last executing test programs: 5.404403396s ago: executing program 4 (id=212): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x490e7, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 4.667166408s ago: executing program 3 (id=214): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x385883) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 4.601872728s ago: executing program 3 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="040100000101030000000000000000000a00000220000280060003400003000006000340080000000c000280050001002100000058000e8006000340000400000c00028005000100000000000c00028005000100060000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa06000340000000006c0002800c0002800500010011000000140001800800010064010101080002000a010100060003400004000006000340000300002c000180140003"], 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x804) syz_read_part_table(0x1060, &(0x7f0000000000)="$eJzsz81NwzAABeDnBIeECyOwBhsgBmACJAZgAX6WQeLS5Xqs5KpOpG7Q9vB9Bz/L9rPlcFXzaRjvnkum9pW8Pm7r+48eY4ae9ScZynfyNCVp9736V9ezdU4rW+9l+V36fLfedGjv68ZnSqaknF+tD3n7v9hHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCGHQMAAP//BZgNAQ==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r8, 0x0, 0x8) splice(r3, 0x0, r4, 0x0, 0x2, 0x0) fcntl$setpipe(r4, 0x407, 0x906) ioctl$sock_qrtr_TIOCINQ(r4, 0x541b, 0x0) write$P9_RLCREATE(r4, &(0x7f0000001080)={0x18, 0xf, 0x2, {{0x1, 0x3, 0x1}, 0x80}}, 0x18) 4.53743252s ago: executing program 4 (id=216): bind$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'macsec0\x00', {0x2}, 0xff61}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000fd000a0000000600010013"], 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8001, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2d, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r0, 0xffffffffffffffff, 0x0) 4.445027751s ago: executing program 2 (id=218): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}, {0x40, 0x6, 0x1, 0x1}, {0x2, 0x9, 0xa5}]}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xacf8, 0xf3}, 0x1100, 0x5dd8, 0x3a68, 0x5, 0x0, 0x8, 0x8697, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f00000008c0)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c05eb"], 0x30}, 0x40880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) dup3(r3, r2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000004000000563c000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000009df7000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x80000001}, 0x18) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0x0, 0x1acc02, 0x148, 0x0, 0x10, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x40000, 0x70, 0x98, 0x0, {0x0, 0x5803}}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 4.223575815s ago: executing program 0 (id=219): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x2, 0x0}, 0x8) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, 0xffffffffffffffff, 0x9, 0x0, @void}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff0100000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c000180142c7406534260a72c000000000000000000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe8000000000000000000000000000311420040020010000000000000000000000000001"], 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) write$binfmt_script(r9, &(0x7f0000000300), 0x4) 4.223068255s ago: executing program 1 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000005b40), 0x0, 0xc080) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140), 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r6 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xd}, 0x4c58, 0x401, 0x0, 0x1, 0x8, 0x8, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r10, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x20, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x0) close_range(r6, r6, 0x0) 4.058783267s ago: executing program 1 (id=221): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], &(0x7f0000001240)=""/160, 0x1f, 0xa0, 0x1, 0x2, 0x1008}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x7e031, r0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000000, 0x5, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) getuid() getresuid(&(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0), 0x0, 0x607, &(0x7f0000001300)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) futex(0x0, 0x2, 0xffffffff, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x0, 0x68e}, 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x3, 0x0, @buffer={0x17, 0x0, 0x0}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x47) syz_read_part_table(0x5c8, &(0x7f0000000600)="$eJzs2z1oE2gYB/Anaq6Hwrk4ORzWwclFcTSDlSQqCiHaRRwUFBEzRRAiBAQdbIaWZigdu5RCln5MTcPR4WhpoXMpHXoUOnQ62qXQpTl6fY+7sXdtD4TfD17er3/y5BkyvsF37Vz83u12MxHR7fn3n+5v5QsPr5XulZ9FZOJFRPT++tP04U0mJf761utpv5H242MXOwO7D7Kt9ad7N14uNM6l+89pXJpo95+4Oc7cZG7x8pev1eJgLfdurVjf+ra68mRqJ19uP240px9l779OuaU0X0jzh6jFp3gfr6ISlXgT1VOqP9ravHVwtdiafXt3v9AZmr+dcqUT9nnc+h97h5836303Z66M3KnNLZe3zx/lKv/h3wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP9vMrd4+cvXanGwlnu3VqxvfVtdeTK1ky+3Hzea04+y91/HLz2HuaWUv5DmD1GLT/E+XkUlKvEmqqdUf7S1eevgarE1+/bufqEzNH875Uonb/VY9T/2Dj9v1vtuzlwZuVObWy5vnz/KVXrO6AcAAAAAAAAAAAAAAAAAAABAROQLD6+V7pWfRWTiRUS0f+7786l/N713z6Tc9bTYSOfjYxc7A7sPsq31p3s3Xi40fkvnn9O4NNHu/2edH/5e/nj2XXFcfwQAAP//HQGWmQ==") r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x46, "0040001e1d113c812e5d6000"}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xd439, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8) close_range(r2, 0xffffffffffffffff, 0x0) 4.057577557s ago: executing program 2 (id=222): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x2, 0xbfdffffc}, &(0x7f00000011c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0xe000, 0x82}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x12345}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x3) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f0000001180)=0x5, 0x4) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) writev(r5, &(0x7f0000001100)=[{&(0x7f0000000f80)="5b1a127334a15bb722da0e35ef37b6d1b8fc852e20a02c4614d29a0aac35f75d86b7f6aba3049e391f4eae6c579b939f115e44bbccbce7fa6cf02b71407e81a011e2d82429d1264b61fa8c00a807a5c57a6e8e6dc32c6ab56d0a17ca16e6af9380c61efb8cc7d8b63e792ccf869848578e727f8398c2fd694ceb32bd6bdc74c845e915f09f32a749faea23bb31ccf22c3a8b3cfea588e7df9e4f8014292e141840b5ca4c5f", 0xa5}, {&(0x7f0000001040)="137322758281d13c3709498d8972b1d0a2492ea69b198bb98a6a8c34a377288bec6f2cf337adbd8bde55d90d61282043444a0650eba8077da6df15113eae3b8c06679ae19975441ebd9c40aaec1449c2afd54f6d4e59300f08e571806136498de1ed9255d292b3cb40ca41d7d2bfeb3de7b05ce079aff47255776108febbd1b5a1cef5ae9517b81eb6ffd9", 0x8b}], 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r3, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x560, 0x0, 0x0, 0x338, 0xf0, 0x630, 0x630, 0x630, 0x630, 0x630, 0x6, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'gre0\x00', 'bond0\x00', {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv4=@private, 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x200, [0x1000, 0x3], 0x0, 0x30, 0x7, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, @dev={0xfe, 0x80, '\x00', 0x3e}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}], 0xf}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@loopback, 0x0, 0x3f}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, [0xffffffff, 0x0, 0xe979eab540ef6e66, 0xffffffff], [0xffffff00, 0x0, 0xffffffff, 0xff], 'lo\x00', 'batadv0\x00', {}, {0xff}, 0x16, 0xf9, 0x2, 0x40}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r7 = epoll_create1(0x0) vmsplice(r7, 0x0, 0x0, 0xa) symlink(0x0, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) ioctl$TIOCPKT(r3, 0x5420, &(0x7f00000000c0)=0x1) io_uring_enter(r0, 0x4047f6, 0x6c7b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 3.86811464s ago: executing program 1 (id=224): timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = mq_open(0x0, 0x40, 0x110, 0x0) mq_timedreceive(r0, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000022c0)={0x11, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000e41f0800034000000120140000001000"], 0xd0}}, 0x20050800) 3.8665025s ago: executing program 0 (id=234): r0 = io_uring_setup(0x6ecd, &(0x7f0000000140)={0x0, 0x49fd, 0x10003, 0x20002, 0x185}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000002840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x48800) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x560f, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0xf0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x44004, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.751654892s ago: executing program 2 (id=225): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$eJzs3c9vHFcdAPDvjH9t0zROoAeogAQoBBRlN960UdVLwwWEqkqIigPikBp7Y5nsZkN2XWoTCfdvAAkkTvAncEDigNQTB24cEELigBDlgFTAAsVIHBbN7Njd2rvNNl7v1t7PR5rMj/dmvu+ts/PevrXnBTC1LkXEdkTMR8RrEbFYHE+KJW52lyzfw50HK7s7D1aS6HRe/WeSp2fHoueczJPFNUsR8fWvRHw7ORy3tbl1Z7ler90v9ivtxr1Ka3Pr6npjea22Vrtbrd5YunHthevPVw+c+Ydzj1vXi41fvPPl9Ze/8etfffLt321/8ftZsc4Wab31GKVu1ef242RmI+Ll4wg2ATPFen7C5eDxpBHxkYj4TP7+X4yZ/H8nAHCadTqL0Vns3R+gNDAFADhh0nwMLEnLEZGmRSeg3B3DezrOpPVmq33ldnPj7mp3rOx8zKW31+u1axcW/vTdPPNcku0v5Wl5er5fPbB/PSIuRMSPFp7I98srzfrqZLo8ADD1nuxt/yPiPwtpWi4PdWqfb/UAgBOjNOkCAABjp/0HgOmj/QeA6TNE+1982b997GUBAMbD538AmD7afwCYPtp/AJgqX3vllWzp7BbPv159fXPjTvP1q6u11p1yY2OlvNK8f6+81myu5c/saTzqevVm897Sc7HxRqVda7Urrc2tW43mxt32rfy53rdqc2OpFQDwfi5cfOuPSURsv/hEvkTPXA7aajjd0hHmAk6WmaOcrIMAJ5rZvmB6DdWE552E3x57WYDJ6Psw71Lfzff6yQcI4veM4EPl8seHH/83xzOcLh9wZP/3xzJJPjARjzf+/9LIywGMn/F/mF6dTnJwzv/5/SQA4FQ6wq/wdX4wqk4IMFGPmsx7JN//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwClzNiK+E0lazucCT7N/03I54qmIOB9zye31eu1aRJyLixExt5DtL0260ADAEaV/T4r5vy4vPnv2YOp88t+FfB0R3/vpqz9+Y7ndvr+UHf/X/vGFvenDqu+ed4R5BQGA4f11mEx5+10t1j0f5B/uPFjZW46xjIe886X9yUdXdnce5Es3ZTY6nU4nopT3Jc78O4nZ4pxSRDwTETMjiL/9ZkR8rF/9k3xs5Hwx82lv/ChiPzXW+Ol74qd5WnedvXwfHUFZYNq8ld1/bvZ7/6VxKV/3f/+X8jvU0eX3v1LE3r1vtyf+bBFppk/87D1/adgYz/3mq4cOdha7aW9GPDPbL36yHz8ZEP/ZIeP/+ROf+uFLA9I6P4u4HP3j98aqtBv3Kq3NravrjeW12lrtbrV6Y+nGtReuP1+t5GPUlb2R6sP+8eKVc4PKltX/zID4pb71n98/93ND1v/n/3vtW59+d3fhYPwvfLb/z//pvvG7sjbx80PGXz7zy4HTd2fxVwfU/1E//ytDxn/7b1urQ2YFAMagtbl1Z7ler90/0kb2KXQU1zm0kRVxuMx73cXBeYoMN9/vOn+JfGNEL8uAjawzNkzmueN6VY99Y3a/rzjaK38zu+KYq5OOvBZH2ng4rliTuR8B43OoeQQAAAAAAAAAAAAAAD50xvGnS5OuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfX/wMAAP//8RXBxA==") bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000140)='asymmetric\x00', 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.164174821s ago: executing program 4 (id=226): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x385883) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 3.037275363s ago: executing program 4 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0x2}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @local}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) io_uring_setup(0x33fe, &(0x7f00000002c0)={0x0, 0x6296, 0x200, 0x3, 0x20b}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fchdir(0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 2.949507545s ago: executing program 1 (id=228): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xd, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x490e7, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) openat$ptmx(0xffffffffffffff9c, 0x0, 0x161b01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2.748919328s ago: executing program 0 (id=229): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xa, 0x0, 0x5, 0x0, 0x9, 0x10000}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r2 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x208c81, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') mkdirat(r3, &(0x7f0000002040)='./bus\x00', 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32b2d5c0e79cbeec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, 0x0, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read$rfkill(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0xa0, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x40880) socket$nl_netfilter(0x10, 0x3, 0xc) 1.832214012s ago: executing program 2 (id=230): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@nobarrier}, {@dioread_nolock}]}, 0x1, 0x527, &(0x7f0000000300)="$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") r1 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x200000, 0x0, 0x800000, 0x2a9}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x490e7, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x161b01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x2022) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x11}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 891.633106ms ago: executing program 2 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x1, 0x1, 0xd697, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0xa}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pwritev2(r1, &(0x7f0000001100)=[{&(0x7f0000000340)="77dea376d927864f74856d75287d06ba95192e42ead9ef1a5b1f7526a9af758ab312c204aa857a7a1a30d05d8f67af5023b1cab605da0d3ebdd06b084a6238c3554f41f2f55614131a4e001ccb4c3838f447522cd50ea7ea9dc1b46ce7488ac61d93dc73f56d96", 0x67}, {&(0x7f0000000540)="b59c0e3db2f47f0de91724e5488d18d6d28451cd77467761088e9eacc50ebcddda6a2bde2f9f2813445c4d63671db9896f7dbf3ca9ae46aec582d8871dc184d1dc99e18013c0fc3abd88051875f0d22bfbc9669675f6f3045807ad522d879f1a94409faf69d864836b00c639ebdd1abe9f84b99d9890b7da677e34b187744b722de93de841d5b0aba7bd5f912997f920bdb0d1b9222ea289ce5403d568276781c312f5a3f9bda08bb0032dfd1b3275e3ba35", 0xb2}, {&(0x7f0000000c80)="d872af9a9c1540ff6c776fac4e9c744828a2225590f5363f08424ccb8021683669ea40a8c36ce591b45e2a311228170b37fa320a454693d5ea3a4b804aa363656088b1a5c48b06318cafeb09146291f8dc24d9c764c7e1eb4c79f74e1d62ca9066eb90f65094b6a75340d9d14b6477e11e229fe1619e600901361d150696be2e256ab87326c41c0b661f12c70dd80af1dd85fecd106bb02309c0304c5ffbdf82140834c0352981fa74ea5078d6e9baf2b68d23e3a3894b3cb461de074dfe07087d9f6910f9d3cb5353204e516666635190f80c466df4fcb0bb8971de", 0xdc}, {&(0x7f0000000400)="ecb1261dc8ad45a561dc571bcba3c2909357", 0x12}, {&(0x7f0000000d80)="b6a2b9a63121689a83e62e11a063e4675547a6e530b895af6573edc672fa8a2e5ff4b18be879e17c117b178fdc30af4af8d753f4ec6cc5cbcbc7afa7ac16a0e4e45281b88f9bb8703d03c97e83159ea8e36dcce24a6fa7c0a9c8aa1efa79b6f38f9e7a218dac2411b2c3d81bacefe7de71e9415c057c4954dd85121ab418b546fb2aa2f4", 0x84}, {&(0x7f0000000e40)="e21cad9d3b366d6391d6b8b273244f363ae152cff6236cbce548356b07a828d47faf5663d10f706172c37e01bd90bc75cc5a9daed40122f14be41a710f124abdd5c9a461016a1895b1824f4e59f9923c49332c2da73190e4c55d5d3be80cdd90cb10a31012983ebe8e1ff512be348c650ac0d00cd2e8ece3a5cec6bb96340753e431393887875c14283208cf41454cb6a8393350077524cee52e8e338300ee581a69020b7e7d4d610962117c", 0xac}, {&(0x7f0000000b80)="a6cab9fabdec4088d86da98900eaee0c29759d85eadd4a35e5f5e8b9bba91f115eca66e0fc871f0fc6a1d6e188ff582d2add9427a58391aa145308cf9ee799fc5873ad270c01bdce4477d3a829499e5147c97645bb7c05f4c079", 0x5a}, {&(0x7f0000000f80)="56539055be0b34b8d4356977a9d86a8d9dad70d081dd45b82f7fd41181704f66f8b69331e8e1404e3ff6e938c639a4694d36880a932f252d15c0921841e09ac2c54fec1c083941867f230afaf74fe2594f9016a742e0f15b5212e9040b8a7a69a1081fa49ea41b95ed97960ccef9cf191b7e65d9c5069f5220da1cac18ce4fc12f8085802aceeb2cef14ab40b7b27e4584a3235303a6403bcda6de34c7b9f9e186a44e40be80cc539c778a94cffe5fc137af4838f6c3cce66f135d", 0xbb}, {&(0x7f0000001040)="4eeadc4209d7cd382d1941996cba9b98a15fecca87abe2b194f19dea04761be97dc7b9b7eddd8f5082ed187d1cd87448ba5a86607a786aefc5b6e8316d193d4f269c15b6631c139125ed6793a6d9a4cb34984bf10b0092c1d5b33cead4125b16a44dd80d543179498864b3a936c7a020eb71f3a5dba5e4acba5cfb2eddc8a9af7b016eca80dce8184240e22d75d9146c828f28e9fbcf38b5d77cbdec879cd0af02567e9ec7518995afe87ebecfce4c40f68111", 0xb3}], 0x9, 0x16a, 0x800, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, 0x2, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7c9}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}, @NFACCT_FLAGS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x440c0}, 0x4040804) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") r5 = gettid() sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r7, 0x2) 891.049346ms ago: executing program 3 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7, 0x0, &(0x7f0000000000)="219a53f271a76d", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_nanosleep(0x7, 0x1, &(0x7f0000000380), &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000402020009"], 0x40}, 0x1, 0x40030000000000}, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000840)={0xffffffffffffffff, 0x4, {0x0, 0x0, 0x0, 0x1b, 0x7fffffff, 0x0, 0x12, 0x1d, 0x1, "3cfad8d3c7aed7dbc61d6a5cae961a8005f53d72c7b8f4ec9079d4858c485dc66dd39dbaee45caef1f71954901bc341cf95bd025928cc7375b9843480e01446c", "53adc9a269b4da5763e6be05b13098ad04d4442accba38c74df2d9f987c85c582489a17bbd391d6c05c58b20c1171a293a2c663aecc68533a29c2e30c6c55810", "55a8d634bc6b0936feb3b732afff677711ebb5e019fe03bdfd9d8cec8fbece28", [0x1, 0x320]}}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 890.635366ms ago: executing program 4 (id=233): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x16, 0x0, 0x30000, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8442a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 890.120226ms ago: executing program 0 (id=242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000c4000000040000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x490, 0x22b, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x330, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x1}, {0x4}, {0x0, 0x0, 0xfd}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x9}, {0x1}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x6, 0x0, 0x0, 0x1}, {}, {0x8}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x874}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40, 0x1}, {}, {}, {0x0, 0x3, 0x1}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x5}, {}, {0xfffd}, {}, {}, {}, {0x0, 0x0, 0x3}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x92b}, {0x0, 0x8a}, {}, {}, {0x0, 0x0, 0xfc}]}}, @common=@unspec=@cluster={{0x30}, {0x5, 0xb, 0x5, 0x1}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffff00], 'veth1_to_bridge\x00', 'veth1_to_bridge\x00', {0xff}, {}, 0x16}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000140b9000000000000010000850200000000000000020000000000004300000000da"], 0x0, 0x52, 0x0, 0x1}, 0x28) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000a, 0xc50ebdf61d87095b, r7, 0xc9bf4000) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 889.794837ms ago: executing program 1 (id=235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) statx(0xffffffffffffffff, 0x0, 0x6000, 0x4, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x408, 0xffffffffffffffff) quotactl$Q_SYNC(0xeee9666b5c33a138, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='\x00', &(0x7f0000000140)='ramfs\x00', 0x0) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0x6000) 616.23381ms ago: executing program 3 (id=236): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001340)='./file0\x00', 0x2804812, &(0x7f0000001100)={[{@dmode={'dmode', 0x3d, 0xb1}}, {@utf8}, {@mode={'mode', 0x3d, 0x5d8}}, {@nojoliet}, {@dmode={'dmode', 0x3d, 0x4}}, {}, {@showassoc}, {@nocompress}, {@cruft}, {@nocompress}, {@overriderock}, {@check_relaxed}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@map_off}]}, 0x3, 0xa4d, &(0x7f0000001380)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) 586.789391ms ago: executing program 4 (id=237): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008844) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$sg(0x0, 0x0, 0x2000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000ac0)={0x0, 0x1, 0x2, 0xfff}) r5 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r5, 0x2285, 0x0) socket$netlink(0x10, 0x3, 0xe) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r8, 0x409, 0xb) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x66) sendfile(r1, r0, 0x0, 0x3ffff) 584.623381ms ago: executing program 0 (id=238): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x130, 0x12, 0x60a, 0x130, 0x202, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@remote, @mcast2, [], [0x0, 0x0, 0xffffffff], 'netpci0\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0xfe}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [0xff], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) pipe2$9p(&(0x7f0000000080), 0x80880) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000540), 0x3c) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x2000000000000000}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) 463.309373ms ago: executing program 3 (id=239): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r3, 0x15f1, 0xff98, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) mount(&(0x7f0000000640)=@sr0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='ocfs2_dlmfs\x00', 0x8, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180d0000209920702500000010000022ccf16c01291fff00000000bfa100000000000007010000f8ffffffb7ff000000000000b70300000000fd38850000007200000095000000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x4b, '\x00', r2, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r4, 0x0, 0x6}, 0x18) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="43640d000000000000effeffffffffff0000ff00", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000000000000300000000030000000500000002000000030000000000000c04000000000000000000000105000000005f3061"], &(0x7f0000000280)=""/51, 0x50, 0x33, 0x1, 0x9}, 0x28) 403.144464ms ago: executing program 1 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='xprtrdma_post_linv_err\x00', 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x88bbcfd08703268b, @host}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}, [@chandef_params, @NL80211_ATTR_DURATION={0x8}]}, 0x24}}, 0x0) 339.347645ms ago: executing program 3 (id=241): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @local, 0x1}}, 0x0, 0x0, 0x4c, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592266c5b98fb19402835fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x1) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000400)={0x6, 0x1, 0x1}, &(0x7f0000000440)=[{}]) flock(r1, 0x2) dup3(r1, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x60, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 295.282506ms ago: executing program 0 (id=243): migrate_pages(0x0, 0x4421, &(0x7f00000003c0)=0x8ff, &(0x7f0000000400)=0x80000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x8000000000000}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000001540)='GPL\x00', 0x4, 0x9d, &(0x7f0000001580)=""/157, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xd, 0x7fffffff, 0xc}, 0x10, 0xde20, r2, 0x3, 0x0, &(0x7f0000001740)=[{0x2, 0x3, 0xc, 0x1}, {0x0, 0x2, 0x4, 0x2}, {0x1, 0x3, 0x5, 0x9}], 0x10, 0x80000001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) socket(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 0s ago: executing program 2 (id=244): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) socket$igmp6(0xa, 0x3, 0x3a) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x7a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) inotify_init() r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 27.224843][ T29] audit: type=1400 audit(1753507772.875:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.225653][ T3296] cgroup: Unknown subsys name 'net' [ 27.247568][ T29] audit: type=1400 audit(1753507772.875:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.275032][ T29] audit: type=1400 audit(1753507772.915:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.430749][ T3296] cgroup: Unknown subsys name 'cpuset' [ 27.436824][ T3296] cgroup: Unknown subsys name 'rlimit' [ 27.585911][ T29] audit: type=1400 audit(1753507773.235:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.611350][ T29] audit: type=1400 audit(1753507773.235:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.631851][ T29] audit: type=1400 audit(1753507773.235:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.652300][ T29] audit: type=1400 audit(1753507773.235:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.672715][ T29] audit: type=1400 audit(1753507773.245:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.678059][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.697768][ T29] audit: type=1400 audit(1753507773.245:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.729691][ T29] audit: type=1400 audit(1753507773.365:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.764481][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.385303][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.412637][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.487758][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.524499][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.531696][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.538913][ T3306] bridge_slave_0: entered allmulticast mode [ 29.545550][ T3306] bridge_slave_0: entered promiscuous mode [ 29.553969][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.561041][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.568337][ T3306] bridge_slave_1: entered allmulticast mode [ 29.574770][ T3306] bridge_slave_1: entered promiscuous mode [ 29.587090][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.594202][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.601311][ T3313] bridge_slave_0: entered allmulticast mode [ 29.607682][ T3313] bridge_slave_0: entered promiscuous mode [ 29.618210][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.638494][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.647813][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.654958][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.662110][ T3313] bridge_slave_1: entered allmulticast mode [ 29.668400][ T3313] bridge_slave_1: entered promiscuous mode [ 29.681039][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.727986][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.746116][ T3306] team0: Port device team_slave_0 added [ 29.752515][ T3306] team0: Port device team_slave_1 added [ 29.760954][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.771859][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.778930][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.786078][ T3309] bridge_slave_0: entered allmulticast mode [ 29.792459][ T3309] bridge_slave_0: entered promiscuous mode [ 29.812073][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.824534][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.831664][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.838998][ T3309] bridge_slave_1: entered allmulticast mode [ 29.845586][ T3309] bridge_slave_1: entered promiscuous mode [ 29.856521][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.864199][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.890204][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.905321][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.912295][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.938228][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.966409][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.973680][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.981007][ T3307] bridge_slave_0: entered allmulticast mode [ 29.987321][ T3307] bridge_slave_0: entered promiscuous mode [ 29.995895][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.002985][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.010303][ T3307] bridge_slave_1: entered allmulticast mode [ 30.016826][ T3307] bridge_slave_1: entered promiscuous mode [ 30.023803][ T3313] team0: Port device team_slave_0 added [ 30.030638][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.040922][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.060782][ T3313] team0: Port device team_slave_1 added [ 30.076385][ T3309] team0: Port device team_slave_0 added [ 30.097869][ T3309] team0: Port device team_slave_1 added [ 30.110565][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.124669][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.131670][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.157698][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.180974][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.190463][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.197659][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.223645][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.236440][ T3306] hsr_slave_0: entered promiscuous mode [ 30.242498][ T3306] hsr_slave_1: entered promiscuous mode [ 30.248789][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.255747][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.281697][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.313869][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.320854][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.346798][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.362550][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.369649][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.376827][ T3314] bridge_slave_0: entered allmulticast mode [ 30.383188][ T3314] bridge_slave_0: entered promiscuous mode [ 30.390117][ T3307] team0: Port device team_slave_0 added [ 30.402654][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.409720][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.417073][ T3314] bridge_slave_1: entered allmulticast mode [ 30.423508][ T3314] bridge_slave_1: entered promiscuous mode [ 30.430214][ T3307] team0: Port device team_slave_1 added [ 30.474277][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.484939][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.497168][ T3313] hsr_slave_0: entered promiscuous mode [ 30.503120][ T3313] hsr_slave_1: entered promiscuous mode [ 30.508857][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.516467][ T3313] Cannot create hsr debugfs directory [ 30.538013][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.544991][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.570938][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.584207][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.591229][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.617326][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.637594][ T3314] team0: Port device team_slave_0 added [ 30.654029][ T3309] hsr_slave_0: entered promiscuous mode [ 30.660112][ T3309] hsr_slave_1: entered promiscuous mode [ 30.666078][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.673659][ T3309] Cannot create hsr debugfs directory [ 30.679474][ T3314] team0: Port device team_slave_1 added [ 30.731613][ T3307] hsr_slave_0: entered promiscuous mode [ 30.737706][ T3307] hsr_slave_1: entered promiscuous mode [ 30.743694][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.751380][ T3307] Cannot create hsr debugfs directory [ 30.767069][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.774114][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.800196][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.811555][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.818540][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.844550][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.931088][ T3314] hsr_slave_0: entered promiscuous mode [ 30.936970][ T3314] hsr_slave_1: entered promiscuous mode [ 30.942872][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.950597][ T3314] Cannot create hsr debugfs directory [ 30.978041][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.987270][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.004698][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.022233][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.049657][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.067571][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.076396][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.093760][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.118890][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.127334][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.136733][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.145612][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.193330][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.205007][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.217739][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.227206][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.264960][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.276652][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.287940][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.306425][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.316406][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.328252][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.338076][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.346844][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.358618][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.372707][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.379793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.388330][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.395451][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.409717][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.416893][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.426053][ T1899] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.433103][ T1899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.450222][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.460603][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.493015][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.502367][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.509494][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.532824][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.539927][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.556981][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.581020][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.593897][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.606495][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.613643][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.628659][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.635756][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.666915][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.679503][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.691229][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.719926][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.727114][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.746555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.753670][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.786545][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.821460][ T3313] veth0_vlan: entered promiscuous mode [ 31.843700][ T3313] veth1_vlan: entered promiscuous mode [ 31.849951][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.888020][ T3313] veth0_macvtap: entered promiscuous mode [ 31.901610][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.917637][ T3306] veth0_vlan: entered promiscuous mode [ 31.925254][ T3313] veth1_macvtap: entered promiscuous mode [ 31.952140][ T3306] veth1_vlan: entered promiscuous mode [ 31.976115][ T3309] veth0_vlan: entered promiscuous mode [ 31.988501][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.004420][ T3309] veth1_vlan: entered promiscuous mode [ 32.013052][ T3306] veth0_macvtap: entered promiscuous mode [ 32.021303][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.034929][ T3306] veth1_macvtap: entered promiscuous mode [ 32.053840][ T3309] veth0_macvtap: entered promiscuous mode [ 32.061208][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.075520][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.084410][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.093267][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.102036][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.115770][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.129102][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.138685][ T3309] veth1_macvtap: entered promiscuous mode [ 32.149557][ T3307] veth0_vlan: entered promiscuous mode [ 32.167034][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.175916][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.184875][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.193967][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.212354][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.220866][ T3307] veth1_vlan: entered promiscuous mode [ 32.232576][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.242893][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.242905][ T29] audit: type=1400 audit(1753507777.895:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.kG5NjC/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.274543][ T29] audit: type=1400 audit(1753507777.895:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.292277][ T3307] veth0_macvtap: entered promiscuous mode [ 32.296523][ T29] audit: type=1400 audit(1753507777.895:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.kG5NjC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.306798][ T3307] veth1_macvtap: entered promiscuous mode [ 32.327297][ T29] audit: type=1400 audit(1753507777.895:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.340821][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.354718][ T29] audit: type=1400 audit(1753507777.895:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.kG5NjC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.371988][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.388603][ T29] audit: type=1400 audit(1753507777.895:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.kG5NjC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.398961][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.422997][ T29] audit: type=1400 audit(1753507777.895:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.431699][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460043][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.468815][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.479816][ T3314] veth0_vlan: entered promiscuous mode [ 32.489445][ T29] audit: type=1400 audit(1753507778.125:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.491078][ T3314] veth1_vlan: entered promiscuous mode [ 32.512269][ T29] audit: type=1400 audit(1753507778.125:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.529127][ T3314] veth0_macvtap: entered promiscuous mode [ 32.547387][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.556184][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.564911][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.573881][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.588712][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.592493][ T3314] veth1_macvtap: entered promiscuous mode [ 32.613966][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.622999][ T29] audit: type=1400 audit(1753507778.265:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.663406][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.701165][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.709950][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.718728][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.720037][ T3476] loop4: detected capacity change from 0 to 512 [ 32.727517][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.837480][ T3476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.875455][ T3476] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.895564][ T3491] process 'syz.0.1' launched './file1' with NULL argv: empty string added [ 32.915493][ T3494] loop2: detected capacity change from 0 to 512 [ 32.917330][ T3491] tipc: Started in network mode [ 32.926880][ T3491] tipc: Node identity ac14140f, cluster identity 4711 [ 32.939997][ T3491] tipc: New replicast peer: 255.255.255.255 [ 32.946482][ T3491] tipc: Enabled bearer , priority 10 [ 32.964026][ T3491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.972829][ T3491] tipc: Disabling bearer [ 33.267807][ T3499] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 33.335695][ T3494] EXT4-fs (loop2): too many log groups per flexible block group [ 33.340671][ T3503] loop0: detected capacity change from 0 to 512 [ 33.343422][ T3494] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 33.356616][ T3494] EXT4-fs (loop2): mount failed [ 33.362783][ T3503] ======================================================= [ 33.362783][ T3503] WARNING: The mand mount option has been deprecated and [ 33.362783][ T3503] and is ignored by this kernel. Remove the mand [ 33.362783][ T3503] option from the mount to silence this warning. [ 33.362783][ T3503] ======================================================= [ 33.405425][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.451942][ T3503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.511541][ T3507] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.511690][ T3507] unsupported nla_type 8573 [ 33.525170][ T3503] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.586336][ T3503] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 33.694500][ T3509] loop4: detected capacity change from 0 to 256 [ 33.725589][ T3509] FAT-fs (loop4): bogus number of FAT sectors [ 33.731791][ T3509] FAT-fs (loop4): Can't find a valid FAT filesystem [ 34.096643][ T3530] loop3: detected capacity change from 0 to 1024 [ 34.141824][ T3530] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.164536][ T3530] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.201236][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.255642][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.276451][ T3537] loop0: detected capacity change from 0 to 512 [ 34.284067][ T3537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.301590][ T3538] loop3: detected capacity change from 0 to 512 [ 34.321088][ T3537] EXT4-fs (loop0): 1 orphan inode deleted [ 34.327845][ T3537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.340931][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 34.351523][ T3538] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.367943][ T3537] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.403700][ T3538] EXT4-fs (loop3): mount failed [ 34.409934][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.467089][ T3538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 34.474430][ T3546] netlink: 'syz.0.16': attribute type 8 has an invalid length. [ 34.478923][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 34.493157][ T3547] loop1: detected capacity change from 0 to 1024 [ 34.524297][ T3549] loop2: detected capacity change from 0 to 512 [ 34.549393][ T3549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.550455][ T3546] loop0: detected capacity change from 0 to 512 [ 34.565120][ T3549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.581004][ T3549] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.592321][ T3546] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.611997][ T3546] EXT4-fs (loop0): mount failed [ 34.654339][ T3555] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 34.667488][ T3402] IPVS: starting estimator thread 0... [ 34.760274][ T3556] IPVS: using max 3072 ests per chain, 153600 per kthread [ 34.897241][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.938194][ T3562] loop2: detected capacity change from 0 to 1024 [ 34.958858][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 34.982545][ T3562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.011007][ T3562] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 35.023503][ T3562] EXT4-fs (loop2): This should not happen!! Data will be lost [ 35.023503][ T3562] [ 35.033351][ T3562] EXT4-fs (loop2): Total free blocks count 0 [ 35.039334][ T3562] EXT4-fs (loop2): Free/Dirty block details [ 35.045439][ T3562] EXT4-fs (loop2): free_blocks=0 [ 35.050534][ T3562] EXT4-fs (loop2): dirty_blocks=0 [ 35.055994][ T3562] EXT4-fs (loop2): Block reservation details [ 35.062064][ T3562] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 35.075267][ T3562] syz.2.20 (3562) used greatest stack depth: 9808 bytes left [ 35.098580][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.144834][ T3571] loop2: detected capacity change from 0 to 512 [ 35.155292][ T3571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.182367][ T3571] EXT4-fs (loop2): 1 truncate cleaned up [ 35.189306][ T3571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.206564][ T3573] loop3: detected capacity change from 0 to 128 [ 35.244929][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.257815][ T3573] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 35.332410][ T3573] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.651583][ T3579] infiniband syz2: set active [ 35.656434][ T3579] infiniband syz2: added veth0_to_bond [ 35.691983][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.731945][ T3579] RDS/IB: syz2: added [ 35.738843][ T3579] smc: adding ib device syz2 with port count 1 [ 35.746071][ T3579] smc: ib device syz2 port 1 has pnetid [ 35.934405][ C0] hrtimer: interrupt took 35264 ns [ 35.986754][ T3588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.002261][ T3588] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 36.011881][ T3588] bridge_slave_1: left allmulticast mode [ 36.017540][ T3588] bridge_slave_1: left promiscuous mode [ 36.023266][ T3588] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.033081][ T3588] bridge_slave_0: left allmulticast mode [ 36.038748][ T3588] bridge_slave_0: left promiscuous mode [ 36.044544][ T3588] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.233405][ T3594] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 36.246250][ T3594] team0: Port device dummy0 added [ 36.262008][ T3594] loop1: detected capacity change from 0 to 512 [ 36.269281][ T3594] EXT4-fs: Ignoring removed i_version option [ 36.282168][ T3595] Zero length message leads to an empty skb [ 36.304226][ T3594] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.315549][ T3594] EXT4-fs (loop1): orphan cleanup on readonly fs [ 36.323999][ T3594] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.29: bg 0: block 248: padding at end of block bitmap is not set [ 36.338645][ T3594] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.29: Failed to acquire dquot type 1 [ 36.351484][ T3594] EXT4-fs (loop1): 1 truncate cleaned up [ 36.359074][ T3594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.378996][ T3594] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 36.383909][ T3599] loop9: detected capacity change from 0 to 7 [ 36.397458][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.406338][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.414287][ T3300] loop9: unable to read partition table [ 36.420054][ T3594] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 36.428492][ T3594] ext4 filesystem being remounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.433083][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.447235][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.455212][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.463428][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.468220][ T3594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.29'. [ 36.476415][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.487974][ T3599] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.497340][ T3599] Buffer I/O error on dev loop9, logical block 0, async page read [ 36.505263][ T3599] loop9: unable to read partition table [ 36.511158][ T3599] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 36.511158][ T3599] ) failed (rc=-5) [ 36.519325][ T3603] netlink: 'syz.1.29': attribute type 10 has an invalid length. [ 36.595376][ T3603] team0: Port device dummy0 removed [ 36.614742][ T3603] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 36.659189][ T3592] infiniband syz!: set active [ 36.664036][ T3592] infiniband syz!: added team_slave_0 [ 36.677295][ T3592] RDS/IB: syz!: added [ 36.681684][ T3592] smc: adding ib device syz! with port count 1 [ 36.688115][ T3592] smc: ib device syz! port 1 has pnetid [ 36.695306][ T3594] syz.1.29 (3594) used greatest stack depth: 9304 bytes left [ 36.703744][ T3609] netlink: 'syz.0.32': attribute type 4 has an invalid length. [ 36.718925][ T3609] loop0: detected capacity change from 0 to 512 [ 36.748963][ T3609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.864729][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.144073][ T3624] loop1: detected capacity change from 0 to 128 [ 37.275346][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 37.275361][ T29] audit: type=1400 audit(1753507782.925:904): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.302446][ T31] kworker/u8:1: attempt to access beyond end of device [ 37.302446][ T31] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 37.317586][ T31] kworker/u8:1: attempt to access beyond end of device [ 37.317586][ T31] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 37.332539][ T31] kworker/u8:1: attempt to access beyond end of device [ 37.332539][ T31] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 37.362662][ T31] kworker/u8:1: attempt to access beyond end of device [ 37.362662][ T31] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 37.376564][ T31] kworker/u8:1: attempt to access beyond end of device [ 37.376564][ T31] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 37.422268][ T31] kworker/u8:1: attempt to access beyond end of device [ 37.422268][ T31] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 37.446761][ T31] kworker/u8:1: attempt to access beyond end of device [ 37.446761][ T31] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 37.470656][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 37.580899][ T3638] openvswitch: netlink: Message has 6 unknown bytes. [ 37.592755][ T29] audit: type=1400 audit(1753507783.195:905): avc: denied { firmware_load } for pid=3632 comm="syz.4.36" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 37.617587][ T29] audit: type=1326 audit(1753507783.225:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.641171][ T29] audit: type=1326 audit(1753507783.225:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.664467][ T29] audit: type=1326 audit(1753507783.225:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.687627][ T29] audit: type=1326 audit(1753507783.225:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.711210][ T29] audit: type=1326 audit(1753507783.225:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.734732][ T29] audit: type=1326 audit(1753507783.225:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.757945][ T29] audit: type=1326 audit(1753507783.225:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.781183][ T29] audit: type=1326 audit(1753507783.225:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3634 comm="syz.2.37" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 37.835868][ T3638] loop2: detected capacity change from 0 to 512 [ 37.899911][ T3638] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 37.933855][ T3637] loop3: detected capacity change from 0 to 512 [ 37.964846][ T3638] EXT4-fs (loop2): invalid journal inode [ 38.068135][ T3609] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.229870][ T3637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.242513][ T3637] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.262065][ T3637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.34: bg 0: block 328: padding at end of block bitmap is not set [ 38.431296][ T31] kworker/u8:1: attempt to access beyond end of device [ 38.431296][ T31] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 38.444697][ T31] kworker/u8:1: attempt to access beyond end of device [ 38.444697][ T31] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 38.458114][ T31] kworker/u8:1: attempt to access beyond end of device [ 38.458114][ T31] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 38.671568][ T3655] loop2: detected capacity change from 0 to 128 [ 38.882550][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.168264][ T3661] bond1: entered promiscuous mode [ 39.173444][ T3661] bond1: entered allmulticast mode [ 39.198086][ T3668] loop0: detected capacity change from 0 to 2048 [ 39.238834][ T3668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.303215][ T3661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.325870][ T3661] bond1 (unregistering): Released all slaves [ 39.332271][ T3664] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 39.476372][ T3676] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 39.483043][ T3676] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 39.490709][ T3676] vhci_hcd vhci_hcd.0: Device attached [ 39.497513][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.498092][ T3678] vhci_hcd: cannot find the pending unlink 6 [ 39.558542][ T3678] vhci_hcd: connection closed [ 39.559325][ T31] vhci_hcd: stop threads [ 39.568396][ T31] vhci_hcd: release socket [ 39.572852][ T31] vhci_hcd: disconnect device [ 39.799786][ T3683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.48'. [ 39.808647][ T3683] netlink: 212 bytes leftover after parsing attributes in process `syz.0.48'. [ 39.954694][ T3689] loop0: detected capacity change from 0 to 2048 [ 39.993242][ T3689] capability: warning: `syz.0.51' uses deprecated v2 capabilities in a way that may be insecure [ 40.086841][ T3715] loop0: detected capacity change from 0 to 512 [ 40.100528][ T3715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.116191][ T3715] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 40.129000][ T3715] bridge0: port 3(syz_tun) entered blocking state [ 40.135541][ T3715] bridge0: port 3(syz_tun) entered disabled state [ 40.142361][ T3715] syz_tun: entered allmulticast mode [ 40.148135][ T3715] syz_tun: entered promiscuous mode [ 40.153581][ T3715] bridge0: port 3(syz_tun) entered blocking state [ 40.160092][ T3715] bridge0: port 3(syz_tun) entered forwarding state [ 40.174058][ T3715] syz_tun: left allmulticast mode [ 40.179234][ T3715] syz_tun: left promiscuous mode [ 40.184319][ T3715] bridge0: port 3(syz_tun) entered disabled state [ 40.197475][ T3715] bridge_slave_0: left allmulticast mode [ 40.203189][ T3715] bridge_slave_0: left promiscuous mode [ 40.208900][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.219539][ T3715] bridge_slave_1: left allmulticast mode [ 40.225317][ T3715] bridge_slave_1: left promiscuous mode [ 40.231274][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.265521][ T3723] netlink: 'syz.3.53': attribute type 3 has an invalid length. [ 40.293937][ T3715] bond0: (slave bond_slave_0): Releasing backup interface [ 40.315033][ T3715] bond0: (slave bond_slave_1): Releasing backup interface [ 40.327774][ T3715] team0: Port device team_slave_0 removed [ 40.338584][ T3715] team0: Port device team_slave_1 removed [ 40.346518][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.354001][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.373868][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.381473][ T3715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.405750][ T3382] syz2: Port: 1 Link DOWN [ 40.488280][ T3734] capability: warning: `syz.1.56' uses 32-bit capabilities (legacy support in use) [ 40.516050][ T3732] loop3: detected capacity change from 0 to 1024 [ 40.533100][ T3732] EXT4-fs: Ignoring removed orlov option [ 40.582336][ T3737] loop1: detected capacity change from 0 to 2048 [ 40.591458][ T3737] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.599084][ T3732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.622517][ T3732] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 64 with max blocks 8 with error 28 [ 40.634923][ T3732] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.634923][ T3732] [ 40.644600][ T3732] EXT4-fs (loop3): Total free blocks count 0 [ 40.650623][ T3732] EXT4-fs (loop3): Free/Dirty block details [ 40.656523][ T3732] EXT4-fs (loop3): free_blocks=0 [ 40.661596][ T3732] EXT4-fs (loop3): dirty_blocks=0 [ 40.666820][ T3732] EXT4-fs (loop3): Block reservation details [ 40.672903][ T3732] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 40.690913][ T3737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.764389][ T3744] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 40.777876][ T3746] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 40.786841][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.832831][ T3748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 40.900658][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.965232][ T3754] loop4: detected capacity change from 0 to 512 [ 40.975434][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.986310][ T3756] syz.1.62 uses obsolete (PF_INET,SOCK_PACKET) [ 41.073105][ T3759] netlink: 3 bytes leftover after parsing attributes in process `syz.1.62'. [ 41.082293][ T3759] 0X: renamed from caif0 [ 41.116236][ T3759] 0X: entered allmulticast mode [ 41.121516][ T3759] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 41.157779][ T3760] sd 0:0:1:0: device reset [ 41.255760][ T3764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 41.282606][ T3767] netlink: 'syz.4.66': attribute type 3 has an invalid length. [ 41.417472][ T3771] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 41.424059][ T3771] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.431626][ T3771] vhci_hcd vhci_hcd.0: Device attached [ 41.450002][ T3772] vhci_hcd: cannot find the pending unlink 6 [ 41.487399][ T3772] vhci_hcd: connection closed [ 41.488688][ T12] vhci_hcd: stop threads [ 41.497802][ T12] vhci_hcd: release socket [ 41.502289][ T12] vhci_hcd: disconnect device [ 41.569291][ T3778] loop4: detected capacity change from 0 to 512 [ 41.582961][ T3778] EXT4-fs (loop4): 1 orphan inode deleted [ 41.591098][ T3778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.604353][ T51] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 41.631688][ T3778] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.740321][ T3784] loop3: detected capacity change from 0 to 512 [ 41.750699][ T3784] EXT4-fs: Ignoring removed oldalloc option [ 41.769124][ T3784] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.69: Parent and EA inode have the same ino 15 [ 41.784470][ T3784] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.797657][ T3784] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.69: Parent and EA inode have the same ino 15 [ 41.811414][ T3784] EXT4-fs (loop3): 1 orphan inode deleted [ 41.817595][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.845203][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.872957][ T3787] tipc: Started in network mode [ 41.877855][ T3787] tipc: Node identity ac14140f, cluster identity 4711 [ 41.884826][ T3787] tipc: New replicast peer: 255.255.255.255 [ 41.890994][ T3787] tipc: Enabled bearer , priority 10 [ 41.898048][ T3787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 41.907049][ T3787] tipc: Disabling bearer [ 41.976464][ T3789] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 42.083138][ T3797] loop0: detected capacity change from 0 to 128 [ 42.219781][ T3800] loop1: detected capacity change from 0 to 512 [ 42.273677][ T3800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.317261][ T3800] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.480831][ T3800] bond0: (slave dummy0): Releasing backup interface [ 42.499451][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.546281][ T3800] bond0: (slave bond_slave_0): Releasing backup interface [ 42.556425][ T3800] bond0: (slave bond_slave_1): Releasing backup interface [ 42.567922][ T3800] team0: Port device team_slave_0 removed [ 42.577126][ T3800] team0: Port device team_slave_1 removed [ 42.584285][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.591748][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.599835][ T12] bio_check_eod: 66 callbacks suppressed [ 42.599846][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.599846][ T12] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 42.601276][ T3800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.605853][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.605853][ T12] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 42.618923][ T3800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.640479][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.640479][ T12] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 42.660894][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.660894][ T12] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 42.684050][ T3807] tipc: Started in network mode [ 42.689039][ T3807] tipc: Node identity ac14140f, cluster identity 4711 [ 42.698067][ T3807] tipc: New replicast peer: 255.255.255.255 [ 42.703527][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.703527][ T12] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 42.704241][ T3807] tipc: Enabled bearer , priority 10 [ 42.719056][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.719056][ T12] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 42.728870][ T3807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 42.738335][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.738335][ T12] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 42.745763][ T3807] tipc: Disabling bearer [ 42.760107][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.760107][ T12] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 42.778009][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.778009][ T12] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 42.791760][ T12] kworker/u8:0: attempt to access beyond end of device [ 42.791760][ T12] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 42.830655][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 42.830669][ T29] audit: type=1326 audit(1753507788.485:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 42.862074][ T3811] sd 0:0:1:0: device reset [ 42.864357][ T29] audit: type=1326 audit(1753507788.515:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f279ddbd310 code=0x7ffc0000 [ 42.889805][ T29] audit: type=1326 audit(1753507788.515:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 42.913310][ T29] audit: type=1326 audit(1753507788.515:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 42.936852][ T29] audit: type=1326 audit(1753507788.535:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 42.960191][ T29] audit: type=1326 audit(1753507788.535:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 42.983466][ T29] audit: type=1326 audit(1753507788.545:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 43.006755][ T29] audit: type=1326 audit(1753507788.545:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 43.019214][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.78'. [ 43.030155][ T29] audit: type=1326 audit(1753507788.545:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 43.030182][ T29] audit: type=1326 audit(1753507788.545:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3810 comm="syz.4.78" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f279ddbe9a9 code=0x7ffc0000 [ 43.106096][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.772412][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.1.79'. [ 44.058195][ T3821] tipc: New replicast peer: 255.255.255.255 [ 44.064392][ T3821] tipc: Enabled bearer , priority 10 [ 44.114983][ T3821] netlink: 12 bytes leftover after parsing attributes in process `syz.3.81'. [ 44.123922][ T3821] tipc: Disabling bearer [ 44.248257][ T3835] 0X: renamed from caif0 [ 44.267699][ T3835] 0X: entered allmulticast mode [ 44.273182][ T3835] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 44.293052][ T3836] loop1: detected capacity change from 0 to 512 [ 44.305799][ T3836] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 44.318075][ T3836] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.332664][ T3836] EXT4-fs error (device loop1): ext4_orphan_get:1419: comm syz.1.86: bad orphan inode 15 [ 44.343412][ T3837] loop3: detected capacity change from 0 to 1024 [ 44.518355][ T3836] ext4_test_bit(bit=14, block=18) = 1 [ 44.523861][ T3836] is_bad_inode(inode)=0 [ 44.528006][ T3836] NEXT_ORPHAN(inode)=1023 [ 44.532428][ T3836] max_ino=32 [ 44.535624][ T3836] i_nlink=0 [ 44.563551][ T3836] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.86: corrupted xattr block 19: e_value size too large [ 44.640377][ T3836] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 44.695094][ T3836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.864575][ T3848] loop4: detected capacity change from 0 to 512 [ 44.903903][ T3848] EXT4-fs (loop4): 1 orphan inode deleted [ 45.057261][ T3848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.097078][ T3851] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 45.103830][ T3851] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 45.111582][ T3851] vhci_hcd vhci_hcd.0: Device attached [ 45.230733][ T3852] vhci_hcd: connection closed [ 45.233782][ T1899] vhci_hcd: stop threads [ 45.242741][ T1899] vhci_hcd: release socket [ 45.247150][ T1899] vhci_hcd: disconnect device [ 45.252622][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 45.290500][ T3848] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.465154][ T3857] loop3: detected capacity change from 0 to 1024 [ 45.472307][ T3855] __nla_validate_parse: 1 callbacks suppressed [ 45.472320][ T3855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 45.487352][ T3855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 45.518072][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.660433][ T3861] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 45.675462][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.709473][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.721620][ T3863] loop2: detected capacity change from 0 to 512 [ 45.750329][ T3863] ext4: Unknown parameter 'pcr' [ 45.774324][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.800995][ T3868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 45.837481][ T3867] loop4: detected capacity change from 0 to 1024 [ 45.862322][ T3867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.904660][ T3867] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 45.917073][ T3867] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.917073][ T3867] [ 45.926816][ T3867] EXT4-fs (loop4): Total free blocks count 0 [ 45.932908][ T3867] EXT4-fs (loop4): Free/Dirty block details [ 45.938796][ T3867] EXT4-fs (loop4): free_blocks=0 [ 45.943777][ T3867] EXT4-fs (loop4): dirty_blocks=0 [ 45.948940][ T3867] EXT4-fs (loop4): Block reservation details [ 45.954948][ T3867] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 46.072311][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.234804][ T3884] tipc: Started in network mode [ 46.239722][ T3884] tipc: Node identity ac14140f, cluster identity 4711 [ 46.248012][ T3884] tipc: New replicast peer: 255.255.255.255 [ 46.254240][ T3884] tipc: Enabled bearer , priority 10 [ 46.265621][ T3884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.94'. [ 46.274484][ T3884] tipc: Disabling bearer [ 46.444251][ T3891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.453355][ T3891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.138685][ T3897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.95'. [ 47.423939][ T3902] loop1: detected capacity change from 0 to 2048 [ 47.432184][ T3902] msdos: Bad value for 'gid' [ 47.436880][ T3902] msdos: Bad value for 'gid' [ 47.474539][ T3905] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.550611][ T3903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 47.572724][ T3908] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 47.651664][ T3912] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 47.738297][ T3914] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.880483][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 47.880498][ T29] audit: type=1326 audit(1753507793.525:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 47.910224][ T29] audit: type=1326 audit(1753507793.525:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.126978][ T3920] loop2: detected capacity change from 0 to 512 [ 48.164667][ T3920] EXT4-fs (loop2): 1 orphan inode deleted [ 48.188339][ T3920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.209655][ T29] audit: type=1326 audit(1753507793.535:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.233182][ T29] audit: type=1326 audit(1753507793.535:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.256634][ T29] audit: type=1326 audit(1753507793.535:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.280090][ T29] audit: type=1326 audit(1753507793.535:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.303802][ T29] audit: type=1326 audit(1753507793.535:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.327358][ T29] audit: type=1326 audit(1753507793.535:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.350967][ T29] audit: type=1326 audit(1753507793.535:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3909 comm="syz.2.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 48.374399][ T29] audit: type=1400 audit(1753507793.535:1546): avc: denied { read } for pid=3909 comm="syz.2.103" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 48.377431][ T3920] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.408392][ T3925] loop3: detected capacity change from 0 to 2048 [ 48.415332][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 48.428616][ T3923] tipc: New replicast peer: 255.255.255.255 [ 48.435106][ T3923] tipc: Enabled bearer , priority 10 [ 48.442066][ T3923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'. [ 48.450976][ T3923] tipc: Disabling bearer [ 48.542702][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 48.551609][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.108'. [ 48.669851][ T3940] netlink: 48 bytes leftover after parsing attributes in process `syz.1.113'. [ 48.737586][ T3940] siw: device registration error -23 [ 48.749344][ T3943] tipc: Enabled bearer , priority 0 [ 48.867619][ T3957] lo speed is unknown, defaulting to 1000 [ 48.873507][ T3957] lo speed is unknown, defaulting to 1000 [ 48.879414][ T3957] lo speed is unknown, defaulting to 1000 [ 48.885853][ T3957] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 48.893736][ T3957] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 48.906494][ T3957] lo speed is unknown, defaulting to 1000 [ 48.912945][ T3957] lo speed is unknown, defaulting to 1000 [ 48.919183][ T3957] lo speed is unknown, defaulting to 1000 [ 48.925500][ T3957] lo speed is unknown, defaulting to 1000 [ 48.931798][ T3957] lo speed is unknown, defaulting to 1000 [ 49.012311][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.089904][ T3959] xt_connbytes: Forcing CT accounting to be enabled [ 49.102389][ T3937] tipc: Resetting bearer [ 49.102416][ T3959] Cannot find set identified by id 0 to match [ 49.157504][ T3937] tipc: Disabling bearer [ 49.188214][ T3970] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.202133][ T3969] loop1: detected capacity change from 0 to 512 [ 49.232775][ T3969] EXT4-fs (loop1): 1 orphan inode deleted [ 49.249334][ T3969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.269498][ T3979] tipc: New replicast peer: 255.255.255.255 [ 49.275714][ T394] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 49.275783][ T3979] tipc: Enabled bearer , priority 10 [ 49.295144][ T3969] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.341294][ T3982] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 49.347968][ T3982] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 49.355666][ T3982] vhci_hcd vhci_hcd.0: Device attached [ 49.386609][ T3987] loop2: detected capacity change from 0 to 1024 [ 49.398525][ T3985] vhci_hcd: connection closed [ 49.398823][ T394] vhci_hcd: stop threads [ 49.407903][ T394] vhci_hcd: release socket [ 49.412501][ T394] vhci_hcd: disconnect device [ 49.443519][ T3987] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 49.637382][ T3994] loop9: detected capacity change from 0 to 7 [ 49.643874][ T3994] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.653188][ T3994] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.661174][ T3994] loop9: unable to read partition table [ 49.677141][ T3994] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 49.677141][ T3994] ) failed (rc=-5) [ 49.692439][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.740321][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.748390][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.757608][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.786962][ T3300] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.899048][ T4001] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 50.013714][ T4004] xt_connbytes: Forcing CT accounting to be enabled [ 50.102651][ T4004] Cannot find set identified by id 0 to match [ 50.109523][ T4006] sd 0:0:1:0: device reset [ 50.118293][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.189603][ T4011] tipc: Started in network mode [ 50.194652][ T4011] tipc: Node identity ac14140f, cluster identity 4711 [ 50.201846][ T4011] tipc: New replicast peer: 255.255.255.255 [ 50.208028][ T4011] tipc: Enabled bearer , priority 10 [ 50.258408][ T4016] loop1: detected capacity change from 0 to 512 [ 50.274489][ T4016] EXT4-fs: Ignoring removed oldalloc option [ 50.297829][ T4006] lo speed is unknown, defaulting to 1000 [ 50.304895][ T4016] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.132: Parent and EA inode have the same ino 15 [ 50.317494][ T4016] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.132: Parent and EA inode have the same ino 15 [ 50.330938][ T4016] EXT4-fs (loop1): 1 orphan inode deleted [ 50.337094][ T4016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.361541][ T4022] loop3: detected capacity change from 0 to 1024 [ 50.390317][ T3415] tipc: Node number set to 2886997007 [ 50.444473][ T4022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.448596][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.514693][ T4022] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 50.527064][ T4022] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.527064][ T4022] [ 50.536746][ T4022] EXT4-fs (loop3): Total free blocks count 0 [ 50.542776][ T4022] EXT4-fs (loop3): Free/Dirty block details [ 50.548718][ T4022] EXT4-fs (loop3): free_blocks=0 [ 50.553732][ T4022] EXT4-fs (loop3): dirty_blocks=0 [ 50.559058][ T4022] EXT4-fs (loop3): Block reservation details [ 50.563957][ T4036] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 50.565129][ T4022] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 50.582176][ T4036] loop2: detected capacity change from 0 to 1024 [ 50.612971][ T4036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.628974][ T4042] SELinux: failed to load policy [ 50.685665][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.687135][ T4036] pim6reg: entered allmulticast mode [ 50.707053][ T4046] tipc: Enabling of bearer rejected, already enabled [ 50.720755][ T4051] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 50.749906][ T4036] pim6reg: left allmulticast mode [ 50.853564][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.033685][ T4061] loop4: detected capacity change from 0 to 512 [ 51.099597][ T4064] __nla_validate_parse: 5 callbacks suppressed [ 51.099613][ T4064] netlink: 20 bytes leftover after parsing attributes in process `syz.0.144'. [ 51.503455][ T3382] tipc: Node number set to 2886997007 [ 51.523763][ T4061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.536373][ T4061] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.572328][ T4061] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.143: bg 0: block 328: padding at end of block bitmap is not set [ 51.796729][ T4068] loop2: detected capacity change from 0 to 512 [ 51.834138][ T4072] loop3: detected capacity change from 0 to 512 [ 51.844116][ T4073] loop0: detected capacity change from 0 to 512 [ 51.877840][ T4053] lo speed is unknown, defaulting to 1000 [ 51.886802][ T4068] EXT4-fs (loop2): 1 orphan inode deleted [ 51.892610][ T4072] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.901749][ T4072] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 51.910058][ T3643] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 51.925703][ T4073] EXT4-fs: Ignoring removed oldalloc option [ 51.941570][ T4068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.971787][ T4073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.147: Parent and EA inode have the same ino 15 [ 51.990506][ T4072] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 52.009400][ T4068] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.025964][ T4072] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 52.036015][ T4073] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.147: Parent and EA inode have the same ino 15 [ 52.052091][ T4072] System zones: 0-2, 18-18, 34-34 [ 52.058655][ T4068] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 52.068029][ T4072] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.148: iget: bad i_size value: 360287970189639680 [ 52.082240][ T4073] EXT4-fs (loop0): 1 orphan inode deleted [ 52.088302][ T4073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.101473][ T4072] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.148: couldn't read orphan inode 15 (err -117) [ 52.128817][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.138482][ T4072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.531941][ T4081] sd 0:0:1:0: device reset [ 52.608405][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 52.643481][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.723796][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.797889][ T4081] lo speed is unknown, defaulting to 1000 [ 52.818531][ T4084] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.938511][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.957884][ T29] kauditd_printk_skb: 459 callbacks suppressed [ 52.957900][ T29] audit: type=1326 audit(1753507798.605:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 53.029870][ T4096] tipc: Enabling of bearer rejected, already enabled [ 53.036440][ T4095] loop1: detected capacity change from 0 to 1024 [ 53.076423][ T4101] sd 0:0:1:0: device reset [ 53.116626][ T4102] netlink: 'syz.4.155': attribute type 8 has an invalid length. [ 53.131982][ T4103] loop3: detected capacity change from 0 to 512 [ 53.232774][ T4095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.248505][ T29] audit: type=1326 audit(1753507798.605:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.0.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 53.272010][ T29] audit: type=1326 audit(1753507798.665:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd518cee9a9 code=0x7ffc0000 [ 53.295572][ T29] audit: type=1326 audit(1753507798.665:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd518cee9a9 code=0x7ffc0000 [ 53.318948][ T29] audit: type=1326 audit(1753507798.665:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd518cee9a9 code=0x7ffc0000 [ 53.342453][ T29] audit: type=1326 audit(1753507798.665:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd518cee9a9 code=0x7ffc0000 [ 53.365846][ T29] audit: type=1326 audit(1753507798.675:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd518cee9a9 code=0x7ffc0000 [ 53.389642][ T29] audit: type=1326 audit(1753507798.675:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd518cee9e3 code=0x7ffc0000 [ 53.412824][ T29] audit: type=1326 audit(1753507798.675:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd518ced45f code=0x7ffc0000 [ 53.435996][ T29] audit: type=1326 audit(1753507798.685:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4093 comm="syz.1.152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd518ceea37 code=0x7ffc0000 [ 53.461458][ T4102] loop4: detected capacity change from 0 to 512 [ 53.552739][ T4103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.565417][ T4103] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.665378][ T4102] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.714894][ T4095] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 53.727275][ T4095] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.727275][ T4095] [ 53.736942][ T4095] EXT4-fs (loop1): Total free blocks count 0 [ 53.742938][ T4095] EXT4-fs (loop1): Free/Dirty block details [ 53.748827][ T4095] EXT4-fs (loop1): free_blocks=0 [ 53.753935][ T4095] EXT4-fs (loop1): dirty_blocks=0 [ 53.759007][ T4095] EXT4-fs (loop1): Block reservation details [ 53.765029][ T4095] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 53.788009][ T4102] EXT4-fs (loop4): mount failed [ 53.932231][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.955942][ T4090] lo speed is unknown, defaulting to 1000 [ 54.034652][ T4101] lo speed is unknown, defaulting to 1000 [ 54.606978][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.667454][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 54.845961][ T4188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 54.872763][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 54.881686][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 55.047741][ T4196] loop2: detected capacity change from 0 to 1024 [ 55.065415][ T4196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.094518][ T4196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.142987][ T4202] tipc: New replicast peer: 255.255.255.255 [ 55.149050][ T4202] tipc: Enabled bearer , priority 10 [ 55.172995][ T4193] lo speed is unknown, defaulting to 1000 [ 55.336254][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 55.439919][ T4198] Set syz1 is full, maxelem 65536 reached [ 55.559734][ T4210] xt_connbytes: Forcing CT accounting to be enabled [ 55.567482][ T4210] Cannot find set identified by id 0 to match [ 55.611548][ T4214] futex_wake_op: syz.3.170 tries to shift op by -1; fix this program [ 55.668497][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.674792][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 55.699008][ T4218] netlink: 'syz.3.171': attribute type 8 has an invalid length. [ 55.701359][ T4212] tipc: Enabled bearer , priority 0 [ 55.729117][ T4212] tipc: Disabling bearer [ 55.747191][ T4218] loop3: detected capacity change from 0 to 512 [ 55.773244][ T4218] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 55.792708][ T4218] EXT4-fs (loop3): mount failed [ 55.844558][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 55.853456][ T4227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 56.153876][ T4232] lo speed is unknown, defaulting to 1000 [ 56.375779][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 56.385459][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 56.416238][ T4238] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 56.429715][ T4238] loop0: detected capacity change from 0 to 1024 [ 56.452248][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.470215][ T4238] pim6reg: entered allmulticast mode [ 56.479200][ T4238] pim6reg: left allmulticast mode [ 56.534498][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.553243][ T4243] tipc: Enabling of bearer rejected, already enabled [ 56.596730][ T4249] Cannot find set identified by id 0 to match [ 56.632039][ T10] Process accounting resumed [ 56.695260][ T4253] loop2: detected capacity change from 0 to 128 [ 56.709600][ T4253] vfat: Unknown parameter '' [ 56.820214][ T9] tipc: Node number set to 2886997007 [ 56.938921][ T4259] loop2: detected capacity change from 0 to 1024 [ 57.080488][ T4260] lo speed is unknown, defaulting to 1000 [ 57.248415][ T4259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.342673][ T4259] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.507919][ T4266] netlink: zone id is out of range [ 57.543309][ T4268] mmap: syz.4.186 (4268) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.560832][ T4266] netlink: zone id is out of range [ 57.566107][ T4266] netlink: zone id is out of range [ 57.571416][ T4266] netlink: zone id is out of range [ 57.583054][ T4270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 57.592072][ T4266] netlink: zone id is out of range [ 57.592158][ T4266] netlink: zone id is out of range [ 57.592171][ T4266] netlink: zone id is out of range [ 57.592190][ T4266] netlink: zone id is out of range [ 57.592209][ T4266] netlink: zone id is out of range [ 57.639920][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.827243][ T4280] loop1: detected capacity change from 0 to 512 [ 57.839160][ T4280] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.864012][ T4280] EXT4-fs (loop1): 1 truncate cleaned up [ 57.878668][ T4280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.992129][ T29] kauditd_printk_skb: 715 callbacks suppressed [ 57.992144][ T29] audit: type=1326 audit(1753507803.635:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.202231][ T29] audit: type=1326 audit(1753507803.675:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.225769][ T29] audit: type=1326 audit(1753507803.675:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fce8e961265 code=0x7ffc0000 [ 58.249089][ T29] audit: type=1326 audit(1753507803.835:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4288 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.272477][ T29] audit: type=1326 audit(1753507803.845:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.295898][ T29] audit: type=1326 audit(1753507803.845:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.319320][ T29] audit: type=1326 audit(1753507803.845:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.365246][ T29] audit: type=1326 audit(1753507804.005:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.388695][ T29] audit: type=1326 audit(1753507804.005:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.395674][ T4290] tipc: New replicast peer: 255.255.255.255 [ 58.412034][ T29] audit: type=1326 audit(1753507804.005:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.0.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8e92e9a9 code=0x7ffc0000 [ 58.441448][ T4290] tipc: Enabled bearer , priority 10 [ 58.455799][ T4286] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 58.617705][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 58.626600][ T4298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 58.638943][ T4275] netlink: 112 bytes leftover after parsing attributes in process `syz.1.187'. [ 58.648990][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.187'. [ 58.658106][ T4275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.187'. [ 58.756309][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.766145][ T4305] futex_wake_op: syz.2.195 tries to shift op by -1; fix this program [ 58.779047][ T4303] loop0: detected capacity change from 0 to 1024 [ 58.794425][ T4299] netlink: 3 bytes leftover after parsing attributes in process `syz.3.192'. [ 58.812551][ T4307] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 58.823247][ T4303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.823355][ T4299] 0X: renamed from caif0 [ 58.846880][ T4299] 0X: entered allmulticast mode [ 58.851174][ T4303] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 58.864438][ T4303] EXT4-fs (loop0): This should not happen!! Data will be lost [ 58.864438][ T4303] [ 58.874177][ T4303] EXT4-fs (loop0): Total free blocks count 0 [ 58.880189][ T4303] EXT4-fs (loop0): Free/Dirty block details [ 58.886215][ T4303] EXT4-fs (loop0): free_blocks=0 [ 58.891205][ T4303] EXT4-fs (loop0): dirty_blocks=0 [ 58.896224][ T4303] EXT4-fs (loop0): Block reservation details [ 58.902277][ T4303] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 58.927447][ T4313] loop2: detected capacity change from 0 to 128 [ 58.937623][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.949577][ T4313] EXT4-fs: Ignoring removed nobh option [ 58.987886][ T4313] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.000973][ T4313] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 59.019247][ T4316] loop0: detected capacity change from 0 to 512 [ 59.061624][ T4316] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.088569][ T4313] syzkaller0: entered promiscuous mode [ 59.091378][ T4316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.094162][ T4313] syzkaller0: entered allmulticast mode [ 59.120026][ T4316] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.272941][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 59.329244][ T4324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 59.405871][ T4328] syz.0.200 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.440181][ T3382] tipc: Node number set to 2886997007 [ 59.494583][ T4332] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 59.690804][ T4344] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 59.760045][ T4347] loop1: detected capacity change from 0 to 2048 [ 59.856626][ T4351] loop3: detected capacity change from 0 to 512 [ 59.863841][ T4351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.875662][ T4351] EXT4-fs (loop3): 1 truncate cleaned up [ 60.035287][ T4356] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 60.153296][ T4360] loop2: detected capacity change from 0 to 512 [ 60.170856][ T4360] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.179997][ T4360] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 60.205056][ T4360] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 60.215290][ T4360] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 60.224046][ T4360] System zones: 0-2, 18-18, 34-34 [ 60.229717][ T4360] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.209: iget: bad i_size value: 360287970189639680 [ 60.242953][ T4360] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.209: couldn't read orphan inode 15 (err -117) [ 60.283176][ T4364] loop0: detected capacity change from 0 to 128 [ 60.578355][ T4372] netlink: 'syz.1.213': attribute type 8 has an invalid length. [ 60.627366][ T4374] loop0: detected capacity change from 0 to 512 [ 60.656301][ T4375] loop1: detected capacity change from 0 to 512 [ 60.715446][ T4374] EXT4-fs (loop0): 1 orphan inode deleted [ 60.725477][ T4375] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 60.741454][ T4124] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 60.753281][ T4374] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.767677][ T4375] EXT4-fs (loop1): mount failed [ 61.076182][ T4382] xt_connbytes: Forcing CT accounting to be enabled [ 61.086100][ T4382] set match dimension is over the limit! [ 61.154884][ T4384] loop3: detected capacity change from 0 to 8192 [ 61.180886][ T4386] random: crng reseeded on system resumption [ 61.200623][ T3300] loop3: p2 p3 p4 [ 61.204479][ T3300] loop3: p2 start 2936012800 is beyond EOD, truncated [ 61.211323][ T3300] loop3: p3 start 1912602624 is beyond EOD, truncated [ 61.218162][ T3300] loop3: p4 size 656640 extends beyond EOD, truncated [ 61.229575][ T4384] loop3: p2 p3 p4 [ 61.235098][ T4384] loop3: p2 start 2936012800 is beyond EOD, truncated [ 61.242126][ T4384] loop3: p3 start 1912602624 is beyond EOD, truncated [ 61.248901][ T4384] loop3: p4 size 656640 extends beyond EOD, truncated [ 61.463863][ T4408] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 61.489389][ T4410] loop0: detected capacity change from 0 to 512 [ 61.503354][ T4410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.517356][ T4410] EXT4-fs (loop0): 1 truncate cleaned up [ 61.636910][ T4410] __nla_validate_parse: 17 callbacks suppressed [ 61.636927][ T4410] netlink: 112 bytes leftover after parsing attributes in process `syz.0.219'. [ 61.655876][ T4410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.219'. [ 61.664901][ T4410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.219'. [ 61.687319][ T4417] loop1: detected capacity change from 0 to 1024 [ 61.697186][ T4417] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 61.717860][ T4417] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.221: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.718037][ T4417] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.221: Failed to acquire dquot type 0 [ 61.718266][ T4417] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.221: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.718455][ T4417] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.221: Invalid inode bitmap blk 0 in block_group 0 [ 61.718585][ T4417] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 61.718678][ T4417] EXT4-fs (loop1): 1 orphan inode deleted [ 61.719306][ T4124] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 61.719427][ T4124] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 0 [ 61.738836][ T4417] loop1: detected capacity change from 0 to 2048 [ 61.796693][ T4417] Alternate GPT is invalid, using primary GPT. [ 61.796783][ T4417] loop1: p1 p2 p3 [ 61.858302][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 61.908761][ T4425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 61.975968][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.988627][ T3504] udevd[3504]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 62.001231][ T4069] udevd[4069]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 62.487438][ T4433] loop2: detected capacity change from 0 to 512 [ 62.575509][ T4433] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.594530][ T4433] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.225: bg 0: block 328: padding at end of block bitmap is not set [ 62.643541][ T4438] xt_connbytes: Forcing CT accounting to be enabled [ 62.650512][ T4438] set match dimension is over the limit! [ 63.008630][ T4445] netlink: 3 bytes leftover after parsing attributes in process `syz.4.227'. [ 63.017532][ T4445] 0X: renamed from caif0 [ 63.024255][ T4445] 0X: entered allmulticast mode [ 63.029499][ T4445] net_ratelimit: 43 callbacks suppressed [ 63.029510][ T4445] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 63.622056][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 63.630914][ T4449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 63.943303][ T4454] loop2: detected capacity change from 0 to 512 [ 63.969826][ T4454] EXT4-fs (loop2): 1 orphan inode deleted [ 63.977067][ T4454] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.987722][ T4122] __quota_error: 788 callbacks suppressed [ 63.987736][ T4122] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.003250][ T4122] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 64.138597][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 64.147608][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'. [ 64.802079][ T29] audit: type=1326 audit(1753507810.445:3513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 64.825514][ T29] audit: type=1326 audit(1753507810.445:3514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 64.849001][ T29] audit: type=1326 audit(1753507810.445:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 64.872567][ T29] audit: type=1326 audit(1753507810.445:3516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 64.876031][ T4464] netlink: 'syz.2.231': attribute type 8 has an invalid length. [ 64.896132][ T29] audit: type=1326 audit(1753507810.445:3517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 64.927740][ T29] audit: type=1326 audit(1753507810.455:3518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 64.951106][ T29] audit: type=1326 audit(1753507810.455:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4463 comm="syz.2.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f75aae9a9 code=0x7ffc0000 [ 64.975019][ T29] audit: type=1326 audit(1753507810.455:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 64.998604][ T29] audit: type=1326 audit(1753507810.455:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3783e1e9a9 code=0x7ffc0000 [ 65.032694][ T4468] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 65.081480][ T4464] loop2: detected capacity change from 0 to 512 [ 65.085545][ T4466] SELinux: failed to load policy [ 65.120226][ T4471] loop3: detected capacity change from 0 to 1764 [ 65.138557][ T4471] ISOFS: Bad logical zone size 2051 [ 65.158967][ T4474] loop4: detected capacity change from 0 to 1024 [ 65.160712][ T4464] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 65.180193][ T4477] SET target dimension over the limit! [ 65.181425][ T4474] EXT4-fs: Ignoring removed orlov option [ 65.192290][ T4477] batman_adv: batadv0: Adding interface: dummy0 [ 65.198587][ T4477] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.240943][ T4477] batman_adv: batadv0: Interface activated: dummy0 [ 65.247671][ T4464] EXT4-fs (loop2): mount failed [ 65.292107][ T4474] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.237: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 65.320365][ T4484] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.595976][ T4490] siw: device registration error -23 [ 65.791771][ T4486] ================================================================== [ 65.799910][ T4486] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 65.806532][ T4486] [ 65.808858][ T4486] write to 0xffff888126e42190 of 96 bytes by task 4494 on cpu 1: [ 65.816557][ T4486] __bpf_get_stackid+0x761/0x800 [ 65.821589][ T4486] bpf_get_stackid+0xee/0x120 [ 65.826260][ T4486] bpf_get_stackid_raw_tp+0xf6/0x120 [ 65.831559][ T4486] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 65.837029][ T4486] bpf_trace_run2+0x107/0x1c0 [ 65.841713][ T4486] __traceiter_kfree+0x2b/0x50 [ 65.846472][ T4486] kfree+0x27b/0x320 [ 65.850354][ T4486] __bpf_prog_put_noref+0x1a3/0x230 [ 65.855543][ T4486] bpf_prog_load+0xfc9/0x1070 [ 65.860213][ T4486] __sys_bpf+0x51d/0x790 [ 65.864451][ T4486] __x64_sys_bpf+0x41/0x50 [ 65.868863][ T4486] x64_sys_call+0x2478/0x2fb0 [ 65.873525][ T4486] do_syscall_64+0xd2/0x200 [ 65.878013][ T4486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.883899][ T4486] [ 65.886245][ T4486] read to 0xffff888126e421c8 of 8 bytes by task 4486 on cpu 0: [ 65.893789][ T4486] bcmp+0x23/0x90 [ 65.897415][ T4486] __bpf_get_stackid+0x371/0x800 [ 65.902364][ T4486] bpf_get_stackid+0xee/0x120 [ 65.907027][ T4486] bpf_get_stackid_raw_tp+0xf6/0x120 [ 65.912302][ T4486] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 65.917743][ T4486] bpf_trace_run2+0x107/0x1c0 [ 65.922415][ T4486] __traceiter_kfree+0x2b/0x50 [ 65.927182][ T4486] kfree+0x27b/0x320 [ 65.931091][ T4486] ___sys_recvmsg+0x135/0x370 [ 65.935764][ T4486] do_recvmmsg+0x1ef/0x540 [ 65.940174][ T4486] __x64_sys_recvmmsg+0xe5/0x170 [ 65.945116][ T4486] x64_sys_call+0x1c6a/0x2fb0 [ 65.949787][ T4486] do_syscall_64+0xd2/0x200 [ 65.954277][ T4486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.960164][ T4486] [ 65.962475][ T4486] value changed: 0xffffffff84446b35 -> 0xffffffff8161ee4d [ 65.969571][ T4486] [ 65.971885][ T4486] Reported by Kernel Concurrency Sanitizer on: [ 65.978039][ T4486] CPU: 0 UID: 0 PID: 4486 Comm: syz.1.240 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(voluntary) [ 65.990366][ T4486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.000416][ T4486] ================================================================== [ 66.109465][ T3313] EXT4-fs unmount: 16 callbacks suppressed [ 66.109482][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.