHg4Ih7Jo3s0Ih6LiIM9zsJPLz/+bq8zVHb7z7e1/1hrkbb2byS2RPuazomhUz9+1/qOjeTqPv+O1FIT+Zra59+XveNaTb1u9WoGAACAu1UaETsjSSdvpNN0crL+P/x7YntaWVxafvr44vtn5uu/ERiLkbR40jXa9Dx0Or+tL/IzbfnD+XPjL4a21fKTc4uV+bKDhwG3o0v/z/zpNxqw+fVhHg24S+n/MLj0fxhc+j8Mrg79f1sZ9QA2Xqfv/49KqAew8dr6v2k/GCDu/2Fw6f8wuJr7f1JiPYANtbQtVv6R/GZIVKvV6h1Qjc2TiPSOqEZ/Esk694KdZQd464myP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6478AAAD//+Jk61o=") chdir(&(0x7f00000001c0)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f00000001c0), 0x0) 1m9.183926375s ago: executing program 8 (id=6439): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x591883, 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x20, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m9.167119087s ago: executing program 8 (id=6440): epoll_create(0x200) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000140), r0, 0x0, 0x2, 0x4}}, 0x20) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) getrlimit(0xc73be9cdcf0e8bf5, 0x0) 1m8.887448159s ago: executing program 8 (id=6442): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1m8.62380686s ago: executing program 8 (id=6444): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x20009000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 1m8.466234924s ago: executing program 8 (id=6446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 1m8.2557421s ago: executing program 8 (id=6452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000001900), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0x2c, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x0, 'lblc\x00', 0x16, 0x9, 0x10}, {@rand_addr=0x64010100, 0x4e22, 0x1, 0x4, 0x40, 0x1000}}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m8.213986683s ago: executing program 36 (id=6452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000001900), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_vlan\x00'}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0x2c, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x0, 'lblc\x00', 0x16, 0x9, 0x10}, {@rand_addr=0x64010100, 0x4e22, 0x1, 0x4, 0x40, 0x1000}}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.79267851s ago: executing program 9 (id=7278): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00001c00"/15, @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) pwritev(r2, &(0x7f0000000080), 0x0, 0x8, 0x365) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001c80)={0x0, 0x0, "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", "f00f84069494f0a1bc5bafa626e4a01bf3fbc8092ec90857af71f23548bac587b354223a013b3beb9a8439c1ecf359dc422d1245d634647e068295f68e2ccb140d1d5afa7906da26899b69f3ed1948fac2d2f7020372c38ba901e11bd650333115e69589cdb41baf14c3ffd14ff28b6c1be399fae63e86bc31127542c3552772435af1f0f0a082e6d3fa88e5a8eeffac91ce635ae2ab20883c34bb2e0c6427d76cd6037722ba7ef2865226db626fd393e8b712f719ceb814f220f0ecb1f7a2b2fc3e90858e0ad01cf96232553dfd94477966f1bbfa0a3fed69f40e364b6b0c5bca7cc76bfa97da2daa4b2d0ed1cb169dabe9339860350f61f943dd00bc9a2960d161245a63303d0b1ea22722f5c935bee24920c76fb198120b16aedfbcdcf607919d281d97212d71869d8be0cfac631b3c9952e8836e04b9987b8f33962b7b8f532a2a0061ad0d57edc5beff36172197efb418d9b8a2a3c8be275d6de2428574725388ca1553cbd6ae0fe7f0461d46542b13f2b6c1263c0236d2165a17ad1c7abcec4426854e1345459dbb343a27875d3c9d9d7f03ae217a23439cc050b6965816b292ee7a659d34b5da34aefd21dff527f22b4203518d3a9b110ed8bfd68355b0241b4bfd77a5a11da44b1cbda30729a6ba84bcca91ee14d204f86a863c4c833152834bd564689f2a93014d09d632139d3b955fbaf754c156a20fd4ce71613f3092ad0fa1d874c1045f417ac35ae275459cf7f6dd011335835f19750d92c2b4be84fb1ea3867a54f6b654c9a327c5c75509838ee19f58d8618206c4395a3f398331eadbff41fe4ed4e85d65987c9c101e975cdc7b5645ae5ff4ad4b7d143112a773bbad6ea94460246ece8351825d78703a5db6931daa7b48a14430ab0ca5faa94d4ef3f1fd11d7867093034d718a5fa7cf321a5ae9cc1ac8da944a61053b957a96981785ddd4ab168c378ad999b0582a0db495613df0473697f50afe3153f5dbbc7cf8f61e01a1fe9be25eca4b439f394a1f01898434d7b392e60e71e4154a8497ab755c4c78c20e5beaa05985e9de5295ad66f7f5eca4d4e6c10db231ad9ee9a1b3b71939eada137d7d7144a2054af7428ac6dd59ed66e2f44cf271660ddfb4d5228500ae1e0c97b6b55772a2d93b1bb03ff629e373e44904eda035af8290431c747e25bbcc03248e90d8904ff8eb23b7c94b110fa3f892b2e91900c1dd6d7242f2c00db96163518717a215b2d3145bc73b2b5f07bb4f76d24d8a60488aee159858f5d8c18f3118d38113dc0e27e193fb35d262f6b6aa5216a3292ec801dd89d2d093c86841badf86daca61829d2a49937051ba29a693d273f919cc5e0d23acb3d8cae82c139e561d873c2845867e09ce723d1e3320377415f5fa0ce7c5008b7d70a4509dc979756fc72136f94251e82117ae237dc79b05ab1b3a57efddff91e48327cb942aa17f0895bf2f9226d49114e3b609a77386eb22553d48c7f7b56f128d883e83fa0a0b2e1109957890b39a3991ec17eec2f01090213b94bf260a8d9ffc145a91829d774a52f77767c320cbd97c2e767a7d22a633635e49f18f287dd0c66b2485d0a757d32cad74e237220a6939cfc121efe5c36afc2534d767929856e6deb1da5cb106cb9cf0b12510e0f799273994309af0b31f98ba6e1c48ab127ed7351361458b93af7c3ba6cad91f75e6af4cea0d17a0ae8cd257df9294449e0541dffafe89ca01a0f74b9c29d77e5e0a6a6be893a75c3f9a4d3248ce402fcb57c2643b300aa7a80718436b96466dcfbd97cb8e1cb7925409b92827718ebde880399c8bf728dd273c35f5d40848080d4679e564bcdb6038741393f1828801910d0dd9d40a497121ce811f898c6630ff8e14170c725aae9df23c82edaac3144b45aeee398fb0d14cfb307ac07d9e789f3b05f40a47365784395804282405adc17f919668605590a024a5a7004e3c866a0797a4c511ecb39ca3c59e1381c2ecf72cef3a7ddf2d869c78c26fc70e128243d84d0fc124bea5b6f46cd1a034b554fd6c174df56034be7f44f7280a66076c62dccae844b759d73e7cc87cfd84384b6267a6bc054c716827c62fe70ab2a6ef0cd930a0e6b54e009d4f2a57932718ed16b6ff422d78c4c02fc1ae2a4170afd42b0029245af2da5cbd4b31470c6c74d03fa0515f34cfd696182fd31aabc59cd85059d1f3c6328afb5121560154e12bf5bbe5116211785b327ec0b13cd9770091cf034b2b0df542bd8616c88d064e8cf2ae703364b4d6ebcf1e6413737c30fcab3662f4d16c002ab67c6836886a9e7d2f5c2362d18835e8b66019f987974ff896c2a4359a3ddbe641b3f561ed6ef804ab99f790d527c01cf7e1adad5b17a3355c258919062840d03e16bdb4562eed19a02140eda8a144c236f008ebe3386455812d799b8ec77283daf2e2a3411a9a8f843d2948ee6e155eb0aa6b293d5f35a742b59b3767def43134d324ec63bf71453f46f2b7e17a436754cb393fdc7da40710863ef09373c76878dfc87c1d468a1bc25202353d859f7d6e0b3987d812e58ce9b6eeec3b6d4b708523eb87b2ad3f093add9138cbf14ffc8b9b486df22b2b6089ff2651faf6b9d49bcdccf3f90a1aa6cbe89168865b179ceac49f5a33244dbb5caf463bc1816b6840d9d78d3ae40aede42c6fff7fc894de52f3b15d0a90b2a78a75d608c78d6496212b73adeb091f518aa4cf7e0aa5864d080f3414eb79d5290439ae0f9c48826eb9e91e309b06dbb780a1d3775396d9111c39473875d4cc65b9db2734f8efd79b4670480d14073e111600bf0f03ef1c0223fe9789a4905620f98cd5cd0d005ac8fb54700a3cbe21219e6fa4d6b5470b7bcead9593b372d1f488179402780638e91e49380be01133f8047c9e8be5f3a786e7bdd7f086844ef77e9f1deb79f4df76bcead4b6845c4a31ee515dabf187deb3984c52d39165542f16130d321f803f509adac6a0011a4319773ffe687e72bb7a045c7cf7346ab9eed2cc12b6c37836735936f6e666a0981efbfc00a56f905701816facf238ff81e33d3dfd62c5b252902f744ab3b1ecbba7636f87391a40e89715e2dcaf87620ab0218deffb8b00e843d41fd8c21b3906c7d7746c12c37234518c1efc91accb0287eee396a4e353c1908d846fd0a21351fcc2dd3ef8bd2dd88efb6069cfa56300d5d4bb365a4ddfd65eb6186085f89c9501baf11daaf5cd1c51aaa801cb21dff37d462888abfff5184a928c61ecc2a18b7216c8053ca3bcc86ed926341b434466b4267e172d5357768279ca60180b2013d234a7e70b598f53902127141115b9038ce78a88c489e6b91286bc38b69203aa937609cbefac62e8941bd41aa21ea52153a0b52f92db46db345acdd8993dbf857b41d4024f3c62f6a47f93bdcef94c2d82d4eae83c13bb01dd246cf65f9f7809bbc0cf76c85414aede2b78e13ddedd4c45a789c1812fd4148364e1d5d6baa109d699b2f67656a29cd20874790ce669f562771eb02e932edb742b64ab3776b7b8e7b35de2156d783213843fe27a6055badb7299e6058522c4fab96e0d55d9c5b48a79a43941ffd32cde6deb2d4bffcec6993b6800b9f3773cd63ac9d99cd2fd97741f1a9fdc41d9063584dac4d6c08f07454d3dfdfd2c7b580fde2134492382567cb5e58e1a1c705a9a81115405a961410d5f0975f50cb3574ee4913151d037dba2fb8b603d0c956287c01b50eb2864f833ab0a0b43f5e54b06dd54dffab3519d26d03e41148583cdc3f131bd5f1d8bb6041b5ec07c431bd9b28f544a422a437e1bd33196dac3f16e9929774088c5f4a720cfce019549946449b9f118e25722f6c384a5f13ff3ea4e19dfe0d80a40738fdba3ab69b9ef8d16f608fe5be0ac7f87f15e78c420bfeb305ce4d756e437f79af625b0c0a7c8bf086188cff294661cfc1e4bf9d200456db9d9dc951e94b7e475d518699fc541e71701fd46ae498506969e0da87bc42c27c9c9f4375b8668d4848557b5bf8230026994baf4aa67ea118bc9228b35ba2b0409536f48f1daad24572b37ec3fdbfaf2ce10b2e2964ca23e63fcff7cb46ac2280402f7e65d5330c4b521ca84375f3224e0f4142107138db4d60efcb046ae00be53242d1270233f1906c3a4e76b946cfc05468d524ac980315eebac026a1a0b96abfadaa36660fc2dd065a65bf61fc07d04f456622dd28c6f871d299abeaef83229801dd394378879769678b437cd86ce1fa8e6b87a16c9c6efd0b0a5fba51ce632968ac6cc542cd9015cdb47b4d7dbc0c955c9db37f65c41b35bc59b7915bc769d34d96a0cd172b261a4a70d7a02d55af11ebab16bd835c1ba0f880fe0f668deba2075775294b27b680dbcbed60ff3079bf42da06fd13e20bc38e339cb2cfb6216eed39c6e0abca5edfd630891bbdceffec2c27d9dcb9f61afd1cf712e3faf27d03cfce02e961a68d79f640036a7e1fffe3fcbd0833050c838d53c69607838395a65ced8f8c8a294f9244bf9ad722a59ce3246625c93a59596bba932028804c6968757e157f32bc23ebef421f876cd63e58f8c0bf43697d7d0cbf1079903b52205c410a74e563784a3332834deb493443906d5fcce4788259f46d5bac9bd50539110d9a41897a280ca0b2e71213fc0f598c1ead408f797aaf5d48d712178c8495af2cc0963fcea0461822ac731c2a920c05725f24d63f36875e549994c6eed2373d1ff93bbac4cc49c5dbbf2c8cf847ed4c21ed157ff14396cc78680de95fa236480cb8485a6c9d816e1e9a4e093ec03c39ebdc530d426b8c339f63509d62996c8db58e11155af1537c83b6e367027c628ce82aa29b39cb107e547e0c463cfaac8f3772656eb04d54e908bfbec907aa2cd1459793fe2da2d5e1cb081b3d87733ac3e7a383c09b8fdc0cea8e90efc7ad2d74969ee2ef9318ebe3d3ba98bba9ed265dc76ea5e25fa4df99a502867cc28961719e618badb0a0d929fe36ee3df72e7696619451f0d618ee9432e414e35b9569a1f62246d98c9016b760e988b2cd66cf073655034042567109c308491e2f5cd3eb055fadcef6c72228b1de87629f5d2a1dd2aba29d5dc69ffee9a8166d33c0ccb5a8979aa85723c954d02b697e4b5b6155f88eb2584d81595470f3a57ba56c3792d5b037be1e87c34dc7d62b99c0a8a379d09ca96a287885d6a467137de301ab4838cc3ba47166924c0d71c659e4ee1e69e46d43fdb2f05bfc3a31eefb76b6a9ef694e6f8940cc10d31c95627e7f29091a0b0c884fb87c72bc125413c90c876f66fbb1803db6a68ce8f40d628bd244b0fd32997844962092e233e71506db99d1231adf91aafee33223504b1a09f0582fbe6f2dee05d6f0432de9891e10d384119afc975d9c5a2f84a937631c952fc50ddf100ba18995b07bf5f98"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f000000c880)={0x0, r6, "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", "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"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f000000b2c0)=ANY=[], 0x50) sendmmsg(r2, 0x0, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) 5.663905701s ago: executing program 0 (id=7284): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000e0000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2008010, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x80}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) 5.648228292s ago: executing program 9 (id=7285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5.55364308s ago: executing program 0 (id=7288): sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x7, &(0x7f0000000500)) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x64000600) 5.522962013s ago: executing program 7 (id=7289): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x123001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x2, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) 5.372981144s ago: executing program 7 (id=7290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x0) 4.501212595s ago: executing program 7 (id=7293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4.413037272s ago: executing program 9 (id=7294): unshare(0x6a040000) socket$packet(0x11, 0xa, 0x300) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) creat(&(0x7f0000000300)='./file0\x00', 0x20) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 4.039351203s ago: executing program 0 (id=7296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(0xffffffffffffffff, 0x5434, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x64000600) 3.546180253s ago: executing program 7 (id=7299): syz_open_dev$vcsu(0x0, 0xffffffffffff7fff, 0xa000) unshare(0x42000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @local}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x2a) 3.346051579s ago: executing program 5 (id=7300): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfc, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x800000000000002, 0x1}, 0x2008, 0x401, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000a0000000b0000000000001202000000020000000000001008000000000000000100000d000000000f000000010000000f0000000000000803000000000986e0409b6402"], 0x0, 0x5a, 0x0, 0x1, 0xa8eb, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740), 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 3.060732642s ago: executing program 5 (id=7303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x1, 0x0, 0x4}}) close_range(r3, 0xffffffffffffffff, 0x0) 2.984991338s ago: executing program 1 (id=7304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000005e000102000000000000000000000000682ce665c9"], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.935886553s ago: executing program 0 (id=7305): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) connect$inet6(r0, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x1000a) sendfile(r0, r3, &(0x7f0000000000)=0x5, 0x20001) prlimit64(0x0, 0xe, 0x0, 0x0) 1.934454243s ago: executing program 5 (id=7306): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7d5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) close(r0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x105001, 0x0) 1.861834619s ago: executing program 9 (id=7307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$unix(0x1, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x600, 0xf42349c2e3cba64c) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:hald_var_run_t:s0\x00', 0x24, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a"], 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) 1.801092534s ago: executing program 0 (id=7308): perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xfffffffffffffffd, 0x3fb65fe5}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = fspick(0xffffffffffffff9c, 0x0, 0x0) rmdir(0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000480)='(-#)-*#\'\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nobarrier}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf166}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) 1.578187742s ago: executing program 9 (id=7309): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$eJzs281rXFUbAPDn3nyUt2nfxFq/2qrTBjGgJk2iQsBNRUVBcKE7FxKaaSlOmtKM2BYXKoKr4saVrlzpH+DGhSDuXQmudC+FIMW1jNyZe5txMhMzyYyjvb8fTHLO3DOc88yZZ+bcc2cCKK1K9ieJOBIRP0fEdKv61waV1r/fb793Prsl0Wi8/lvSbJfVi6bF46byylwakX6UxMku/W5ev/H2aq1WvZrXF+rrVxY2r9946tL66sXqxerl5ZVnzi4trzy7sjywWG/ePvXTxuev/fHJmV+mnr/51gvZeI/kx9rjGJRKVKKR6zz22KA7G7GjbeVkfIQDoS9jEZFN10Qz/6djLLYnbzpe/HCkgwOGKvtsOtT78PsN4C6WxKhHAIxG8UFfnNsP4zz432zrXOsEaGf845HmbSY6zm8HKTvbuvbmx99mtxjSPgQAQLvvsvXPk93WP2nc39bu//m1oZmIuCcijkXEvRFxPCLui2i2fSAiHuyz/0pHfef6J721r8D2KFv/Pdd1/Vus/mJmLK8dbcY/kVy4VKuezZ+TuZg4lNUXd+njx1e++rLXsUrb+i+7Zf0Xa8F8HLfGOzbo1lbrqweJud3WBxEnuq5/kztXApKIeCgiTuyzj2/ONT7rdezv4x+uxhcRj3ed/+2roMnu1ycXmq+HheJVsdOpd6+s9ep/1PFn83949/hnkvbrtZv99/H1zOmtXsf2+/qfTN5olifz+66t1utXFyMmk1d33r+0/diiXrTP4p+b7Z7/x2L7mTiZzWNEPBwRj0TEo/nYT0fEmYiY3SX+l2Zfru4//uHK4l/ra/77L6wvff9Dr/73Nv9PN0tz+T17ef/b6wAP8twBAADAf0Xa/A58ks7fKafp/HzrO/zH43Ba29isP3Fh453La63vys/ERFrsdE237Ycu5nvDRX2po76c7xt/Ova/Zn3+/Eat56YY8I+Y6pH/mV/HRj06YOj8XgvKS/5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kMpHeR3/QoKCndrYdTvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIPxZwAAAP//jYTnFQ==") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f0000000740)="cc", 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x1a3) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, 0x0) 696.230874ms ago: executing program 1 (id=7310): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r5 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)=@ethtool_cmd={0x71, 0x9, 0x8, 0x2, 0x81, 0x9, 0x7f, 0x80, 0x5c, 0xee, 0x0, 0xb2a, 0x6, 0x7c, 0x0, 0x7, [0xa, 0x2]}}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r5}) 656.659197ms ago: executing program 5 (id=7311): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0x7c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 603.325031ms ago: executing program 0 (id=7312): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000001c0)) 565.164204ms ago: executing program 5 (id=7313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 563.827455ms ago: executing program 7 (id=7314): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x507, &(0x7f0000001500)="$eJzs3c9vG1kdAPCvnThx0nSTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkLohcaModhzFztKEHtIzVyQqcYIjfwDnnrhzQfTGpRyQ+BGBGiQORjOepG5iN1GT2mn8+UijeW/e1N/3ms578TeNXwBD61pE7EbEWER8FhHT2fVcdsTH7SO578nevaX9vXtLuWi1Pv1nLm1PrkXHn0lcyV6zGBE/+l7ET3PH4za2d9YWq9XKZlafbdY2ZhvbOzdXa4srlZXKerm8ML8w9+GtD8rnNta3a2NZ6auP/7j7rZ8n3ZrKrnSO4zy1h144jJMYjYgfvIxgAzCSjWds0B3hheQj4o2IeCd9/qdjJP1qAgCXWas1Ha3pzvpxV3tcBwBeTfk0B5bLl7JcwFTk86VSO4f3Zkzmq/VG88ad+tb6cjtXNhOF/J3VamUuyxXORCGX1OfT8tN6+Uj9VkS8HhG/HJ9I66WlenV5kN/4AMAQu3Jk/f/PeHv9BwAuueKgOwAA9J31HwCGj/UfAIaP9R8Ahk97/Z8YdDcAgD7y/h8Aho/1HwCGyg8/+SQ5WvvZ518vf769tVb//OZypbFWqm0tlZbqmxullXp9Jf3MntpJr1et1zfm34+tuzPf3mg0ZxvbO7dr9a315u30c71vVwrpXbt9GBkA0Mvrbz98lEtW5I8m0iM69nIoDLRnwMuWH3QHgIEZGXQHgIGx2xcMrzO8x5cegEuiyxa9zyh2+wWhVqvVkkOAV9b1L8n/w7DqWLv9L2AYMvL/MLzk/2F4tVq50+7tH6e9EQC42OT4gR4//38jO/8u++HAT5aP3vHgZfYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALraD/X9L2V7gU5HPl0oRVyNiJgq5O6vVylxEvBYRfx4vjCf1+QH3GQA4q/zfctn+X9en35t6pumtK4fFsYj42a8//dXdxWZz808RY7l/jR9cbz7Irpf733sA4GQH63R67ngj/2Tv3tLB0c/+/P27EVFsx9/fG4v9w/ijMZqei1GIiMl/57J6W64jd3EWu/cj4ovdxp+LqTQH0t759Gj8JPbVvsbPPxM/n7a1z8nfxRfOoS8wbB4m88/H3Z6/fFxLz92f/2I6Q51dNv8lL7W0n86BT+MfzH8jPea/a6eN8f4fvt8uTRxvux/x5dGIg9j7HfPPQfxcj/jvnTL+X77y1ju92lq/ibge3eN3xppt1jZmG9s7N1driyuVlcp6ubwwvzD34a0PyrNpjnq292rwj49uvNarLRn/ZI/4xRPG//VTjv+3//vsx197Tvxvvtstfj7efE78ZE38xinjL07+vtirLYm/3GP8J339b5wy/uO/7hzbNhwAGJzG9s7aYrVa2XyFCo+S72kG3w2F/heSf7IXoBtdC9/pV6yx6N70i3fbz/SRplbrhWL1mjHOI+sGXASHD31E/HfQnQEAAAAAAAAAAAAAALrqx28sDXqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXF7/DwAA//+J3Mo+") creat(&(0x7f0000000640)='./bus\x00', 0x1a8) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) geteuid() ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000700)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x26, r1}) r2 = socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@remote, @in6}}, {{@in6=@loopback}, 0x0, @in6}}, &(0x7f00000006c0)=0xe8) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000340)={[{@dax_inode}, {@min_batch_time={'min_batch_time', 0x3d, 0xb}}, {@test_dummy_encryption_v1}, {@grpid}, {@dax}], [{@subj_role={'subj_role', 0x3d, 'bond_slave_0\x00'}}, {@obj_role}, {@subj_role}, {@uid_eq}]}, 0x3, 0x4d6, &(0x7f0000000780)="$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") close_range(r3, r2, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 412.444277ms ago: executing program 1 (id=7315): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000500)={'veth0_to_bridge\x00', {0x2, 0x4e23, @multicast2}}) sendmsg$nl_route(r0, 0x0, 0x4) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x22f023e32efc9b4d}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x80080) sendmsg$TIPC_NL_LINK_SET(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) shutdown(r3, 0x1) 396.952698ms ago: executing program 9 (id=7316): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000001700)={0x12e8, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FTM_RESPONDER={0x1120, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1003, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0xf1, 0x2, "24200944adc78e59c879c1716a604030079c7e528af906354aa7cbaf2723624bd754e11b3207cd8258a065aff51757950f2d8a4bdd2bc00f51d3c4dbd87d1bb189ff4123dee67cdae21e1a0fa4895bc0f9f3153dac154c2af639f4b55b97b178d42671a427e0d7f2092193d185ef63fc5d482f0a0903b11399ad5f6aabf413d01b93cb9e3cfe212a810fba42d45205fbd295d741bb16366452eda88ea5202236cf132c99459b8773abe5421c47a3fac3ee86a54183e04a4eaa4321634a3a53b01aceae34008fd88676c2fbf17e9149d1a2ba06e59717df285238f404fbff0785c96c6810873ae6ead37d654205"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1e, 0x3, "2f9bb178e6c0ddda4adf2b8d0e3e6e1bc93b8d64df39d0f6450d"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1ac, 0x7f, [@random_vendor={0xdd, 0x97, "4419db0d044af9c9c40724946e80c97715bc94ee8ecd9201cf11aae05eb35628cfb41e7351e6477a92b8272a2302b89f0b725c36dbc6a403ba1cf49498fe20d9837c75e4997d4d33988961aa92d14dd42fd23b91a6d14f53f47fb18b6927f0b76facc465bb8a7e78e69c208f2abee4889f1e73c82f3befe7b07f3b4dafbf64ea4c6f96706bbce5fed7dfee8f4e3eb970f5482c746d6d8b"}, @random_vendor={0xdd, 0xc9, "1ebede008446a6bfe7d58e23ab7575d334c83b92787a9d467ec3ec9262978593e0f37a5d01267d4c828d52948ad6716ac54efe555b5fb9d5f35976f57ab2af0630028fa4bd2fffa3d1acca378976f8076da3ca9e436d5a98d7ba3757b8c451f76cf8c82be1810b267f9a0c2d411ca51f26f672a1370f0892fa7c1a866ed875b0207ba2c04d88b6e1ddd07f5699527ed4e6a886dfc1d84841ff4529b3359eb3c26bd7ea9111678433cda13c07d40a579b471e910456242b47250bbce0980aed6a7cdd999fd02cd038eb"}, @random={0x0, 0x6, "6995e8ff0843"}, @gcr_ga={0xbd, 0x6, @device_b}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x30, 0x2}}, @preq={0x82, 0x25, {{0x1}, 0x81, 0x9, 0x1, @broadcast, 0xab, @void, 0x71, 0xd, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x5}]}}]}]}, 0x12e8}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r5, r4, 0x0, 0x40001) sendfile(r5, 0xffffffffffffffff, 0x0, 0x7ffff000) 296.270676ms ago: executing program 1 (id=7317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 179.144656ms ago: executing program 1 (id=7318): socket(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$eJzs3c1rHOUfAPDvbF76+vs1hVJURAI9WNFumsSXCh7qUbRY0HtdkjGUbLoluylNLLQ92IsXKYKIBfHgTe8ei/+Af0VBi0VK0IOXyGxm022zm2zTbXbrfj4w4XlmZvM835l5nn1mn1k2gIE1nv0pRDwfEV8mEYciIsm3DUe+cXx9v9X7V2ayJYm1tY/+TOr7ZfnG/2q87kCeeS4ifvk84tXC5nKryyvzpXI5XczzE7WFixPV5ZUT5xdKc+lcemFqevrUG9NTb7/1ZtdifeXs3998ePu9U18cW/36p7uHbyZxOg7m25rjeALXmjPjMZ4fk5E4/ciOk10orJ8kva4AOzKUt/ORyPqAQzGUt3rgv+9qRKwBAyrR/mFANcYBjXv7Lt0HPzPuvbt+A7Q5/uH1z0Zib/3eaP9q8tCdUXa/O9aF8rMyfv791s1sie59DgGwrWvXI+Lk8PDm/i/J+7+dO9nBPo+Wof+D3XM7G/+81mr8U9gY/0SL8c+BFm13J7Zv/4W7XSimrWz8907L8e/GpNXYUJ77X33MN5J8er6cZn3b/yPieIzsyfJbzeecWr2z1m5b8/gvW7LyG2PBvB53h/c8/JrZUq30JDE3u3c94oWW499k4/wnLc5/djzOdljG0fTWS+22bR//07X2fcTLLc//gxmtZOv5yYn69TDRuCo2++vG0V/blb85/tHYzfiz879/6/jHkub52urjl/Hd3n/Sdtseij86v/5Hk4/r6dF83eVSrbY4GTGafLB5/dSD1zbyjf2z+I8f27r/a3X974uITzqM/8aRH1/sKP4eXP9Z/LOPdf4fP3Hn/c++bVd+Z/3f6/XU8XxNJ/1fpxV8kmMHAAAAAAAA/aYQEQcjKRQ30oVCsbj+fMeR2F8oj60//xGzUf+u7FiMFBoz3YeanoeYzJ+HbeSnHslPR8ThiPhqaF89X5yplGd7HTwAAAAAAAAAAAAAAAAAAAD0iQNtvv+f+W2o17UDnjo/+Q2Da9v2341fegL6kvd/GFzaPwwu7R8Gl/YPg6up/e/pZT2A3ef9HwaX9g+DS/sHAAAAAAAAAAAAAAAAAAAAAAAAAACArjp75ky2rK3evzKT5WcvLS/NVy6dmE2r88WFpZniTGXxYnGuUpkrp8WZysJ2/69cqVycnIqlyxO1tFqbqC6vnFuoLF2onTu/UJpLz6UjuxIVAAAAAAAAAAAAAAAAAAAAPFuqyyvzpXI5XZSQ2FFiuD+qsZ7ILummNVd7XZ+tEn/80BfVaJfodc8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/8GwAA//9ITzKe") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000700)=ANY=[], 0x381, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 132.99311ms ago: executing program 7 (id=7319): socket$inet6(0xa, 0x3, 0x3c) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./file0\x00', r2}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1200) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffff}}, './file0\x00'}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000100)={r4}) 18.755489ms ago: executing program 1 (id=7320): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f00000000c0)=""/101, &(0x7f00000001c0)=0x65) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010074e98e4c4073797a300000000030000000160a0100000000000000000001000000090001007379a7dd000000000900020073797a310000000004000380140000001000010000000000090000"], 0x78}}, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000002dc0)=0x1, 0x4) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xea58b4885ebd118e) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_freeze_timeout', 0x141a82, 0x100) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 0s ago: executing program 5 (id=7321): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f350267502c6572726f72733d636f6e74696e75652c6e6f646f74732c6e66733d7374616c655f72772c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e6f646f74732c636865636b3d72656c617865642c646f74732c00"], 0x1, 0x251, &(0x7f0000000880)="$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") socket$packet(0x11, 0x3, 0x300) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) kernel console output (not intermixed with test programs): ous mode [ 346.913863][ T1146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.929807][ T1146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.183670][ T1846] lo speed is unknown, defaulting to 1000 [ 347.318262][ T1846] chnl_net:caif_netlink_parms(): no params data found [ 347.371786][ T1846] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.378935][ T1846] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.386338][ T1846] bridge_slave_0: entered allmulticast mode [ 347.392860][ T1846] bridge_slave_0: entered promiscuous mode [ 347.400177][ T1846] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.407350][ T1846] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.414618][ T1846] bridge_slave_1: entered allmulticast mode [ 347.421559][ T1846] bridge_slave_1: entered promiscuous mode [ 347.442960][ T1846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.454526][ T1846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.477837][ T1846] team0: Port device team_slave_0 added [ 347.484778][ T1846] team0: Port device team_slave_1 added [ 347.510756][ T1846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.517881][ T1846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.524749][ T2111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6314'. [ 347.543801][ T1846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.544947][ T1846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.570743][ T1846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.596708][ T1846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.680996][T10653] dvmrp1 (unregistering): left allmulticast mode [ 348.178300][T10653] bond0 (unregistering): Released all slaves [ 348.186734][T10653] bond1 (unregistering): Released all slaves [ 348.195429][T10653] bond2 (unregistering): Released all slaves [ 348.203676][T10653] bond3 (unregistering): Released all slaves [ 348.212479][T10653] bond4 (unregistering): Released all slaves [ 348.221614][T10653] bond5 (unregistering): Released all slaves [ 348.235065][T10653] bond6 (unregistering): Released all slaves [ 348.244046][T10653] bond7 (unregistering): Released all slaves [ 348.254506][T10653] bond8 (unregistering): Released all slaves [ 348.263679][T10653] bond9 (unregistering): Released all slaves [ 348.275619][T10653] bond10 (unregistering): Released all slaves [ 348.289534][T10653] bond12 (unregistering): Released all slaves [ 348.300570][T10653] bond11 (unregistering): Released all slaves [ 348.320980][ T2124] tipc: Bearer : already 2 bearers with priority 10 [ 348.328363][ T2124] tipc: Bearer : trying with adjusted priority [ 348.335397][ T2124] tipc: New replicast peer: 255.255.255.83 [ 348.341385][ T2124] tipc: Enabled bearer , priority 9 [ 348.371289][ T1846] hsr_slave_0: entered promiscuous mode [ 348.382990][ T1846] hsr_slave_1: entered promiscuous mode [ 348.389244][ T1846] debugfs: 'hsr0' already exists in 'hsr' [ 348.395121][ T1846] Cannot create hsr debugfs directory [ 348.402844][T10653] tipc: Disabling bearer [ 348.408362][T10653] tipc: Disabling bearer [ 348.413370][T10653] tipc: Left network mode [ 348.450447][T10653] IPVS: stopping backup sync thread 11141 ... [ 348.539221][T10653] hsr_slave_0: left promiscuous mode [ 348.547853][T10653] hsr_slave_1: left promiscuous mode [ 348.564328][T10653] pim6reg (unregistering): left allmulticast mode [ 348.734747][ T1846] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 348.748139][ T1846] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 348.760512][ T1846] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 348.770174][ T1846] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 348.885156][ T1846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.898981][ T2136] chnl_net:caif_netlink_parms(): no params data found [ 348.998342][ T1846] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.017929][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.025041][T10683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.054938][T10683] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.062054][T10683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.071992][ T2432] ------------[ cut here ]------------ [ 349.078405][ T2432] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 349.090236][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.108384][ T2432] WARNING: CPU: 0 PID: 2432 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 349.110194][ T2136] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.113185][ T2136] bridge_slave_0: entered allmulticast mode [ 349.121315][ T2432] Modules linked in: [ 349.131773][ T2136] bridge_slave_0: entered promiscuous mode [ 349.134545][ T2432] [ 349.139448][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.145864][ T2432] CPU: 0 UID: 0 PID: 2432 Comm: syz.5.6332 Not tainted 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 349.147382][ T2136] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.155728][ T2136] bridge_slave_1: entered allmulticast mode [ 349.168525][ T2432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.190832][ T2136] bridge_slave_1: entered promiscuous mode [ 349.191758][ T2432] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 349.204322][ T2432] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 e2 a3 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 349.224435][ T2432] RSP: 0018:ffffc9000680f440 EFLAGS: 00010292 [ 349.231338][ T2432] RAX: 5204af4025ed2400 RBX: ffff88811972d1a8 RCX: 0000000000080000 [ 349.239855][ T2432] RDX: ffffc90001861000 RSI: 000000000000f90b RDI: 000000000000f90c [ 349.250425][ T2432] RBP: fffffffe00000030 R08: 0001ffff86a2092f R09: 0000000000000000 [ 349.261418][ T2432] R10: ffffffff88e44ad0 R11: ffffffff821f23b0 R12: ffff88811972d168 [ 349.270103][ T2432] R13: ffff888119388000 R14: ffff888119388000 R15: ffff88811972d1a0 [ 349.278749][ T2432] FS: 00007f83bd77f6c0(0000) GS:ffff8882aee65000(0000) knlGS:0000000000000000 [ 349.289573][ T2432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.297048][ T2432] CR2: 0000001b3201cff8 CR3: 0000000103432000 CR4: 00000000003506f0 [ 349.305854][ T2432] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.314265][ T2432] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 349.323045][ T2432] Call Trace: [ 349.326863][ T2432] [ 349.330023][ T2432] reg_set_min_max+0x215/0x260 [ 349.335505][ T2432] check_cond_jmp_op+0x1080/0x16e0 [ 349.341505][ T2432] do_check+0x332a/0x7a10 [ 349.346598][ T2432] ? do_check_common+0x388/0x1290 [ 349.352284][ T2432] do_check_common+0xc3a/0x1290 [ 349.360196][ T2432] ? compute_scc+0x86b/0x880 [ 349.365862][ T2432] bpf_check+0x942b/0xd9f0 [ 349.370795][ T2432] ? __rcu_read_unlock+0x4f/0x70 [ 349.376085][ T2432] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 349.382591][ T2432] ? __vmap_pages_range_noflush+0x271/0xbd0 [ 349.389293][ T2432] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 349.395595][ T2432] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 349.402065][ T2432] ? pcpu_block_update+0x232/0x3b0 [ 349.408000][ T2432] ? pcpu_block_refresh_hint+0x157/0x170 [ 349.414345][ T2432] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 349.421415][ T2432] ? css_rstat_updated+0xcd/0x5b0 [ 349.426939][ T2432] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 349.433275][ T2432] ? __rcu_read_unlock+0x4f/0x70 [ 349.438905][ T2432] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 349.445122][ T2432] ? should_fail_ex+0x30/0x280 [ 349.452334][ T2432] ? selinux_bpf_prog_load+0x36/0xf0 [ 349.458113][ T2432] ? should_failslab+0x8c/0xb0 [ 349.463594][ T2432] ? __kmalloc_cache_noprof+0x189/0x320 [ 349.469753][ T2432] ? selinux_bpf_prog_load+0xbf/0xf0 [ 349.480095][ T2432] ? security_bpf_prog_load+0x2c/0xa0 [ 349.486673][ T2432] bpf_prog_load+0xedd/0x1070 [ 349.491815][ T2432] __sys_bpf+0x462/0x7b0 [ 349.496892][ T2432] __x64_sys_bpf+0x41/0x50 [ 349.502104][ T2432] x64_sys_call+0x2aea/0x2ff0 [ 349.507172][ T2432] do_syscall_64+0xd2/0x200 [ 349.512135][ T2432] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 349.518842][ T2432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.525323][ T2432] RIP: 0033:0x7f83bf11e9a9 [ 349.530194][ T2432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.550855][ T2432] RSP: 002b:00007f83bd77f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 349.560325][ T2432] RAX: ffffffffffffffda RBX: 00007f83bf345fa0 RCX: 00007f83bf11e9a9 [ 349.568913][ T2432] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 349.583332][ T2432] RBP: 00007f83bf1a0d69 R08: 0000000000000000 R09: 0000000000000000 [ 349.592543][ T2432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.600884][ T2432] R13: 0000000000000000 R14: 00007f83bf345fa0 R15: 00007ffd1fac4088 [ 349.610376][ T2432] [ 349.614113][ T2432] ---[ end trace 0000000000000000 ]--- [ 349.640177][ T2136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.671761][ T2136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.685004][T10653] IPVS: stop unused estimator thread 0... [ 349.722827][T10653] ------------[ cut here ]------------ [ 349.728443][T10653] WARNING: CPU: 1 PID: 10653 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x17c/0x1f0 [ 349.738280][T10653] Modules linked in: [ 349.742221][T10653] CPU: 1 UID: 0 PID: 10653 Comm: kworker/u8:58 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 349.756449][T10653] Tainted: [W]=WARN [ 349.760297][T10653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.770474][T10653] Workqueue: netns cleanup_net [ 349.775368][T10653] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 349.781092][T10653] Code: 48 8d bb 30 0e 00 00 e8 52 18 c0 fc 48 8b bb 30 0e 00 00 e8 36 81 cc fc 5b 41 5e 41 5f 5d e9 cb 74 b3 00 cc e8 45 6a a5 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 37 6a a5 fc 90 0f 0b 90 4c 89 f7 e8 1b [ 349.801147][T10653] RSP: 0018:ffffc9000ed33c60 EFLAGS: 00010293 [ 349.807365][T10653] RAX: ffffffff84b2799b RBX: ffff8881099f4740 RCX: ffff88810268e300 [ 349.815662][T10653] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881099f5540 [ 349.823883][T10653] RBP: ffffffff86c7efa0 R08: 0001ffff86847f7f R09: 0000000000000000 [ 349.831961][T10653] R10: ffffc9000ed33be8 R11: 0001c9000ed33be8 R12: ffffffff86c7efc0 [ 349.840070][T10653] R13: ffff8881099f4768 R14: ffff8881099f5540 R15: ffff8881099f4740 [ 349.848190][T10653] FS: 0000000000000000(0000) GS:ffff8882aef65000(0000) knlGS:0000000000000000 [ 349.857221][T10653] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.863841][T10653] CR2: 00007f74b37add58 CR3: 000000011674e000 CR4: 00000000003506f0 [ 349.871960][T10653] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.880002][T10653] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 349.888120][T10653] Call Trace: [ 349.891487][T10653] [ 349.894459][T10653] xfrm_net_exit+0x2d/0x60 [ 349.898933][T10653] ops_undo_list+0x27b/0x410 [ 349.903655][T10653] cleanup_net+0x2de/0x4d0 [ 349.908140][T10653] process_scheduled_works+0x4cb/0x9d0 [ 349.913739][T10653] worker_thread+0x582/0x770 [ 349.918492][T10653] kthread+0x486/0x510 [ 349.922851][T10653] ? finish_task_switch+0xad/0x2b0 [ 349.928059][T10653] ? __pfx_worker_thread+0x10/0x10 [ 349.933265][T10653] ? __pfx_kthread+0x10/0x10 [ 349.937898][T10653] ret_from_fork+0xdd/0x150 [ 349.942497][T10653] ? __pfx_kthread+0x10/0x10 [ 349.947184][T10653] ret_from_fork_asm+0x1a/0x30 [ 349.952003][T10653] [ 349.955040][T10653] ---[ end trace 0000000000000000 ]--- [ 349.962350][ T2136] team0: Port device team_slave_0 added [ 349.976171][ T1846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.992156][ T2136] team0: Port device team_slave_1 added [ 350.041138][ T2136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.048175][ T2136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.074222][ T2136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.110547][ T2540] 8021q: adding VLAN 0 to HW filter on device bond10 [ 350.121723][ T2136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.128774][ T2136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.154804][ T2136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.184402][ T2540] vlan0: entered allmulticast mode [ 350.189789][ T2540] bond10: entered allmulticast mode [ 350.238512][ T2587] lo speed is unknown, defaulting to 1000 [ 350.244305][ T2587] lo speed is unknown, defaulting to 1000 [ 350.259510][ T2136] hsr_slave_0: entered promiscuous mode [ 350.265880][ T2136] hsr_slave_1: entered promiscuous mode [ 350.272587][ T2136] debugfs: 'hsr0' already exists in 'hsr' [ 350.278447][ T2136] Cannot create hsr debugfs directory [ 350.284120][ T2587] lo speed is unknown, defaulting to 1000 [ 350.291800][ T2587] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 350.308677][ T2587] lo speed is unknown, defaulting to 1000 [ 350.314861][ T2587] lo speed is unknown, defaulting to 1000 [ 350.334846][ T1846] veth0_vlan: entered promiscuous mode [ 350.341047][ T2587] lo speed is unknown, defaulting to 1000 [ 350.351386][ T1846] veth1_vlan: entered promiscuous mode [ 350.365233][ T2587] lo speed is unknown, defaulting to 1000 [ 350.384337][ T2587] lo speed is unknown, defaulting to 1000 [ 350.403799][ T2587] lo speed is unknown, defaulting to 1000 [ 350.410675][ T1846] veth0_macvtap: entered promiscuous mode [ 350.437177][ T2587] lo speed is unknown, defaulting to 1000 [ 350.469563][ T1846] veth1_macvtap: entered promiscuous mode [ 350.547491][ T1846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.555105][T10653] bridge_slave_1: left allmulticast mode [ 350.560834][T10653] bridge_slave_1: left promiscuous mode [ 350.566757][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.580954][T10653] bridge_slave_0: left allmulticast mode [ 350.586917][T10653] bridge_slave_0: left promiscuous mode [ 350.592646][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.712295][T10653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.722910][T10653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.735425][T10653] bond0 (unregistering): Released all slaves [ 350.770824][ T1846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.778294][ T2705] bridge: RTM_NEWNEIGH with invalid ether address [ 350.799193][T10605] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.810687][T10605] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.821949][T10605] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.830826][ T2136] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 350.843346][ T2136] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 350.898045][T10605] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.922099][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 350.922116][ T29] audit: type=1400 audit(350.905:17314): avc: denied { mounton } for pid=1846 comm="syz-executor" path="/root/syzkaller.421bGj/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 350.989928][ T2136] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 351.003455][ T29] audit: type=1400 audit(350.985:17315): avc: denied { mounton } for pid=1846 comm="syz-executor" path="/root/syzkaller.421bGj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 351.030322][ T29] audit: type=1400 audit(350.985:17316): avc: denied { mounton } for pid=1846 comm="syz-executor" path="/root/syzkaller.421bGj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=67318 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 351.057514][ T29] audit: type=1400 audit(350.985:17317): avc: denied { mounton } for pid=1846 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 351.062961][ T2136] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 351.080051][ T29] audit: type=1400 audit(350.985:17318): avc: denied { mount } for pid=1846 comm="syz-executor" name="/" dev="gadgetfs" ino=67319 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 351.314123][T10653] hsr_slave_0: left promiscuous mode [ 351.341175][ T2736] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 351.356080][T10653] hsr_slave_1: left promiscuous mode [ 351.378370][T10653] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.385818][T10653] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.444889][ T2739] __nla_validate_parse: 5 callbacks suppressed [ 351.444985][ T2739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6352'. [ 351.465260][T10653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.472880][T10653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.489196][T10653] veth1_macvtap: left promiscuous mode [ 351.494807][T10653] veth0_macvtap: left promiscuous mode [ 351.503699][ T2741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6352'. [ 351.512995][T10653] veth1_vlan: left promiscuous mode [ 351.520648][T10653] veth0_vlan: left promiscuous mode [ 351.583884][T10653] team0 (unregistering): Port device team_slave_1 removed [ 351.599338][T10653] team0 (unregistering): Port device team_slave_0 removed [ 351.645293][ T2730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6350'. [ 351.725363][ T2755] loop7: detected capacity change from 0 to 128 [ 351.792677][ T2753] : (slave dummy0): Releasing backup interface [ 351.802410][ T2753] batadv1: left allmulticast mode [ 351.807536][ T2753] batadv1: left promiscuous mode [ 351.812802][ T2753] bridge0: port 1(batadv1) entered disabled state [ 351.822135][ T2773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6356'. [ 351.837942][ T2757] team0: Failed to send options change via netlink (err -105) [ 351.845570][ T2757] team0: Mode changed to "activebackup" [ 351.934476][ T2136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.951444][ T2136] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.959144][ T2800] loop7: detected capacity change from 0 to 1024 [ 351.966271][ T2800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 351.977744][T10683] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.984859][T10683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.004662][ T29] audit: type=1326 audit(351.985:17319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.5.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 352.027891][ T29] audit: type=1326 audit(351.985:17320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.5.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 352.034050][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.050978][ T29] audit: type=1326 audit(351.985:17321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.5.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 352.057897][T10605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.082918][ T2136] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.088083][ T29] audit: type=1326 audit(351.985:17322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.5.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 352.088152][ T29] audit: type=1326 audit(351.985:17323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2796 comm="syz.5.6361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 352.098670][ T2136] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.160999][ T2800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.209862][ T2812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2812 comm=syz.1.6360 [ 352.233591][ T2815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6365'. [ 352.258237][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.259540][ T2136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.392306][ T2832] team0: Mode changed to "activebackup" [ 352.460430][ T2843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6372'. [ 352.538548][ T2136] veth0_vlan: entered promiscuous mode [ 352.568756][ T2136] veth1_vlan: entered promiscuous mode [ 352.627377][ T2136] veth0_macvtap: entered promiscuous mode [ 352.646288][ T2136] veth1_macvtap: entered promiscuous mode [ 352.688428][ T2136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.719651][ T2136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.748850][T10653] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.776229][T10653] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.812469][T10653] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.874981][T10653] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.907901][ T2877] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6378'. [ 352.946088][ T2877] 8021q: adding VLAN 0 to HW filter on device bond15 [ 352.948201][ T2884] netlink: 202920 bytes leftover after parsing attributes in process `syz.8.6321'. [ 352.996493][ T2877] vlan1: entered allmulticast mode [ 353.001719][ T2877] bond15: entered allmulticast mode [ 353.061447][ T2884] loop8: detected capacity change from 0 to 8192 [ 353.217242][ T2954] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6381'. [ 353.238207][ T2943] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6381'. [ 353.255309][ T2932] lo speed is unknown, defaulting to 1000 [ 354.152558][ T3085] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 354.490869][ T3142] loop7: detected capacity change from 0 to 128 [ 354.498864][ T3141] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 354.582368][ T3135] syz.7.6412: attempt to access beyond end of device [ 354.582368][ T3135] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 354.830412][ T3163] hsr_slave_0 (unregistering): left promiscuous mode [ 355.092172][ T3191] netlink: 'syz.5.6428': attribute type 7 has an invalid length. [ 355.525793][ T3202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3202 comm=syz.5.6430 [ 355.616071][ T3204] netlink: 'syz.1.6431': attribute type 13 has an invalid length. [ 355.946411][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 355.946429][ T29] audit: type=1326 audit(355.925:17498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 355.976063][ T29] audit: type=1326 audit(355.925:17499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 355.999310][ T29] audit: type=1326 audit(355.925:17500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.022699][ T29] audit: type=1326 audit(355.935:17501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.045621][ T29] audit: type=1326 audit(355.935:17502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.068784][ T29] audit: type=1326 audit(355.935:17503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.091576][ T29] audit: type=1326 audit(355.935:17504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.114557][ T29] audit: type=1326 audit(355.935:17505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.137589][ T29] audit: type=1326 audit(355.935:17506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.160612][ T29] audit: type=1326 audit(355.935:17507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3230 comm="syz.8.6440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c186e9a9 code=0x7ffc0000 [ 356.229197][ T3239] loop8: detected capacity change from 0 to 1024 [ 356.236298][ T3239] EXT4-fs: Ignoring removed orlov option [ 356.246157][ T3239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.484738][ T2136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.508378][ T3252] loop8: detected capacity change from 0 to 512 [ 356.515918][ T3252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 356.549988][ T3252] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.595831][ T3255] lo speed is unknown, defaulting to 1000 [ 356.606654][ T3252] loop8: detected capacity change from 512 to 64 [ 356.762034][ T3296] loop7: detected capacity change from 0 to 1024 [ 356.770124][ T3296] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 356.781264][ T3296] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 356.793968][ T3296] JBD2: no valid journal superblock found [ 356.799868][ T3296] EXT4-fs (loop7): Could not load journal inode [ 356.830426][ T2136] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.169689][ T3312] lo speed is unknown, defaulting to 1000 [ 357.425586][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 357.449001][ T3359] lo speed is unknown, defaulting to 1000 [ 357.579824][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.587014][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.602223][ T3312] bridge_slave_0: entered allmulticast mode [ 357.617307][ T3312] bridge_slave_0: entered promiscuous mode [ 357.631209][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.638416][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.656780][ T3312] bridge_slave_1: entered allmulticast mode [ 357.665684][ T3312] bridge_slave_1: entered promiscuous mode [ 357.730743][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.761002][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.771308][ T3569] __nla_validate_parse: 10 callbacks suppressed [ 357.771326][ T3569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6465'. [ 357.823350][ T3312] team0: Port device team_slave_0 added [ 357.841431][ T3312] team0: Port device team_slave_1 added [ 357.895256][ T3604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6468'. [ 357.928984][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.935994][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.962086][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.988560][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.995557][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.021651][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.078657][ T3312] hsr_slave_0: entered promiscuous mode [ 358.093568][ T3312] hsr_slave_1: entered promiscuous mode [ 358.130508][ T3661] netlink: 'syz.0.6472': attribute type 27 has an invalid length. [ 358.147453][ T3661] dummy0: left promiscuous mode [ 358.155261][ T3661] team1: left promiscuous mode [ 358.160233][ T3661] team1: left allmulticast mode [ 358.165515][ T3661] ip6gre1: left allmulticast mode [ 358.171477][ T3661] bond4: left promiscuous mode [ 358.176444][ T3661] bond6: left promiscuous mode [ 358.181564][ T3661] vlan2: left promiscuous mode [ 358.186349][ T3661] bond7: left promiscuous mode [ 358.192372][ T3661] team0: left promiscuous mode [ 358.197223][ T3661] team0: left allmulticast mode [ 358.352100][ T3312] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 358.368727][ T3312] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 358.416221][ T3312] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 358.435075][ T3312] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 358.544941][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.574896][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.597259][T10652] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.604380][T10652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.617749][ T7788] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.624845][ T7788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.735569][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.873461][ T3771] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6479'. [ 358.911368][ T3312] veth0_vlan: entered promiscuous mode [ 358.942427][ T3312] veth1_vlan: entered promiscuous mode [ 358.984584][ T3312] veth0_macvtap: entered promiscuous mode [ 358.998087][ T3312] veth1_macvtap: entered promiscuous mode [ 359.013422][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.025583][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.039499][T10688] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.060825][T10688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.089168][T10688] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.111544][ T3786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6491'. [ 359.122858][T10688] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.135437][ T3787] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6483'. [ 359.444854][ T3824] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6493'. [ 359.489206][ T3855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3855 comm=syz.0.6494 [ 359.499945][ T3824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.527497][ T3859] vlan2: entered allmulticast mode [ 359.532769][ T3859] bond1: entered allmulticast mode [ 359.781984][ T3869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.800809][ T3869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.121355][ T3879] lo speed is unknown, defaulting to 1000 [ 360.520771][ T3919] netlink: 202920 bytes leftover after parsing attributes in process `syz.9.6507'. [ 360.623553][ T3919] loop9: detected capacity change from 0 to 8192 [ 360.946940][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 360.946954][ T29] audit: type=1326 audit(360.935:17545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 360.994919][ T29] audit: type=1400 audit(360.975:17546): avc: denied { ioctl } for pid=3932 comm="syz.9.6512" path="socket:[69334]" dev="sockfs" ino=69334 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 360.995815][ T29] audit: type=1326 audit(360.975:17547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 360.996135][ T29] audit: type=1326 audit(360.975:17548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3934 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f83bf151265 code=0x7ffc0000 [ 360.997061][ T29] audit: type=1326 audit(360.985:17549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 361.089408][ T29] audit: type=1326 audit(361.055:17550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 361.172558][ T29] audit: type=1326 audit(361.055:17551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 361.172598][ T29] audit: type=1326 audit(361.055:17552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 361.172630][ T29] audit: type=1326 audit(361.055:17553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 361.172702][ T29] audit: type=1326 audit(361.055:17554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3930 comm="syz.5.6511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bf11e9a9 code=0x7ffc0000 [ 361.432898][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6517'. [ 361.489585][ T3960] netlink: 3 bytes leftover after parsing attributes in process `syz.7.6520'. [ 361.508244][ T3960] 0ªX¹¦À: renamed from caif0 [ 361.524285][ T3960] 0ªX¹¦À: entered allmulticast mode [ 361.529745][ T3960] net_ratelimit: 14 callbacks suppressed [ 361.529798][ T3960] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 361.592828][ T3971] tipc: Enabling of bearer rejected, failed to enable media [ 361.644044][ T3981] netlink: 'syz.5.6528': attribute type 1 has an invalid length. [ 361.679947][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6528'. [ 361.694578][ T3981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.702747][ T3981] bond11: (slave batadv0): Enslaving as a backup interface with an up link [ 361.716804][ T3981] bond11 (unregistering): (slave batadv0): Releasing backup interface [ 361.728741][ T3981] bond11 (unregistering): Released all slaves [ 361.764099][ T4061] netlink: 'syz.0.6531': attribute type 1 has an invalid length. [ 361.775810][ T4063] ip6gre1: entered allmulticast mode [ 362.204586][ T4112] netlink: 'syz.7.6551': attribute type 13 has an invalid length. [ 362.223718][ T4112] gretap0: refused to change device tx_queue_len [ 362.231033][ T4112] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 362.651272][ T4148] netlink: 'syz.0.6565': attribute type 4 has an invalid length. [ 362.664137][ T4153] gtp0: entered promiscuous mode [ 362.905258][ T4222] __nla_validate_parse: 9 callbacks suppressed [ 362.905275][ T4222] netlink: 48 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 363.097223][ T4246] loop7: detected capacity change from 0 to 164 [ 363.110262][ T4246] netlink: 52 bytes leftover after parsing attributes in process `syz.7.6587'. [ 363.456523][ T4264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6592'. [ 364.060601][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6605'. [ 364.142437][ T4303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6607'. [ 364.151502][ T4303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6607'. [ 364.160541][ T4303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6607'. [ 364.185312][ T4303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6607'. [ 364.194446][ T4303] netlink: 'syz.1.6607': attribute type 6 has an invalid length. [ 364.296730][ T4319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4319 comm=syz.1.6611 [ 364.506057][ T4330] lo speed is unknown, defaulting to 1000 [ 364.808279][ T4388] wg2: entered promiscuous mode [ 364.813236][ T4388] wg2: entered allmulticast mode [ 364.916368][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6619'. [ 364.925418][ T4405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6619'. [ 364.934549][ T4405] netlink: 'syz.0.6619': attribute type 5 has an invalid length. [ 365.193623][ T4447] netlink: 'syz.7.6625': attribute type 1 has an invalid length. [ 365.221670][ T4447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.254229][ T4447] bond2 (unregistering): Released all slaves [ 365.363991][ T4531] loop7: detected capacity change from 0 to 128 [ 365.458343][ T4543] 8021q: adding VLAN 0 to HW filter on device bond16 [ 365.489325][ T4543] vlan1: entered allmulticast mode [ 365.494592][ T4543] bond16: entered allmulticast mode [ 365.544770][ T4537] lo speed is unknown, defaulting to 1000 [ 365.703083][ T4626] netlink: 'syz.0.6632': attribute type 13 has an invalid length. [ 365.962609][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.985343][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.549204][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 366.549219][ T29] audit: type=1326 audit(366.535:17710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2010055967 code=0x7ffc0000 [ 366.590600][ T4688] loop9: detected capacity change from 0 to 512 [ 366.606779][ T29] audit: type=1326 audit(366.535:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f200fffab89 code=0x7ffc0000 [ 366.626936][ T4688] vfat: Bad value for 'allow_utime' [ 366.629909][ T29] audit: type=1326 audit(366.535:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2010055967 code=0x7ffc0000 [ 366.658228][ T29] audit: type=1326 audit(366.535:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f200fffab89 code=0x7ffc0000 [ 366.681104][ T29] audit: type=1326 audit(366.535:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 366.704043][ T29] audit: type=1326 audit(366.535:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 366.727411][ T29] audit: type=1326 audit(366.565:17716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 366.750331][ T29] audit: type=1326 audit(366.565:17717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f201005e9e3 code=0x7ffc0000 [ 366.773224][ T29] audit: type=1326 audit(366.565:17718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f201005d45f code=0x7ffc0000 [ 366.779673][ T4690] lo speed is unknown, defaulting to 1000 [ 366.796394][ T29] audit: type=1326 audit(366.575:17719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4687 comm="syz.9.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f201005ea37 code=0x7ffc0000 [ 367.269758][ T4735] netlink: 'syz.1.6653': attribute type 1 has an invalid length. [ 367.310061][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 367.337568][ T4735] bond17: (slave batadv5): Enslaving as a backup interface with an up link [ 367.354897][ T4778] openvswitch: netlink: Message has 6 unknown bytes. [ 367.377459][ T4778] netlink: 'syz.5.6654': attribute type 10 has an invalid length. [ 367.395924][ T4782] netlink: 'syz.9.6656': attribute type 1 has an invalid length. [ 367.406187][ T4735] bond17 (unregistering): (slave batadv5): Releasing backup interface [ 367.425003][ T4735] bond17 (unregistering): Released all slaves [ 367.538209][ T4831] netlink: 'syz.1.6658': attribute type 1 has an invalid length. [ 367.574949][ T4841] netlink: 'syz.1.6660': attribute type 13 has an invalid length. [ 367.588542][ T4841] gretap0: refused to change device tx_queue_len [ 367.600634][ T4841] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 367.674725][ T4846] netlink: 'syz.9.6662': attribute type 13 has an invalid length. [ 367.734778][ T4846] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.742084][ T4846] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.844620][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.857720][ T4846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.952366][T10687] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.964285][T10687] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.000531][T10687] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.016256][T10687] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.249398][ T4869] __nla_validate_parse: 6 callbacks suppressed [ 368.249416][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.264937][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.270430][ T4873] loop7: detected capacity change from 0 to 2048 [ 368.294262][ T4873] EXT4-fs: Ignoring removed nobh option [ 368.300497][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.340139][ T4873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.345735][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.361484][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.373554][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.437861][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.446864][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.476415][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.483879][ T4869] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6670'. [ 368.525948][ T4894] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6675'. [ 368.606984][ T4894] wireguard0: entered promiscuous mode [ 368.612974][ T4894] wireguard0: entered allmulticast mode [ 368.723126][ T4907] loop9: detected capacity change from 0 to 512 [ 368.760758][ T4907] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 368.768931][ T4907] EXT4-fs (loop9): orphan cleanup on readonly fs [ 368.799842][ T4907] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 368.832690][ T4907] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 368.840888][ T4907] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6677: bg 0: block 40: padding at end of block bitmap is not set [ 368.858439][ T4907] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 368.869054][ T4907] EXT4-fs (loop9): 1 truncate cleaned up [ 368.875161][ T4907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 368.918647][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.320196][ T4931] netlink: 'syz.5.6682': attribute type 1 has an invalid length. [ 369.353058][ T4931] bond11: (slave geneve1): making interface the new active one [ 369.361617][ T4931] bond11: (slave geneve1): Enslaving as an active interface with an up link [ 369.375285][T10604] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 369.384268][T10604] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 369.394816][T10604] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 369.413080][ T4931] 8021q: adding VLAN 0 to HW filter on device bond11 [ 369.450090][T10604] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 369.526196][ T4916] Set syz1 is full, maxelem 65536 reached [ 369.654764][ T4997] tipc: Enabling of bearer rejected, failed to enable media [ 369.969008][ T5010] lo speed is unknown, defaulting to 1000 [ 370.686050][ T5104] loop9: detected capacity change from 0 to 164 [ 370.693499][ T5104] Unable to read rock-ridge attributes [ 371.187983][ T5142] wireguard4: entered promiscuous mode [ 371.194765][ T5142] wireguard4: entered allmulticast mode [ 371.491218][ T5164] netlink: 'syz.1.6723': attribute type 3 has an invalid length. [ 371.876755][ T3387] IPVS: starting estimator thread 0... [ 371.966705][ T5171] IPVS: using max 2400 ests per chain, 120000 per kthread [ 373.025961][ T5188] C: renamed from team_slave_0 (while UP) [ 373.224757][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 373.224775][ T29] audit: type=1326 audit(373.205:17923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.264760][ T5192] __nla_validate_parse: 7 callbacks suppressed [ 373.264778][ T5192] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6733'. [ 373.305360][ T29] audit: type=1326 audit(373.245:17924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.328561][ T29] audit: type=1326 audit(373.245:17925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.351531][ T29] audit: type=1326 audit(373.245:17926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.374641][ T29] audit: type=1326 audit(373.245:17927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.397722][ T29] audit: type=1326 audit(373.245:17928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.420618][ T29] audit: type=1326 audit(373.245:17929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.443876][ T29] audit: type=1326 audit(373.245:17930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.466803][ T29] audit: type=1326 audit(373.245:17931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.489708][ T29] audit: type=1326 audit(373.245:17932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5190 comm="syz.9.6733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 373.542287][ T5201] loop7: detected capacity change from 0 to 2048 [ 373.555854][ T36] IPVS: starting estimator thread 0... [ 373.575818][ T5201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.589627][ T5215] tipc: Disabling bearer [ 373.623707][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.647355][ T5206] IPVS: using max 2160 ests per chain, 108000 per kthread [ 373.809420][ T5234] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6747'. [ 373.835997][ T5237] loop7: detected capacity change from 0 to 512 [ 373.846357][ T5237] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 373.862272][ T5237] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 373.915918][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 373.926305][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6749'. [ 374.014564][ T5250] random: crng reseeded on system resumption [ 374.154021][ T5261] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6754'. [ 374.166260][ T5250] lo speed is unknown, defaulting to 1000 [ 374.299641][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6759'. [ 374.299674][ T5300] loop7: detected capacity change from 0 to 128 [ 374.326278][ T5300] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 374.334209][ T5300] FAT-fs (loop7): Filesystem has been set read-only [ 374.341179][ T5300] syz.7.6760: attempt to access beyond end of device [ 374.341179][ T5300] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 374.355224][ T5300] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 374.363201][ T5300] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 374.371968][ T5300] syz.7.6760: attempt to access beyond end of device [ 374.371968][ T5300] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 374.389271][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.389271][ T5302] loop7: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 374.402665][ T5302] Buffer I/O error on dev loop7, logical block 2065, async page read [ 374.416694][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.416694][ T5302] loop7: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 374.430587][ T5302] Buffer I/O error on dev loop7, logical block 2066, async page read [ 374.445788][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.445788][ T5302] loop7: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 374.459131][ T5302] Buffer I/O error on dev loop7, logical block 2067, async page read [ 374.468684][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.468684][ T5302] loop7: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 374.482158][ T5302] Buffer I/O error on dev loop7, logical block 2068, async page read [ 374.490521][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.490521][ T5302] loop7: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 374.504122][ T5302] Buffer I/O error on dev loop7, logical block 2069, async page read [ 374.541801][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.541801][ T5302] loop7: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 374.555217][ T5302] Buffer I/O error on dev loop7, logical block 2070, async page read [ 374.570573][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.570573][ T5302] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 374.583909][ T5302] Buffer I/O error on dev loop7, logical block 2071, async page read [ 374.597093][ T5302] syz.7.6760: attempt to access beyond end of device [ 374.597093][ T5302] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 374.610768][ T5302] Buffer I/O error on dev loop7, logical block 2072, async page read [ 374.619194][ T5300] Buffer I/O error on dev loop7, logical block 2065, async page read [ 374.630518][ T5312] loop9: detected capacity change from 0 to 2048 [ 374.638925][ T5300] Buffer I/O error on dev loop7, logical block 2066, async page read [ 374.655811][ T5302] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 374.674561][ T5302] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 374.694504][ T5312] loop9: p1 < > p4 [ 374.738993][ T5312] loop9: p4 size 8388608 extends beyond EOD, truncated [ 374.746983][ T5305] lo speed is unknown, defaulting to 1000 [ 374.822010][ T5326] loop7: detected capacity change from 0 to 512 [ 374.847000][ T5326] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 374.860215][ T5352] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6770'. [ 374.866063][ T5326] System zones: 1-12 [ 374.869417][ T5352] netlink: 260 bytes leftover after parsing attributes in process `syz.0.6770'. [ 374.883335][ T5326] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm *}[@: error while reading EA inode 32 err=-116 [ 374.899832][ T5326] EXT4-fs (loop7): Remounting filesystem read-only [ 374.906619][ T5326] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 374.918606][ T5326] EXT4-fs (loop7): 1 orphan inode deleted [ 374.924858][ T5326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.986249][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.051807][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6771'. [ 375.084959][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6771'. [ 375.181378][ T5356] lo speed is unknown, defaulting to 1000 [ 375.274502][ T5391] syzkaller0: entered promiscuous mode [ 375.280332][ T5391] syzkaller0: entered allmulticast mode [ 375.433773][ T5424] bridge5: entered allmulticast mode [ 375.439543][ T5423] loop7: detected capacity change from 0 to 512 [ 375.448775][ T5423] EXT4-fs: Ignoring removed i_version option [ 375.462923][ T5423] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 375.483685][ T5423] EXT4-fs (loop7): 1 truncate cleaned up [ 375.490323][ T5423] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.694622][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.731910][ T5444] loop7: detected capacity change from 0 to 512 [ 375.737737][ T5440] loop9: detected capacity change from 0 to 1024 [ 375.746016][ T5440] EXT4-fs: test_dummy_encryption option not supported [ 375.768470][ T5444] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.805468][ T5444] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 375.813782][ T5444] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 375.836076][ T5449] veth1_to_team: entered promiscuous mode [ 375.843255][ T5449] bond_slave_0: entered promiscuous mode [ 375.849429][ T5449] debugfs: 'hsr0' already exists in 'hsr' [ 375.855408][ T5449] Cannot create hsr debugfs directory [ 375.861026][ T5449] hsr0: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 375.871761][ T5449] hsr0: Slave B (bond_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.878069][ T5459] loop9: detected capacity change from 0 to 512 [ 375.882425][ T5449] hsr0: entered promiscuous mode [ 375.900478][ T5459] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.935695][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.967871][ T5472] tmpfs: Bad value for 'mpol' [ 375.991834][ T5475] netlink: 'syz.5.6794': attribute type 4 has an invalid length. [ 376.003456][ T5459] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.6790: iget: bad i_size value: 2533274857506816 [ 376.009326][ T5475] netlink: 'syz.5.6794': attribute type 4 has an invalid length. [ 376.026309][ T3380] lo speed is unknown, defaulting to 1000 [ 376.032245][ T3380] syz0: Port: 1 Link ACTIVE [ 376.058634][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.160454][ T5489] loop7: detected capacity change from 0 to 4096 [ 376.171984][ T5489] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.202335][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.237657][ T5502] loop7: detected capacity change from 0 to 512 [ 376.261493][ T5502] EXT4-fs (loop7): too many log groups per flexible block group [ 376.269316][ T5502] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 376.276273][ T5502] EXT4-fs (loop7): mount failed [ 376.285427][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x1 [ 376.292997][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.300493][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.307936][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.315497][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.322904][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.330367][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.337919][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.345413][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.352825][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.360228][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.367655][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.375044][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.382459][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.389994][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.397501][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.405069][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.412624][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.420322][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.427964][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.435458][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.443019][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.450477][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.457992][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.465518][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.472941][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.480521][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.487959][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.495426][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.502875][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.510321][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.517786][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.525290][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 376.532736][ T3380] hid-generic 0000:0000:0000.000A: unknown main item tag 0x1 [ 376.541037][ T3380] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 376.558618][ T5513] tipc: Disabling bearer [ 376.621150][ T5522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6807'. [ 376.725347][ T5572] loop7: detected capacity change from 0 to 2048 [ 376.747407][ T5572] loop7: p1 < > p4 [ 376.752088][ T5572] loop7: p4 size 8388608 extends beyond EOD, truncated [ 376.961033][ T5600] syzkaller0: entered promiscuous mode [ 376.966567][ T5600] syzkaller0: entered allmulticast mode [ 377.743335][ T5637] macsec0: entered allmulticast mode [ 377.794203][ T5642] loop9: detected capacity change from 0 to 128 [ 377.811657][ T5631] lo speed is unknown, defaulting to 1000 [ 377.829361][ T5642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 377.837395][ T5642] FAT-fs (loop9): Filesystem has been set read-only [ 377.877311][ T5642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 377.885387][ T5642] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 377.962027][ T5674] netlink: 'syz.5.6835': attribute type 1 has an invalid length. [ 378.023247][ T5674] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 378.080106][ T5674] veth17: entered promiscuous mode [ 378.091562][ T5674] bond12: (slave veth17): Enslaving as a backup interface with a down link [ 378.137821][ T5736] netlink: 'syz.1.6839': attribute type 4 has an invalid length. [ 378.385668][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 378.385685][ T29] audit: type=1326 audit(378.365:18255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.419094][ T29] audit: type=1326 audit(378.405:18256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.442511][ T29] audit: type=1326 audit(378.405:18257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.465426][ T29] audit: type=1326 audit(378.405:18258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.516633][ T29] audit: type=1326 audit(378.415:18259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.539770][ T29] audit: type=1326 audit(378.415:18260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.562934][ T29] audit: type=1326 audit(378.415:18261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.586103][ T29] audit: type=1326 audit(378.415:18262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 378.609080][ T29] audit: type=1400 audit(378.415:18263): avc: denied { getopt } for pid=5755 comm="syz.9.6847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 378.628164][ T29] audit: type=1326 audit(378.415:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5755 comm="syz.9.6847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 380.037672][ T5769] lo speed is unknown, defaulting to 1000 [ 380.332415][ T5809] __nla_validate_parse: 6 callbacks suppressed [ 380.332430][ T5809] netlink: 304 bytes leftover after parsing attributes in process `syz.9.6857'. [ 380.366766][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6857'. [ 380.631798][ T5823] sch_fq: defrate 4294967295 ignored. [ 380.771136][ T5829] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6861'. [ 380.797514][ T5831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6862'. [ 380.818389][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6863'. [ 380.827433][ T5833] netlink: 'syz.1.6863': attribute type 5 has an invalid length. [ 380.835174][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6863'. [ 380.857451][ T5833] geneve1: entered promiscuous mode [ 380.862777][ T5833] geneve1: entered allmulticast mode [ 380.889478][T10696] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 380.898493][T10696] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 380.909098][T10696] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 380.943201][T10696] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 381.098044][ T5852] loop9: detected capacity change from 0 to 512 [ 381.115350][ T5852] ext4: Bad value for 'init_itable' [ 381.134250][ T5852] loop9: detected capacity change from 0 to 2048 [ 381.189832][ T5863] bridge2: entered allmulticast mode [ 381.242460][ T5852] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.297585][ T5852] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6869'. [ 381.314943][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6873'. [ 381.359663][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.387595][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6873'. [ 381.433031][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6873'. [ 381.543100][ T5860] lo speed is unknown, defaulting to 1000 [ 381.611387][ T5910] vlan2: entered promiscuous mode [ 381.616687][ T5910] vlan2: entered allmulticast mode [ 381.621843][ T5910] hsr_slave_1: entered allmulticast mode [ 381.733448][ T5927] ÿÿÿÿÿÿ: renamed from vlan1 [ 381.896720][ T5940] loop9: detected capacity change from 0 to 512 [ 381.918950][ T5940] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #3: comm syz.9.6885: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 381.956652][ T5940] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.6885: Bad quota inode: 3, type: 0 [ 381.970372][ T5940] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 381.986959][ T5940] EXT4-fs (loop9): mount failed [ 382.552907][ T5959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5959 comm=syz.1.6889 [ 382.748655][ T5964] loop7: detected capacity change from 0 to 1024 [ 382.760138][ T5964] EXT4-fs: Ignoring removed nobh option [ 382.761280][ T5980] netlink: 'syz.9.6893': attribute type 10 has an invalid length. [ 382.765808][ T5964] EXT4-fs: Ignoring removed bh option [ 382.783526][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.792067][ T5980] bond0: (slave team0): Enslaving as an active interface with an up link [ 382.805254][ T5964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.861228][ T5980] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.869568][ T5980] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 382.948817][ T6024] netlink: 'syz.0.6895': attribute type 5 has an invalid length. [ 382.986058][ T6025] syzkaller0: entered promiscuous mode [ 382.991912][ T6025] syzkaller0: entered allmulticast mode [ 383.002068][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.041883][ T6024] geneve2: entered promiscuous mode [ 383.047197][ T6024] geneve2: entered allmulticast mode [ 383.067298][T10606] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 383.091171][T10606] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 383.140998][T10606] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 383.148332][ T6040] bio_check_eod: 26 callbacks suppressed [ 383.148354][ T6040] syz.0.6898: attempt to access beyond end of device [ 383.148354][ T6040] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 383.169398][ T7778] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 383.197389][ T6045] loop9: detected capacity change from 0 to 512 [ 383.215427][ T6045] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 383.225984][ T6040] FAT-fs (loop1): unable to read boot sector [ 383.236125][ T6045] EXT4-fs (loop9): 1 truncate cleaned up [ 383.244727][ T6045] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.280490][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.477862][ T6034] lo speed is unknown, defaulting to 1000 [ 383.800965][ T6055] lo speed is unknown, defaulting to 1000 [ 383.913607][ T6096] pim6reg: left allmulticast mode [ 384.147162][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 384.147242][ T29] audit: type=1326 audit(384.135:18378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.205155][ T29] audit: type=1326 audit(384.155:18379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.228158][ T29] audit: type=1326 audit(384.165:18380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.251206][ T29] audit: type=1326 audit(384.165:18381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.327588][ T29] audit: type=1326 audit(384.255:18382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.350745][ T29] audit: type=1326 audit(384.255:18383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.373801][ T29] audit: type=1326 audit(384.255:18384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.396988][ T29] audit: type=1326 audit(384.255:18385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.420302][ T29] audit: type=1326 audit(384.255:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.443280][ T29] audit: type=1326 audit(384.255:18387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6111 comm="syz.9.6906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 384.598452][ T6130] netlink: 'syz.1.6913': attribute type 13 has an invalid length. [ 384.621439][T10641] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 384.642086][T10641] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 384.663454][T10641] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 384.675935][T10641] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 384.794661][ T6135] lo speed is unknown, defaulting to 1000 [ 385.571210][ T6196] lo speed is unknown, defaulting to 1000 [ 386.465630][ T6235] __nla_validate_parse: 6 callbacks suppressed [ 386.465651][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6931'. [ 387.127399][ T6268] lo speed is unknown, defaulting to 1000 [ 387.561631][ T6305] lo speed is unknown, defaulting to 1000 [ 387.679961][ T6340] 0ªX¹¦D: left allmulticast mode [ 387.686830][ T6340] wg2: left promiscuous mode [ 387.691507][ T6340] wg2: left allmulticast mode [ 387.708159][ T6340] batadv_slave_0: left promiscuous mode [ 387.714976][ T6340] ip6gre1: left allmulticast mode [ 387.720429][ T6340] hsr1: left promiscuous mode [ 387.725607][ T6340] geneve2: left allmulticast mode [ 387.731817][ T6340] bond5: left promiscuous mode [ 387.736909][ T6340] ÿÿÿÿÿÿ: left allmulticast mode [ 387.742423][ T6340] vlan0: left promiscuous mode [ 387.747307][ T6340] bond7: left promiscuous mode [ 387.773287][ T6340] bond9: left promiscuous mode [ 387.870686][ T6340] bridge5: left promiscuous mode [ 387.893786][ T6340] veth17: left promiscuous mode [ 387.926916][ T10] lo speed is unknown, defaulting to 1000 [ 387.932699][ T10] syz0: Port: 1 Link DOWN [ 387.937423][T10641] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 387.966856][T10641] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 387.975345][T10641] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 388.017732][ T6351] loop7: detected capacity change from 0 to 128 [ 388.061318][T10641] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 388.077398][ T6351] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.132068][ T6345] lo speed is unknown, defaulting to 1000 [ 389.142840][ T6397] loop9: detected capacity change from 0 to 512 [ 389.162636][ T6397] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.562895][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.573827][ T1846] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.206866][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 390.206933][ T29] audit: type=1326 audit(390.125:18449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.236155][ T29] audit: type=1326 audit(390.125:18450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.259294][ T29] audit: type=1326 audit(390.125:18451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.282300][ T29] audit: type=1326 audit(390.125:18452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.305297][ T29] audit: type=1326 audit(390.125:18453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.328671][ T29] audit: type=1326 audit(390.135:18454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.351607][ T29] audit: type=1326 audit(390.135:18455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.374525][ T29] audit: type=1326 audit(390.135:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0367b5e9a9 code=0x7ffc0000 [ 390.397465][ T29] audit: type=1326 audit(390.135:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0367b5d310 code=0x7ffc0000 [ 390.420908][ T29] audit: type=1326 audit(390.135:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.0.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0367b5d310 code=0x7ffc0000 [ 390.622676][ T6444] netlink: 'syz.0.6963': attribute type 1 has an invalid length. [ 390.631046][ T6443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6964'. [ 390.660392][ T6443] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6964'. [ 390.782652][ T6446] bond11: (slave geneve3): making interface the new active one [ 390.850405][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6963'. [ 390.879775][ T6446] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 390.891277][T10597] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 390.994526][T10597] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 391.006114][ T6444] 8021q: adding VLAN 0 to HW filter on device bond11 [ 391.046032][T10597] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 391.087643][T10597] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 391.163583][ T6492] netlink: 'syz.0.6968': attribute type 10 has an invalid length. [ 391.213164][ T6492] netlink: 'syz.0.6968': attribute type 4 has an invalid length. [ 391.221020][ T6492] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6968'. [ 391.903605][ T6527] loop7: detected capacity change from 0 to 736 [ 391.932934][ T6527] rock: directory entry would overflow storage [ 391.939323][ T6527] rock: sig=0x3b10, size=4, remaining=3 [ 391.984404][ T6527] netlink: 'syz.7.6977': attribute type 27 has an invalid length. [ 392.123403][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.130613][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.183897][ T6527] 0ªX¹¦À: left allmulticast mode [ 392.279484][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.310633][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.428213][ T6527] ip6gre1: left allmulticast mode [ 392.441492][ T6527] bridge2: left allmulticast mode [ 392.470219][T10641] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.508829][T10641] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.550875][T10641] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.591528][T10641] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.281702][ T6583] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 393.439225][ T6605] loop7: detected capacity change from 0 to 1024 [ 393.518395][ T6605] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.571753][ T6605] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 393.629677][ T6605] EXT4-fs (loop7): Remounting filesystem read-only [ 393.646642][ T6605] EXT4-fs (loop7): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 393.700126][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.725113][ T6616] netlink: 'syz.0.6999': attribute type 83 has an invalid length. [ 393.917797][ T6593] lo speed is unknown, defaulting to 1000 [ 393.973472][ T6631] loop9: detected capacity change from 0 to 512 [ 393.998577][ T6631] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.7004: casefold flag without casefold feature [ 394.060132][ T6631] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.7004: couldn't read orphan inode 15 (err -117) [ 394.117161][ T6631] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.136765][ T6647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7005'. [ 394.237418][ T6623] lo speed is unknown, defaulting to 1000 [ 394.250519][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7006'. [ 394.317464][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.372884][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7008'. [ 394.392340][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7008'. [ 394.558999][ T6709] netlink: 'syz.7.7012': attribute type 21 has an invalid length. [ 394.566984][ T6709] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7012'. [ 394.596830][ T6709] netlink: 'syz.7.7012': attribute type 4 has an invalid length. [ 394.604615][ T6709] netlink: 3 bytes leftover after parsing attributes in process `syz.7.7012'. [ 394.748700][ T6718] loop7: detected capacity change from 0 to 512 [ 394.802793][ T6718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.882513][ T6718] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7014: bg 0: block 289: padding at end of block bitmap is not set [ 394.968052][ T6718] : renamed from bond0 [ 395.070427][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.234084][ T6737] loop9: detected capacity change from 0 to 1024 [ 395.284964][ T6732] lo speed is unknown, defaulting to 1000 [ 395.298100][ T6737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.333745][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 395.333808][ T29] audit: type=1400 audit(395.315:18643): avc: denied { read write } for pid=6734 comm="syz.9.7018" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.362375][ T29] audit: type=1400 audit(395.315:18644): avc: denied { open } for pid=6734 comm="syz.9.7018" path="/101/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.422097][ T29] audit: type=1400 audit(395.405:18645): avc: denied { write } for pid=6747 comm="syz.5.7020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 395.442236][ T29] audit: type=1400 audit(395.405:18646): avc: denied { name_bind } for pid=6747 comm="syz.5.7020" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 395.450957][ T6737] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.7018: Allocating blocks 449-513 which overlap fs metadata [ 395.463711][ T29] audit: type=1400 audit(395.405:18647): avc: denied { node_bind } for pid=6747 comm="syz.5.7020" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 395.544634][ T6771] netlink: 'syz.0.7022': attribute type 1 has an invalid length. [ 395.623504][ T29] audit: type=1400 audit(395.505:18648): avc: denied { read append open } for pid=6734 comm="syz.9.7018" path="/101/file1/cgroup.controllers" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 395.633123][ T6801] bond12: (slave vxcan1): The slave device specified does not support setting the MAC address [ 395.648230][ T29] audit: type=1400 audit(395.505:18649): avc: denied { mac_admin } for pid=6734 comm="syz.9.7018" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 395.679140][ T29] audit: type=1400 audit(395.505:18650): avc: denied { relabelto } for pid=6734 comm="syz.9.7018" name="cgroup.controllers" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="@" [ 395.681073][ T6734] EXT4-fs (loop9): pa ffff888106d8eaf0: logic 48, phys. 177, len 21 [ 395.711465][ T6734] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 395.734580][ T6801] bond12: (slave vxcan1): Error -95 calling set_mac_address [ 395.760285][ T6771] gretap2: entered promiscuous mode [ 395.780655][ T6771] bond12: (slave gretap2): making interface the new active one [ 395.799651][ T6771] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 395.809509][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.828759][ T6816] macvlan0: entered promiscuous mode [ 395.834209][ T6816] macvlan0: entered allmulticast mode [ 395.839931][ T29] audit: type=1400 audit(395.815:18651): avc: denied { create } for pid=6818 comm="syz.7.7023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 395.874120][ T6824] loop9: detected capacity change from 0 to 2048 [ 395.891099][ T29] audit: type=1400 audit(395.835:18652): avc: denied { open } for pid=6823 comm="syz.9.7024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 395.912130][ T6816] bond12: entered promiscuous mode [ 395.919505][ T6816] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 395.933061][ T6816] bond12: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 395.949420][ T6830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6830 comm=syz.7.7023 [ 395.968486][ T6824] Alternate GPT is invalid, using primary GPT. [ 395.974823][ T6824] loop9: p2 p3 p7 [ 395.980485][ T6816] bond12: left promiscuous mode [ 396.018948][ T6824] vhci_hcd: invalid port number 254 [ 396.024231][ T6824] vhci_hcd: invalid port number 254 [ 396.030577][ T6824] IPVS: Error connecting to the multicast addr [ 396.231684][ T6855] bond11: (slave geneve3): Releasing active interface [ 396.250469][ T6855] bond12: (slave gretap2): Releasing active interface [ 396.267080][T10691] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.278228][T10691] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.286864][T10691] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.309833][T10691] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 396.335035][ T6859] loop9: detected capacity change from 0 to 512 [ 396.343636][ T6859] EXT4-fs: Ignoring removed mblk_io_submit option [ 396.351012][ T6859] EXT4-fs: Invalid want_extra_isize 8 [ 396.385973][ T6871] openvswitch: netlink: Message has 6 unknown bytes. [ 396.536848][ T6881] Falling back ldisc for ttyS3. [ 397.108010][ T6897] lo speed is unknown, defaulting to 1000 [ 398.634481][ T6928] netlink: 'syz.0.7048': attribute type 1 has an invalid length. [ 398.683236][ T6928] 8021q: adding VLAN 0 to HW filter on device bond13 [ 398.793844][ T6967] loop7: detected capacity change from 0 to 764 [ 398.804551][ T6967] rock: directory entry would overflow storage [ 398.810881][ T6967] rock: sig=0x4f50, size=4, remaining=3 [ 398.816484][ T6967] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 398.976831][ T6994] netlink: 'syz.0.7066': attribute type 4 has an invalid length. [ 399.061723][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.070408][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.234499][ T7005] netlink: 'syz.0.7066': attribute type 4 has an invalid length. [ 399.451526][ T6985] lo speed is unknown, defaulting to 1000 [ 399.714966][ T7040] netlink: 'syz.0.7060': attribute type 3 has an invalid length. [ 399.723063][ T7040] netlink: 'syz.0.7060': attribute type 3 has an invalid length. [ 399.730988][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7060'. [ 399.835433][ T7012] lo speed is unknown, defaulting to 1000 [ 400.006718][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7063'. [ 400.125393][ T7052] lo speed is unknown, defaulting to 1000 [ 400.701503][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 400.701519][ T29] audit: type=1326 audit(400.685:18804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.1.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 400.765916][ T29] audit: type=1326 audit(400.715:18805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.1.7067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 400.802529][ T29] audit: type=1400 audit(400.785:18806): avc: denied { read } for pid=7100 comm="syz.7.7069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 400.881104][ T29] audit: type=1400 audit(400.865:18807): avc: denied { connect } for pid=7104 comm="syz.5.7070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 401.010923][ T7119] IPv6: NLM_F_CREATE should be specified when creating new route [ 401.024411][ T29] audit: type=1400 audit(401.005:18808): avc: denied { name_connect } for pid=7120 comm="syz.7.7075" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 401.173392][ T29] audit: type=1400 audit(401.035:18809): avc: denied { ioctl } for pid=7108 comm="syz.5.7073" path="socket:[74578]" dev="sockfs" ino=74578 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 401.198769][ T29] audit: type=1400 audit(401.035:18810): avc: denied { getopt } for pid=7120 comm="syz.7.7075" lport=36913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 401.219481][ T29] audit: type=1326 audit(401.155:18811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.7.7075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 401.242823][ T29] audit: type=1326 audit(401.155:18812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.7.7075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 401.265928][ T29] audit: type=1326 audit(401.155:18813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.7.7075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 401.875166][ T7150] lo: entered allmulticast mode [ 402.055010][ T7168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.074398][ T7168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.131214][ T7178] tipc: Enabling of bearer rejected, failed to enable media [ 402.216858][ T7186] netlink: 'syz.5.7090': attribute type 10 has an invalid length. [ 402.224964][ T7186] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7090'. [ 402.602779][ T7192] lo speed is unknown, defaulting to 1000 [ 402.690795][ T7208] loop9: detected capacity change from 0 to 512 [ 402.699799][ T7208] EXT4-fs: Ignoring removed nobh option [ 402.708492][ T7206] netlink: 'syz.1.7094': attribute type 1 has an invalid length. [ 402.730791][ T7206] 8021q: adding VLAN 0 to HW filter on device bond17 [ 402.807351][ T7208] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.7095: iget: bad i_size value: 38620345925642 [ 402.830238][ T7208] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.7095: couldn't read orphan inode 15 (err -117) [ 402.845430][ T7206] bond17: (slave veth21): Enslaving as an active interface with a down link [ 402.858577][ T7274] loop7: detected capacity change from 0 to 512 [ 402.869822][ T7274] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 402.882852][ T7270] vlan1: entered allmulticast mode [ 402.888167][ T7270] veth1: entered allmulticast mode [ 402.894439][ T7208] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.899839][ T7274] EXT4-fs (loop7): orphan cleanup on readonly fs [ 402.924855][ T7270] bond17: (slave vlan1): Opening slave failed [ 402.934630][ T7274] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.7096: Block bitmap for bg 0 marked uninitialized [ 402.980303][ T7274] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 403.016829][ T7274] EXT4-fs (loop7): 1 orphan inode deleted [ 403.033258][ T7274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 403.079437][ T7274] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 403.097948][ T7274] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 403.118896][ T7274] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.7096: Block bitmap for bg 0 marked uninitialized [ 403.134646][ T7274] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.7096: Block bitmap for bg 0 marked uninitialized [ 403.158415][ T7274] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.7096: Block bitmap for bg 0 marked uninitialized [ 403.180027][ T7274] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.7096: Block bitmap for bg 0 marked uninitialized [ 403.200719][ T7274] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.7096: Block bitmap for bg 0 marked uninitialized [ 403.223449][ T7274] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:517: comm syz.7.7096: Block bitmap for bg 0 marked uninitialized [ 403.270869][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.535952][ T7306] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.7099'. [ 404.741340][T10590] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm kworker/u8:20: bg 0: block 5: invalid block bitmap [ 404.991656][T10590] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 405.004570][T10590] EXT4-fs (loop9): This should not happen!! Data will be lost [ 405.004570][T10590] [ 405.014298][T10590] EXT4-fs (loop9): Total free blocks count 0 [ 405.020352][T10590] EXT4-fs (loop9): Free/Dirty block details [ 405.026438][T10590] EXT4-fs (loop9): free_blocks=0 [ 405.031523][T10590] EXT4-fs (loop9): dirty_blocks=7664 [ 405.036877][T10590] EXT4-fs (loop9): Block reservation details [ 405.042949][T10590] EXT4-fs (loop9): i_reserved_data_blocks=7664 [ 405.091270][ T7315] bond17: (slave veth21): Releasing active interface [ 405.103164][T10590] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 405.157096][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7105'. [ 405.188572][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7105'. [ 405.196867][ T7301] lo speed is unknown, defaulting to 1000 [ 405.278950][ T7332] loop9: detected capacity change from 0 to 256 [ 405.316164][ T7332] FAT-fs (loop9): Directory bread(block 64) failed [ 405.333989][ T7332] FAT-fs (loop9): Directory bread(block 65) failed [ 405.341359][ T7332] FAT-fs (loop9): Directory bread(block 66) failed [ 405.350814][ T7332] FAT-fs (loop9): Directory bread(block 67) failed [ 405.358594][ T7332] FAT-fs (loop9): Directory bread(block 68) failed [ 405.365700][ T7332] FAT-fs (loop9): Directory bread(block 69) failed [ 405.376498][ T7332] FAT-fs (loop9): Directory bread(block 70) failed [ 405.401504][ T7332] FAT-fs (loop9): Directory bread(block 71) failed [ 405.421739][ T7332] FAT-fs (loop9): Directory bread(block 72) failed [ 405.438260][ T7332] FAT-fs (loop9): Directory bread(block 73) failed [ 405.499295][ T7332] gtp: attempt to access beyond end of device [ 405.499295][ T7332] loop9: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 405.598396][ T7361] netlink: 'syz.5.7106': attribute type 13 has an invalid length. [ 405.626426][ T7326] lo speed is unknown, defaulting to 1000 [ 405.678015][ T7361] 8021q: adding VLAN 0 to HW filter on device  [ 405.753231][ T7361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.769152][T17734] lo speed is unknown, defaulting to 1000 [ 405.774907][T17734] syz0: Port: 1 Link ACTIVE [ 406.732847][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 406.732865][ T29] audit: type=1400 audit(406.715:18878): avc: denied { create } for pid=7416 comm="syz.0.7120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 406.943553][ T29] audit: type=1400 audit(406.745:18879): avc: denied { write } for pid=7416 comm="syz.0.7120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 407.063053][ T29] audit: type=1400 audit(407.045:18880): avc: denied { execute } for pid=7423 comm="syz.0.7131" path="/1385/pids.events" dev="tmpfs" ino=7248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 407.108374][ T29] audit: type=1400 audit(407.055:18881): avc: denied { read } for pid=7421 comm="syz.7.7121" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 407.131463][ T29] audit: type=1400 audit(407.055:18882): avc: denied { open } for pid=7421 comm="syz.7.7121" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 407.272862][ T29] audit: type=1400 audit(407.115:18883): avc: denied { write } for pid=7421 comm="syz.7.7121" name="tcp6" dev="proc" ino=4026533783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 407.295162][ T29] audit: type=1400 audit(407.145:18884): avc: denied { connect } for pid=7425 comm="syz.5.7122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 407.317177][ T29] audit: type=1326 audit(407.285:18885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 407.340247][ T29] audit: type=1326 audit(407.285:18886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 407.363276][ T29] audit: type=1326 audit(407.295:18887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 407.388229][ T7442] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7442 comm=syz.5.7125 [ 407.480525][ T7442] netlink: 'syz.5.7125': attribute type 11 has an invalid length. [ 407.488491][ T7442] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7125'. [ 407.543773][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7136'. [ 407.553026][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7136'. [ 407.564747][ T7450] lo speed is unknown, defaulting to 1000 [ 407.571553][T10590] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.583970][T10590] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.607107][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7136'. [ 407.616017][ T7475] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7136'. [ 407.649968][T10590] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.709105][T10590] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.725757][ T7462] lo speed is unknown, defaulting to 1000 [ 408.431205][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7142'. [ 408.638729][ T7539] lo speed is unknown, defaulting to 1000 [ 408.976726][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7146'. [ 409.064168][ T7581] netlink: 22 bytes leftover after parsing attributes in process `syz.1.7148'. [ 409.131719][ T7570] loop9: detected capacity change from 0 to 8192 [ 409.166956][ T7570] loop9: p1 p2 < > p3 p4 < p5 > [ 409.172105][ T7570] loop9: partition table partially beyond EOD, truncated [ 409.179541][ T7570] loop9: p1 size 100663296 extends beyond EOD, truncated [ 409.187879][ T7570] loop9: p2 start 591104 is beyond EOD, truncated [ 409.194453][ T7570] loop9: p3 start 33572980 is beyond EOD, truncated [ 409.201999][ T7570] loop9: p5 size 100663296 extends beyond EOD, truncated [ 409.215621][ T7595] batadv_slave_0: entered promiscuous mode [ 409.222241][ T7595] batadv_slave_0: left promiscuous mode [ 409.324296][ T7609] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7609 comm=syz.9.7153 [ 409.448354][ T7638] SELinux: failed to load policy [ 409.984097][ T7647] tipc: Enabling of bearer rejected, failed to enable media [ 409.986021][ T7643] loop9: detected capacity change from 0 to 8192 [ 410.035032][ T7643] vlan3: entered promiscuous mode [ 410.040246][ T7643] team0: entered promiscuous mode [ 410.045461][ T7643] team_slave_0: entered promiscuous mode [ 410.051486][ T7643] team_slave_1: entered promiscuous mode [ 410.094874][ T7644] lo speed is unknown, defaulting to 1000 [ 410.185019][ T7685] loop9: detected capacity change from 0 to 512 [ 410.318943][ T7699] loop7: detected capacity change from 0 to 512 [ 410.497280][ T7688] lo speed is unknown, defaulting to 1000 [ 410.596847][ T7734] loop7: detected capacity change from 0 to 512 [ 410.603798][ T7734] EXT4-fs: Ignoring removed nobh option [ 410.659375][ T7734] EXT4-fs error (device loop7): ext4_orphan_get:1393: inode #15: comm syz.7.7167: iget: bad i_size value: 38620345925642 [ 410.672924][ T7734] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.7167: couldn't read orphan inode 15 (err -117) [ 410.694057][ T7729] lo speed is unknown, defaulting to 1000 [ 410.701423][ T7734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.758623][ T7763] syzkaller0: entered promiscuous mode [ 410.764336][ T7763] syzkaller0: entered allmulticast mode [ 411.015159][ T7789] __nla_validate_parse: 2 callbacks suppressed [ 411.015181][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7174'. [ 411.110563][ T7799] netlink: 'syz.1.7178': attribute type 4 has an invalid length. [ 411.128101][ T7799] netlink: 'syz.1.7178': attribute type 4 has an invalid length. [ 411.150569][T10607] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm kworker/u8:37: bg 0: block 5: invalid block bitmap [ 411.163464][T10607] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 411.176000][T10607] EXT4-fs (loop7): This should not happen!! Data will be lost [ 411.176000][T10607] [ 411.185763][T10607] EXT4-fs (loop7): Total free blocks count 0 [ 411.191849][T10607] EXT4-fs (loop7): Free/Dirty block details [ 411.197834][T10607] EXT4-fs (loop7): free_blocks=0 [ 411.202949][T10607] EXT4-fs (loop7): dirty_blocks=16024 [ 411.208445][T10607] EXT4-fs (loop7): Block reservation details [ 411.214446][T10607] EXT4-fs (loop7): i_reserved_data_blocks=16024 [ 411.290357][T10607] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 411.628410][ T7822] Invalid ELF header magic: != ELF [ 411.807928][ T7841] loop7: detected capacity change from 0 to 512 [ 411.854852][ T7841] EXT4-fs (loop7): blocks per group (34) and clusters per group (32768) inconsistent [ 412.187308][ T7854] lo speed is unknown, defaulting to 1000 [ 412.358377][ T7893] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7192'. [ 412.411444][ T7893] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7192'. [ 412.444580][ T7895] loop7: detected capacity change from 0 to 512 [ 412.460830][ T7895] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 412.482642][ T7895] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.7193: invalid block [ 412.517898][ T7895] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7193: invalid indirect mapped block 4294967295 (level 1) [ 412.549799][ T7895] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.7193: invalid indirect mapped block 4294967295 (level 1) [ 412.570814][ T7895] EXT4-fs (loop7): 2 truncates cleaned up [ 412.580536][ T7895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.598556][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 412.598573][ T29] audit: type=1400 audit(412.585:19219): avc: denied { setopt } for pid=7894 comm="syz.7.7193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 412.641489][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.652718][ T29] audit: type=1400 audit(412.615:19220): avc: denied { setattr } for pid=7894 comm="syz.7.7193" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.687712][ T29] audit: type=1400 audit(412.675:19221): avc: denied { mount } for pid=7907 comm="syz.7.7196" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 412.734789][ T7910] tipc: Started in network mode [ 412.736019][ T29] audit: type=1326 audit(412.675:19222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7907 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 412.739742][ T7910] tipc: Node identity ac14140f, cluster identity 4711 [ 412.762838][ T29] audit: type=1326 audit(412.675:19223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7907 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 412.769685][ T7910] tipc: New replicast peer: 0.0.255.255 [ 412.792580][ T29] audit: type=1326 audit(412.675:19224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7907 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 412.798371][ T7910] tipc: Enabled bearer , priority 10 [ 412.821076][ T29] audit: type=1326 audit(412.675:19225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7907 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 412.821115][ T29] audit: type=1326 audit(412.675:19226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7907 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 412.873093][ T29] audit: type=1326 audit(412.685:19227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7907 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 412.896644][ T29] audit: type=1326 audit(412.685:19228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7907 comm="syz.7.7196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bcc02e9a9 code=0x7ffc0000 [ 412.954022][ T7912] loop9: detected capacity change from 0 to 512 [ 412.981018][ T7923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7200'. [ 412.995611][ T7925] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7201'. [ 413.053469][ T7923] 8021q: adding VLAN 0 to HW filter on device bond18 [ 413.092314][ T7965] vlan1: entered allmulticast mode [ 413.097537][ T7965] bond18: entered allmulticast mode [ 413.160513][ T7969] debugfs: 'ttyS3' already exists in 'caif_serial' [ 413.321857][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7199'. [ 413.330859][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7199'. [ 413.456051][ T8006] netlink: 'syz.0.7210': attribute type 4 has an invalid length. [ 413.870925][ T8014] lo speed is unknown, defaulting to 1000 [ 413.916633][T17752] tipc: Node number set to 2886997007 [ 414.230282][ T8051] tipc: Enabling of bearer rejected, failed to enable media [ 414.438201][ T8054] lo speed is unknown, defaulting to 1000 [ 414.646312][ T8077] netlink: 'syz.5.7221': attribute type 10 has an invalid length. [ 414.654564][ T8077] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7221'. [ 414.869749][ T8077] dummy0: entered promiscuous mode [ 414.895146][ T8077] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 415.181869][ T8082] lo speed is unknown, defaulting to 1000 [ 415.371493][ T8106] loop9: detected capacity change from 0 to 1024 [ 415.379124][ T8106] EXT4-fs: Ignoring removed orlov option [ 415.384881][ T8106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 415.411588][ T8106] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.591829][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.231855][ T8146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7231'. [ 416.583331][ T8175] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 416.591771][ T8175] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 416.600142][ T8175] netlink: 2 bytes leftover after parsing attributes in process `+}[@'. [ 416.841437][T10637] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.878340][T10637] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.909267][T10637] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 416.948672][T10637] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.318344][ T8206] netlink: 'syz.1.7245': attribute type 10 has an invalid length. [ 417.606858][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 417.606875][ T29] audit: type=1326 audit(417.595:19381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f74b518d45f code=0x7ffc0000 [ 417.676517][ T29] audit: type=1326 audit(417.655:19382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f74b518ea37 code=0x7ffc0000 [ 417.724650][ T29] audit: type=1326 audit(417.685:19383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74b518d310 code=0x7ffc0000 [ 417.747973][ T29] audit: type=1326 audit(417.685:19384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f74b518d60a code=0x7ffc0000 [ 417.771132][ T29] audit: type=1326 audit(417.695:19385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 417.794275][ T29] audit: type=1326 audit(417.705:19386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 417.817874][ T29] audit: type=1326 audit(417.705:19387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 417.840839][ T29] audit: type=1326 audit(417.705:19388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 417.863793][ T29] audit: type=1326 audit(417.705:19389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 417.886777][ T29] audit: type=1326 audit(417.705:19390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8222 comm="syz.1.7251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f74b518e9a9 code=0x7ffc0000 [ 417.927091][ T8230] loop9: detected capacity change from 0 to 1024 [ 417.934935][ T8230] EXT4-fs: dax option not supported [ 417.957730][ T8230] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7254'. [ 417.975030][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7253'. [ 417.978694][ T8230] loop9: detected capacity change from 0 to 1024 [ 417.991208][ T8230] EXT4-fs: Ignoring removed nobh option [ 417.996931][ T8230] EXT4-fs: Ignoring removed bh option [ 418.010469][ T8230] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.085956][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.435164][ T8269] netlink: 'syz.9.7266': attribute type 10 has an invalid length. [ 418.443394][ T8269] netlink: 55 bytes leftover after parsing attributes in process `syz.9.7266'. [ 419.316428][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.324631][ T8317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.411508][ T8334] loop7: detected capacity change from 0 to 512 [ 419.421373][ T8334] msdos: Unknown parameter 'no5gP' [ 419.470370][ T8346] netlink: 'syz.9.7285': attribute type 1 has an invalid length. [ 419.478211][ T8346] netlink: 'syz.9.7285': attribute type 4 has an invalid length. [ 419.486047][ T8346] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.7285'. [ 419.495701][ T8346] netlink: 'syz.9.7285': attribute type 1 has an invalid length. [ 419.503609][ T8346] netlink: 'syz.9.7285': attribute type 4 has an invalid length. [ 419.511547][ T8346] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.7285'. [ 419.522583][ T8345] loop7: detected capacity change from 0 to 128 [ 419.527202][ T8346] loop9: detected capacity change from 0 to 1024 [ 419.547694][ T8346] EXT4-fs: Ignoring removed bh option [ 419.553181][ T8346] EXT4-fs: inline encryption not supported [ 419.566609][ T8346] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 419.584930][ T8346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 419.595377][ T8357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8357 comm=syz.7.7289 [ 419.613339][ T8346] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 2: comm syz.9.7285: lblock 2 mapped to illegal pblock 2 (length 1) [ 419.642063][ T8346] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.7285: lblock 0 mapped to illegal pblock 48 (length 1) [ 419.693552][ T8346] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.7285: Failed to acquire dquot type 0 [ 419.809522][ T8346] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6250: Corrupt filesystem [ 419.819422][ T8346] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.7285: mark_inode_dirty error [ 419.843615][ T8346] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 419.861822][ T8346] EXT4-fs (loop9): 1 orphan inode deleted [ 419.877025][ T8346] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.889754][T10590] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 420.387735][ T8368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7292'. [ 420.490300][T10590] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 0 [ 420.512038][ T8346] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 48: comm syz.9.7285: lblock 0 mapped to illegal pblock 48 (length 1) [ 420.700298][ T8364] lo speed is unknown, defaulting to 1000 [ 420.716358][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.582363][ T8423] __nla_validate_parse: 1 callbacks suppressed [ 421.582392][ T8423] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7298'. [ 421.672174][ T8420] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.7298'. [ 421.711725][ T8399] lo speed is unknown, defaulting to 1000 [ 421.863835][ T8414] netlink: 'syz.9.7294': attribute type 7 has an invalid length. [ 421.979668][ T8458] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7301'. [ 422.146853][ T8418] lo speed is unknown, defaulting to 1000 [ 423.070996][ T8410] lo speed is unknown, defaulting to 1000 [ 423.202779][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 423.202798][ T29] audit: type=1400 audit(423.185:19533): avc: denied { connect } for pid=8504 comm="syz.0.7305" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 423.271891][ T8509] netlink: 'syz.9.7307': attribute type 1 has an invalid length. [ 423.279848][ T29] audit: type=1326 audit(423.245:19534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.302832][ T29] audit: type=1326 audit(423.245:19535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.325977][ T29] audit: type=1326 audit(423.255:19536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.348875][ T29] audit: type=1326 audit(423.255:19537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.371823][ T29] audit: type=1326 audit(423.255:19538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.394936][ T29] audit: type=1326 audit(423.255:19539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.418014][ T29] audit: type=1326 audit(423.255:19540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.440897][ T29] audit: type=1326 audit(423.255:19541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.464012][ T29] audit: type=1326 audit(423.255:19542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.9.7307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201005e9a9 code=0x7ffc0000 [ 423.531390][ T8517] loop9: detected capacity change from 0 to 512 [ 423.543756][ T8517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.490477][ T8422] lo speed is unknown, defaulting to 1000 [ 424.545435][ T8552] loop7: detected capacity change from 0 to 512 [ 424.664436][ T8552] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.710911][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.784674][ T8552] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7314: bg 0: block 289: padding at end of block bitmap is not set [ 424.826575][ T8576] loop9: detected capacity change from 0 to 512 [ 424.836215][ T8576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.938004][ T1846] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.152980][ T8576] ================================================================== [ 425.161120][ T8576] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 425.169222][ T8576] [ 425.171561][ T8576] write to 0xffff888119ccfb04 of 4 bytes by task 8587 on cpu 1: [ 425.179216][ T8576] xas_set_mark+0x12b/0x140 [ 425.183747][ T8576] tag_pages_for_writeback+0xc2/0x290 [ 425.189249][ T8576] ext4_do_writepages+0x697/0x21c0 [ 425.194677][ T8576] ext4_writepages+0x176/0x300 [ 425.199517][ T8576] do_writepages+0x1c3/0x310 [ 425.204159][ T8576] file_write_and_wait_range+0x156/0x2c0 [ 425.209818][ T8576] generic_buffers_fsync_noflush+0x45/0x120 [ 425.215750][ T8576] ext4_sync_file+0x1ab/0x690 [ 425.220461][ T8576] vfs_fsync_range+0x10a/0x130 [ 425.225271][ T8576] ext4_buffered_write_iter+0x34f/0x3c0 [ 425.230848][ T8576] ext4_file_write_iter+0x383/0xf00 [ 425.236063][ T8576] iter_file_splice_write+0x5f2/0x970 [ 425.241468][ T8576] direct_splice_actor+0x156/0x2a0 [ 425.246827][ T8576] splice_direct_to_actor+0x312/0x680 [ 425.252244][ T8576] do_splice_direct+0xda/0x150 [ 425.257052][ T8576] do_sendfile+0x380/0x650 [ 425.261593][ T8576] __x64_sys_sendfile64+0x105/0x150 [ 425.266962][ T8576] x64_sys_call+0x2bb0/0x2ff0 [ 425.271815][ T8576] do_syscall_64+0xd2/0x200 [ 425.276361][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.282292][ T8576] [ 425.284641][ T8576] read to 0xffff888119ccfb04 of 4 bytes by task 8576 on cpu 0: [ 425.292206][ T8576] file_write_and_wait_range+0x10e/0x2c0 [ 425.297885][ T8576] generic_buffers_fsync_noflush+0x45/0x120 [ 425.303864][ T8576] ext4_sync_file+0x1ab/0x690 [ 425.308580][ T8576] vfs_fsync_range+0x10a/0x130 [ 425.313385][ T8576] ext4_buffered_write_iter+0x34f/0x3c0 [ 425.318968][ T8576] ext4_file_write_iter+0xdbf/0xf00 [ 425.324201][ T8576] iter_file_splice_write+0x5f2/0x970 [ 425.329608][ T8576] direct_splice_actor+0x156/0x2a0 [ 425.334762][ T8576] splice_direct_to_actor+0x312/0x680 [ 425.340176][ T8576] do_splice_direct+0xda/0x150 [ 425.345018][ T8576] do_sendfile+0x380/0x650 [ 425.349481][ T8576] __x64_sys_sendfile64+0x105/0x150 [ 425.354720][ T8576] x64_sys_call+0x2bb0/0x2ff0 [ 425.359422][ T8576] do_syscall_64+0xd2/0x200 [ 425.363968][ T8576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.369902][ T8576] [ 425.372250][ T8576] value changed: 0x02000021 -> 0x04000021 [ 425.377977][ T8576] [ 425.380325][ T8576] Reported by Kernel Concurrency Sanitizer on: [ 425.386647][ T8576] CPU: 0 UID: 0 PID: 8576 Comm: syz.9.7316 Tainted: G W 6.16.0-syzkaller-06699-ge8d780dcd957 #0 PREEMPT(voluntary) [ 425.400326][ T8576] Tainted: [W]=WARN [ 425.404177][ T8576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.414268][ T8576] ================================================================== [ 425.791503][ T3312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.