last executing test programs: 5m17.799087141s ago: executing program 32 (id=1962): unshare(0x62040200) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) setuid(0xee00) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 4m57.082961461s ago: executing program 33 (id=2690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4m54.07687532s ago: executing program 6 (id=2761): fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000003c0)={0x2, 0x4, 0x2, 0x7}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m53.970787192s ago: executing program 6 (id=2766): fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) 4m53.111514146s ago: executing program 6 (id=2802): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4m53.045223787s ago: executing program 6 (id=2806): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1805002, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', r0, &(0x7f0000000140)='./file0/file0\x00', 0x271) 4m53.001091988s ago: executing program 6 (id=2807): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) 4m50.924782942s ago: executing program 6 (id=2874): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) 4m50.862010763s ago: executing program 34 (id=2874): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000005"], 0x78) 4m27.175098902s ago: executing program 5 (id=3565): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) 4m27.094638434s ago: executing program 5 (id=3566): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4m26.967969896s ago: executing program 5 (id=3572): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 4m26.863658027s ago: executing program 5 (id=3575): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) 4m26.817030908s ago: executing program 5 (id=3577): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 4m26.626867431s ago: executing program 5 (id=3579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 4m26.626590031s ago: executing program 35 (id=3579): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 4m2.174923073s ago: executing program 8 (id=4386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) dup2(r0, r2) 4m2.135399774s ago: executing program 8 (id=4388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) 4m2.042699515s ago: executing program 8 (id=4390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4m1.996773846s ago: executing program 8 (id=4394): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x10c42, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"/797], 0x1, 0x27a, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) creat(&(0x7f0000000000)='./file1\x00', 0x8) 4m1.775128149s ago: executing program 8 (id=4401): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46ec0800000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m1.314149517s ago: executing program 8 (id=4415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x20, 0x200, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x0) 4m1.268110888s ago: executing program 36 (id=4415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x20, 0x200, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x0) 1m54.314356213s ago: executing program 7 (id=7690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x3}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) 1m54.186995835s ago: executing program 7 (id=7694): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000002000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x442, 0x40) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setgroups(0x2, &(0x7f0000000480)=[0x0, 0x0]) r6 = open$dir(&(0x7f00000010c0)='./file1\x00', 0x4000, 0x4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001100)=0x0) getresuid(&(0x7f0000001140), &(0x7f0000001180)=0x0, &(0x7f00000011c0)=0x0) stat(&(0x7f0000001200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180000001e0020002abd7000fedbdf2508003c00", @ANYRES32=0x0, @ANYBLOB="7da9c18b40397f5a79243c24226627768ef6c4b90c45f77073cf923cf7ed7cae767ebc06fa742105e2bb75f9528f992721112daf0bc5be696eaee61f111be97e42204b665e3787"], 0x18}, {&(0x7f0000000900)=ANY=[@ANYBLOB="38000000230010002abd7000ffdbdf251000b980040019800800204532010000756f1ea2694d34f6b2b4a21083f83d911df2d8c41e4466a7000001000000000088"], 0x38}, {&(0x7f0000000cc0)={0xc0, 0x32, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x14, 0xb6, 0x0, 0x1, [@nested={0x4, 0x2b}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xa9}]}, @generic="fa668c877117710a2ecccd38345a5b7231f7ae711d0d4e858e159be3b274f732d359ff871a1e33539aee4ce5f7fce2b3514cca728b8cf28cecff7a6f7d6788d4ef1e62d664bf81b69f1d5b60b202ad401bc30ca00ca055b97d13d8a8014b8a91783928060c3b916447d1a6e15b1fed63c82f2c629ac83809a9cd462b3ec4085653352c65538be2d25c1741adc6bf650f2df7614ba8b25dc4eb6c1629"]}, 0xc0}, {&(0x7f0000000100)=ANY=[@ANYBLOB="300000002e0010002dbd7000ffdbdf250400c50008009d8004002e800800451445ecbbc6fd4750bf8c9d4e81964400", @ANYRES32=0x0, @ANYBLOB="0c0029000100000000000000"], 0x30}], 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r10, @ANYRES32=r1, @ANYBLOB], 0xd0, 0x14}, 0x20000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYRES8=r9, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYBLOB="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", @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r5], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) r13 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r11, 0xffffffffffffffff, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000283783c701000000181300878c9e28d4d8ad97c5204871aacf2bf1cff1867381da9e34594c1d312da9e21f333a93e1de4187505e6c19f79015ea2a0e090000000000006a0d14cb9ee77fcb15153f256af1007aae35e41f736a7450c7a6b2811b184dc9bd8e1d08257508d23b6125f86b44133b6bea4ba054e404ca0435c3ba934ecc0b954aa18941c89c448218c5d56c", @ANYRES32=r2, @ANYRES64=r14], &(0x7f00000001c0)='syzkaller\x00', 0xb400, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000380)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940), &(0x7f0000000440)=[{0x3, 0x1, 0x10, 0x5}], 0x10, 0x26, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 1m53.441897227s ago: executing program 7 (id=7701): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1, 0x0, 0x7}, 0x18) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0xe) 1m53.173945172s ago: executing program 7 (id=7709): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040), 0xc) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) socket(0x11, 0x800000003, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}}, 0x0) shutdown(0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1m52.961480305s ago: executing program 7 (id=7714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x320, 0xffffffff, 0xffffffff, 0x320, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0xffffffff, 0x0, 0xffffffff], [0xff000000, 0xff, 0x0, 0xffffffff], 'pim6reg\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x11, 0x7, 0x3, 0x20}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffffff, 0xff, 0xf2c83c7309a34ff5], [0x0, 0xffffff00, 0xffffff00, 0xff000000], 'caif0\x00', 'lo\x00', {}, {0xff}, 0x0, 0x0, 0x5, 0x10}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40, 0x7}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600000000000000", @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) link(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') 1m52.6437845s ago: executing program 7 (id=7721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m52.64325968s ago: executing program 37 (id=7721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m28.87911132s ago: executing program 9 (id=8041): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) 1m28.053244104s ago: executing program 9 (id=8053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 1m27.816434648s ago: executing program 9 (id=8059): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x7}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) 1m26.867005684s ago: executing program 9 (id=8072): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x15, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffffce, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10c42, &(0x7f0000000d80)=ANY=[], 0x1, 0x28b, &(0x7f0000001d80)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x1, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp']) socket$nl_netfilter(0x10, 0x3, 0xc) 1m25.999597147s ago: executing program 9 (id=8078): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = gettid() r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x8000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.415137287s ago: executing program 9 (id=8085): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) unshare(0x62040200) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 1m24.676450989s ago: executing program 38 (id=8085): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) unshare(0x62040200) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) 2.932026512s ago: executing program 1 (id=8880): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x40000}, 0x4000) epoll_create(0x5) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0xf0e, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 2.804947364s ago: executing program 2 (id=8872): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000002000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x442, 0x40) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) setgroups(0x2, &(0x7f0000000480)=[0x0, 0x0]) r6 = open$dir(&(0x7f00000010c0)='./file1\x00', 0x4000, 0x4) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000001100)=0x0) getresuid(&(0x7f0000001140), &(0x7f0000001180)=0x0, &(0x7f00000011c0)=0x0) stat(&(0x7f0000001200)='./file1\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r5, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180000001e0020002abd7000fedbdf2508003c00", @ANYRES32=0x0, @ANYBLOB="7da9c18b40397f5a79243c24226627768ef6c4b90c45f77073cf923cf7ed7cae767ebc06fa742105e2bb75f9528f992721112daf0bc5be696eaee61f111be97e42204b665e3787"], 0x18}, {&(0x7f0000000900)=ANY=[@ANYBLOB="38000000230010002abd7000ffdbdf251000b980040019800800204532010000756f1ea2694d34f6b2b4a21083f83d911df2d8c41e4466a7000001000000000088"], 0x38}, {&(0x7f0000000cc0)={0xc0, 0x32, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x14, 0xb6, 0x0, 0x1, [@nested={0x4, 0x2b}, @typed={0x8, 0x2a, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0xa9}]}, @generic="fa668c877117710a2ecccd38345a5b7231f7ae711d0d4e858e159be3b274f732d359ff871a1e33539aee4ce5f7fce2b3514cca728b8cf28cecff7a6f7d6788d4ef1e62d664bf81b69f1d5b60b202ad401bc30ca00ca055b97d13d8a8014b8a91783928060c3b916447d1a6e15b1fed63c82f2c629ac83809a9cd462b3ec4085653352c65538be2d25c1741adc6bf650f2df7614ba8b25dc4eb6c1629"]}, 0xc0}, {&(0x7f0000000100)=ANY=[@ANYBLOB="300000002e0010002dbd7000ffdbdf250400c50008009d8004002e800800451445ecbbc6fd4750bf8c9d4e81964400", @ANYRES32=0x0, @ANYBLOB="0c0029000100000000000000"], 0x30}], 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB], 0xd0, 0x14}, 0x20000800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYRES8=r9, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYBLOB="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", @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16=r5], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) r13 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r13, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r11, 0xffffffffffffffff, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000008000000283783c701000000181300878c9e28d4d8ad97c5204871aacf2bf1cff1867381da9e34594c1d312da9e21f333a93e1de4187505e6c19f79015ea2a0e090000000000006a0d14cb9ee77fcb15153f256af1007aae35e41f736a7450c7a6b2811b184dc9bd8e1d08257508d23b6125f86b44133b6bea4ba054e404ca0435c3ba934ecc0b954aa18941c89c448218c5d56c", @ANYRES32=r2, @ANYRES64=r14], &(0x7f00000001c0)='syzkaller\x00', 0xb400, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000380)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940), &(0x7f0000000440)=[{0x3, 0x1, 0x10, 0x5}], 0x10, 0x26, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) 2.47702687s ago: executing program 1 (id=8873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$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") bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) sigaltstack(&(0x7f0000001b80)={&(0x7f0000000b80)=""/4096, 0x1, 0x1000}, 0x0) sigaltstack(&(0x7f0000001dc0)={0x0, 0x80000002}, &(0x7f0000001e40)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002c80)='/proc/consoles\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xf) ioctl$sock_SIOCDELDLCI(r2, 0x8981, 0x0) ioperm(0x0, 0x100000000004, 0x7) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000004c0)={0x7, &(0x7f0000000340)=[{0xaf93, 0x8, 0x17, 0x1}, {0x8, 0x2, 0x5, 0x7fffffff}, {0x4c2b, 0xa, 0x3, 0xffffffff}, {0x9, 0x9, 0x1, 0x7187}, {0x8, 0x7, 0x9, 0x6}, {0xfe, 0x8, 0x12, 0xfffffff7}, {0x1, 0x80, 0x8, 0x1}]}) 2.402781651s ago: executing program 0 (id=8874): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x894a, @dev={0xfe, 0x80, '\x00', 0x25}, 0xfffffffc}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0xb4, &(0x7f0000000480)=[@in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, @in6={0xa, 0x4e20, 0x8, @private0, 0x10000}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3}, @in6={0xa, 0x4e22, 0x7, @private1, 0xf831}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000240)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_read_part_table(0x60d, &(0x7f0000002240)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = io_uring_setup(0x2553, &(0x7f0000000280)) r5 = epoll_create1(0x0) r6 = dup3(r5, r4, 0x0) epoll_pwait2(r6, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 2.402513681s ago: executing program 4 (id=8875): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x1, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x6, 0x6, 0x6, 0x6}, 0x4, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0xab) 2.395741341s ago: executing program 1 (id=8876): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8695, 0x20001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7f}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000c010}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xffdb, 0x0, 0x1, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 2.325640192s ago: executing program 3 (id=8877): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) 2.195849024s ago: executing program 3 (id=8878): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000680)='jbd2_lock_buffer_stall\x00'}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioperm(0x200, 0xa, 0x53) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x90020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 2.175561514s ago: executing program 2 (id=8879): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000ddffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000042000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r4 = socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000004010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000034000000080a010100000000000000000100000008000940000000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff00000000"]}, 0x108) request_key(0x0, 0x0, 0x0, 0x0) 2.101526366s ago: executing program 1 (id=8881): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 2.100782976s ago: executing program 4 (id=8882): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52d, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvnWSyyW62SdUHLbRWW8kW3ZmksW3woVYQfSqI9X2NySSETDIhM2k3oWj2LxBEVPBJX3wR/AMEWfDFRxEK+qxQUUS3CvqgvTIzd5I4uZPM1tlMdvL5wN17zrk/vufM5ty5Pw53Ariyno2I1yLi/TRNX4iImay8kE1x2J6a67334O2V5pREmr7x1ySSrKyzrySb38g2m4yIr3454hvJ6bj1/YPN5Wq1spvly42tnXJ9/+D2xtbyemW9sr24uPDy0itLLy3ND6SdNyPi1S/+8Xvf/smXXv3FZ976w50/3/pms1rT2fKT7XhI42ctbDe9eG2ya4PdDxjsMmq2p9jJTPW3zb1HWB8AAHprnuN/KCI+GREvxEyMnX06CwAAADyG0s9Px7+TiDTfRI9yAAAA4DFSaI2BTQqlbCzAdBQKpVJ7DO9H4nqhWqs3Pr1W29tebY+VnY1iYW2jWpnPxgrPRjFp5hda6eP8i135xYh4MiK+OzPVypdWatXVYd/8AAAAgCviRtf1/z9m2tf/AAAAwIiZHXYFAAAAgEfO9T8AAACMPtf/AAAAMNK+8vrrzSnt/P716pv7e5u1N2+vVuqbpa29ldJKbXentF6rrbfe2bd13v6qtdrOZ2N77265Uak3yvX9gztbtb3txp2NmLyQBgEAAACnPPnx+79LIuLwc1OtqWli2JUCLsT4USrJ5jm9//dPtOfvXlClgAsx1sc6717LL3eeAI+38e6CHn0dGD3FYVcAGLrknOU9B+/8Opt/YrD1AQAABm/uY/nP/wvnbnl4/irApaYTw9XV9fw/nRlWRYAL13r+3+9AHicLMFKKfY0ABEbZ//38/1xp+lAVAgAABm66NSWFUnZ7bzoKhVIp4mbrZwGKydpGtTIfEU9ExG9nitea+YXWlsm51wwAAAAAAAAAAAAAAAAAAAAAAAAAQFuaJpECAAAAIy2i8Kfkl+13+c/NPD/dfX9gIvlX6yeBJyLirR++8f27y43G7kKz/G9H5Y0fZOUvDuMOBgAAANCtc53emv9z2LUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNS89+Dtlc7Ux+pTg4r7ly9ExGxe/PGYbM0noxgR1/+exPiJ7ZKIGBtA/MN7EfHRvPhJs1pHIfPiD+JDOCd+zGafQl78GwOID1fZ/ebx57W8/leIZ1vz/P43HvE/+Q+q9/Evjo5/Yz36/80+Yzz1zs/KPePfi3hqPP/404mf9Ij/XJ/xv/61g4Ney9IfRcx1vn9aR7yTEY5T5cbWTrm+f3B7Y2t5vbJe2V5cXHh56ZWll5bmy2sb1Ur2b26M7zz98/fPav/13O+/JKtN7/Y/n7O/vO+k/7xz98GHO5nD0/FvPZcT/1c/ztY4Hb+QxflUlm4un+ukD9vpk5756W+eOav9q8ftLz7M//+tXjvtdqqjPN3vnw4A8AjU9w82l6vVyu7IJppX6ZegGhKXMPGtge4wTdO02adyFt2PiH72k8SAW1rIr89xoucRYNhHJgAAYNCOT/qHXRMAAAAAAAAAAAAAAAAAAAC4ui7iLWvdMY9fgZwM4hXaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8d8AAAD//42Q0/o=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x2, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r3, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}]}]}, 0x24}}, 0x40050) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x88}, 0x4040) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.969941158s ago: executing program 3 (id=8883): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000000c0)={0x3, 0x9, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x2, 0x2}) io_uring_setup(0x7100, &(0x7f00000002c0)={0x0, 0xb799, 0x20, 0x40000000, 0x19}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.968105468s ago: executing program 1 (id=8893): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./bus\x00', 0x410c84, &(0x7f0000001040)={[{@block_validity}, {@i_version}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@norecovery}, {@abort}]}, 0x1, 0x775, &(0x7f0000001180)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x840000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c5902, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) socket$nl_route(0x10, 0x3, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "abd4dc59f835915e55e88509de7f1939e8ab180155acc8af039a5be422000000000000000001000000000000000000000000000000890080001400", 0x1000010000000a}, 0x60) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, 0x0, 0x805) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x24008010) 1.927674198s ago: executing program 0 (id=8884): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x28, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1.766424331s ago: executing program 4 (id=8885): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x6000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRES64=r4], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x101880, 0x9) finit_module(r7, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 1.403444217s ago: executing program 4 (id=8886): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mount(&(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000040)='trans=rdma,') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) 734.088138ms ago: executing program 2 (id=8887): signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000840)={{r0, r1+10000000}, {0x0, 0x989680}}, 0x0) rt_sigaction(0x3f, &(0x7f0000000940)={&(0x7f00000008c0)="c46279340cdbc4c261ad9a0c000000c4c2d503f264430fae54bcc0660f638d9b540000c482c5ac2c566742d0430366f30fbae70040d9fa90", 0x40000001, 0x0, {[0x40]}}, 0x0, 0x8, &(0x7f0000000a80)) setsockopt(0xffffffffffffffff, 0x800000010d, 0x2, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x2, 0x0, &(0x7f0000000280)) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x64, r4, 0x405, 0x70bd24, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 733.293848ms ago: executing program 0 (id=8898): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) fstatfs(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x6) symlinkat(0x0, r2, 0x0) readlinkat(r2, 0x0, 0x0, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 555.143631ms ago: executing program 0 (id=8888): ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x103) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = syz_io_uring_setup(0xec5, 0x0, 0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0xcb, 0x10a5, 0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc}}}}]}, 0x78}}, 0x0) 547.047751ms ago: executing program 3 (id=8889): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x40000}, 0x4000) epoll_create(0x5) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x2, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0xf0e, 0xb2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 381.722254ms ago: executing program 4 (id=8890): socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x129, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0x2}, {0xd, 0x9}}}, 0x24}}, 0x0) 359.195844ms ago: executing program 0 (id=8891): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8695, 0x20001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x7f}, @IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000c010}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xffdb, 0x0, 0x1, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) 357.538144ms ago: executing program 2 (id=8892): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = memfd_secret(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) fcntl$setlease(r0, 0x400, 0x0) close(r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, 0x0, &(0x7f00000005c0)=r4}, 0x20) 355.708995ms ago: executing program 3 (id=8894): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r4}]}]}, 0x28}}, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='console\x00', r6, 0x0, 0x4000000001}, 0x18) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x600, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x13}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000031401002abd7000f6dbdf250900020073397a3100000000080041007369770014003300626f6e6430000000000000000000ff0092adb943d7640118cf1b739925ea34517e9d13f9ef331bb56d14a8c3627f76c69d3c4b1d3b14207056c3a8b0550e6c904319d954141f04a6651dae02bf050efba51af1de0bbbec6cf938ec09a4acdaa1230c4fac2af1a9145c248395bd8601438f43e3afa0f00b50f00dafed5c07f19c088e93bad69c06cb26ff09e92411479de2df"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 261.947116ms ago: executing program 1 (id=8895): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x0, 0x7}}]}}]}, 0x3c}}, 0x0) connect$packet(r2, &(0x7f0000000200)={0x11, 0x8, r6, 0x1, 0x8}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x100000c, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x10001, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 236.846986ms ago: executing program 4 (id=8896): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x100a, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0, @ANYRES8=r1, @ANYRES16=r1, @ANYRES32=0x0, @ANYRESDEC, @ANYRESHEX=r1], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 139.061618ms ago: executing program 0 (id=8897): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$kcm(0xa, 0x6, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 138.726008ms ago: executing program 2 (id=8899): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) timerfd_create(0x9, 0x800) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x4000) socket$phonet(0x23, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/70}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20) 18.79331ms ago: executing program 3 (id=8900): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000140)='cachefiles_read\x00', r1, 0x0, 0x2}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000005c0)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "8ca226cbfeba6997f180ce817932fa023970f02a10fa6e717dfff1793d69f8875616c7091a45d69ed137865040bc7bc6c7c68f8115ac6808db18b137c6d49acc", 0x2f}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0x0, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2004008, &(0x7f0000000740)={[{@nogrpid}, {@minixdf}], [{@obj_type={'obj_type', 0x3d, 'syzkaller\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@subj_type={'subj_type', 0x3d, '\xba\x99(\x90\xb2\xcd\x7f\x9b\x18\x1f\xc3J'}}, {@obj_role={'obj_role', 0x3d, '@\''}}]}, 0x0, 0x52e, &(0x7f0000000f00)="$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") prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='\x84C\v\xcd*\x84\xee@\xea\\\xe5\xac\xe7?') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='xprtrdma_reply\x00'}, 0x12) shmdt(0x0) 0s ago: executing program 2 (id=8901): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) lseek(0xffffffffffffffff, 0x3, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xf) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="458d", 0x2}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x22}], 0x1}, 0x4c2103a0) kernel console output (not intermixed with test programs): 8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 337.296259][ T29] audit: type=1326 audit(337.140:11928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 337.319349][ T29] audit: type=1326 audit(337.140:11929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23432 comm="syz.2.8068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 337.522598][T23440] syzkaller0: entered promiscuous mode [ 337.528216][T23440] syzkaller0: entered allmulticast mode [ 337.542350][T23444] loop9: detected capacity change from 0 to 128 [ 337.617424][T23444] loop9: detected capacity change from 128 to 0 [ 337.624700][T23444] syz.9.8072: attempt to access beyond end of device [ 337.624700][T23444] loop9: rw=524288, sector=34, nr_sectors = 1 limit=0 [ 337.638238][T23444] syz.9.8072: attempt to access beyond end of device [ 337.638238][T23444] loop9: rw=524288, sector=35, nr_sectors = 1 limit=0 [ 337.670985][T23444] syz.9.8072: attempt to access beyond end of device [ 337.670985][T23444] loop9: rw=524288, sector=36, nr_sectors = 1 limit=0 [ 337.695402][T23444] syz.9.8072: attempt to access beyond end of device [ 337.695402][T23444] loop9: rw=524288, sector=37, nr_sectors = 1 limit=0 [ 337.709142][T23444] syz.9.8072: attempt to access beyond end of device [ 337.709142][T23444] loop9: rw=524288, sector=38, nr_sectors = 1 limit=0 [ 337.711211][T23452] loop1: detected capacity change from 0 to 256 [ 337.722694][T23444] syz.9.8072: attempt to access beyond end of device [ 337.722694][T23444] loop9: rw=524288, sector=39, nr_sectors = 1 limit=0 [ 337.743584][T23444] syz.9.8072: attempt to access beyond end of device [ 337.743584][T23444] loop9: rw=524288, sector=40, nr_sectors = 1 limit=0 [ 337.758441][T23444] syz.9.8072: attempt to access beyond end of device [ 337.758441][T23444] loop9: rw=524288, sector=41, nr_sectors = 1 limit=0 [ 337.759554][T23452] msdos: Unknown parameter '»ÿ¸èäÓØûyûé/n' [ 337.778177][T23444] syz.9.8072: attempt to access beyond end of device [ 337.778177][T23444] loop9: rw=0, sector=34, nr_sectors = 1 limit=0 [ 337.778210][T23444] FAT-fs (loop9): Directory bread(block 34) failed [ 337.778235][T23444] syz.9.8072: attempt to access beyond end of device [ 337.778235][T23444] loop9: rw=0, sector=35, nr_sectors = 1 limit=0 [ 337.797152][T23452] loop1: detected capacity change from 0 to 256 [ 337.825707][T23444] FAT-fs (loop9): Directory bread(block 35) failed [ 337.841484][T23444] FAT-fs (loop9): Directory bread(block 36) failed [ 337.852513][T23444] FAT-fs (loop9): Directory bread(block 37) failed [ 337.895968][T23444] FAT-fs (loop9): Directory bread(block 38) failed [ 337.915882][T23444] FAT-fs (loop9): Directory bread(block 39) failed [ 337.942591][T23444] FAT-fs (loop9): Directory bread(block 40) failed [ 338.002348][T23444] FAT-fs (loop9): Directory bread(block 41) failed [ 338.019657][T23458] dummy0: left allmulticast mode [ 338.024911][T23458] bridge0: port 6(dummy0) entered disabled state [ 338.026419][T23444] FAT-fs (loop9): FAT read failed (blocknr 32) [ 338.089033][T23461] 9pnet_fd: Insufficient options for proto=fd [ 338.120943][T23458] batadv0: left allmulticast mode [ 338.126094][T23458] batadv0: left promiscuous mode [ 338.131147][T23458] bridge0: port 4(batadv0) entered disabled state [ 338.290030][T23458] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.375269][T23458] bridge_slave_1: left allmulticast mode [ 338.381055][T23458] bridge_slave_1: left promiscuous mode [ 338.386837][T23458] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.423725][T14297] FAT-fs (loop9): Directory bread(block 34) failed [ 338.435316][T23458] bond0: (slave bond_slave_0): Releasing backup interface [ 338.447746][T23458] bond_slave_0: left promiscuous mode [ 338.456892][T23458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.467791][ T7971] FAT-fs (loop9): bread failed in fat_clusters_flush [ 338.476031][T23465] futex_wake_op: syz.4.8079 tries to shift op by -1; fix this program [ 338.477567][T23458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.501071][T14297] FAT-fs (loop9): unable to read boot sector to mark fs as dirty [ 338.517180][T23458] vlan2: left allmulticast mode [ 338.522166][T23458] vlan2: left promiscuous mode [ 338.526998][T23458] bridge_slave_0: left promiscuous mode [ 338.532825][T23458] bridge0: port 3(vlan2) entered disabled state [ 338.547000][T23458] batadv2: left allmulticast mode [ 338.552104][T23458] batadv2: left promiscuous mode [ 338.557267][T23458] bridge0: port 5(batadv2) entered disabled state [ 338.571266][T23458] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 338.578665][T23458] batman_adv: batadv0: Removing interface: ip6gretap1 [ 338.601532][T23458] bond0: (slave vxlan0): Releasing backup interface [ 338.617302][T23458] vxlan0: left promiscuous mode [ 338.622723][T23458] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.631173][T23458] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.639563][T23458] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.647986][T23458] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.959951][T23496] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 339.966532][T23496] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.974226][T23496] vhci_hcd vhci_hcd.0: Device attached [ 339.984793][T23500] vhci_hcd: connection closed [ 339.993293][ T8017] vhci_hcd: stop threads [ 340.002414][ T8017] vhci_hcd: release socket [ 340.006887][ T8017] vhci_hcd: disconnect device [ 340.018569][T23508] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.028555][T23508] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.041253][T23505] __nla_validate_parse: 1 callbacks suppressed [ 340.041336][T23505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8094'. [ 340.059417][T23505] vlan2: entered promiscuous mode [ 340.064511][T23505] team0: entered promiscuous mode [ 340.078297][T23508] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.088193][T23508] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.141742][T23508] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.151725][T23508] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.199793][T23508] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.209814][T23508] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 340.223064][T23485] chnl_net:caif_netlink_parms(): no params data found [ 340.240446][T23516] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.278061][T23485] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.285144][T23485] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.293026][T23485] bridge_slave_0: entered allmulticast mode [ 340.299886][T23485] bridge_slave_0: entered promiscuous mode [ 340.306946][T23485] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.314024][T23485] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.321427][T23485] bridge_slave_1: entered allmulticast mode [ 340.328297][T23485] bridge_slave_1: entered promiscuous mode [ 340.349844][T23485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.360603][T23485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.387253][T23508] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.395511][T23508] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.405822][T23485] team0: Port device team_slave_0 added [ 340.414417][T23508] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.422699][T23508] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.432277][T23485] team0: Port device team_slave_1 added [ 340.453505][T23508] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.461932][T23508] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.471041][T23485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.478074][T23485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.504130][T23485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.517726][T23485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.524711][T23485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.535068][T23493] selinux_netlink_send: 115 callbacks suppressed [ 340.535117][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.550681][T23485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.555087][T23508] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.561895][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.569891][T23508] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 340.611551][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.624590][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.637584][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.650650][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.663825][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.714743][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.733843][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.769956][T23485] hsr_slave_0: entered promiscuous mode [ 340.787333][T23485] hsr_slave_1: entered promiscuous mode [ 340.793398][T23485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.795803][T23493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=23493 comm=syz.3.8091 [ 340.803194][T23485] Cannot create hsr debugfs directory [ 340.901150][T23526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8098'. [ 340.962626][T23485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.023269][T23485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.123551][T23485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.152582][T23540] loop1: detected capacity change from 0 to 512 [ 341.210601][T23485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.267277][T23540] EXT4-fs (loop1): 1 orphan inode deleted [ 341.286797][ T8017] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:66: Failed to release dquot type 1 [ 341.302073][T23540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.347319][T23485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.366376][T23485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.376612][T23485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.395886][T23485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.485641][T23485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.499700][T23485] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.510528][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.517742][ T7988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.536806][T23554] netlink: 'syz.3.8108': attribute type 1 has an invalid length. [ 341.547058][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.554358][ T7988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.607590][T23557] bond1: entered promiscuous mode [ 341.612696][T23557] bond1: entered allmulticast mode [ 341.630359][T23557] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.717178][T23554] ip6gretap1: entered promiscuous mode [ 341.722786][T23554] ip6gretap1: entered allmulticast mode [ 341.736026][ T59] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 341.763795][T23554] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 341.782976][T23485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.866422][ T8017] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 341.914719][T23485] veth0_vlan: entered promiscuous mode [ 341.928239][T23485] veth1_vlan: entered promiscuous mode [ 341.981239][T23485] veth0_macvtap: entered promiscuous mode [ 342.001434][T23485] veth1_macvtap: entered promiscuous mode [ 342.031759][T23485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.042425][T23485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.052375][T23485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.062901][T23485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.072772][T23485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.083240][T23485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.095002][T23485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.107697][T23485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.118313][T23485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.128267][T23485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.138808][T23485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.148778][T23485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.159259][T23485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.169908][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 342.169923][ T29] audit: type=1326 audit(342.210:12159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.199264][ T29] audit: type=1326 audit(342.210:12160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.222567][ T29] audit: type=1326 audit(342.210:12161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.245689][ T29] audit: type=1326 audit(342.210:12162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.268869][ T29] audit: type=1326 audit(342.210:12163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.291875][ T29] audit: type=1326 audit(342.210:12164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.315098][ T29] audit: type=1326 audit(342.210:12165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.338249][ T29] audit: type=1326 audit(342.210:12166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 342.361276][ T29] audit: type=1326 audit(342.210:12167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c5f4bbad0 code=0x7ffc0000 [ 342.384331][ T29] audit: type=1326 audit(342.210:12168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.2.8111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c5f4bbad0 code=0x7ffc0000 [ 342.408827][T23485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.417660][T23485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.426429][T23485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.435170][T23485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.443916][T23485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.584433][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.623446][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8113'. [ 342.685408][T23596] loop4: detected capacity change from 0 to 128 [ 342.731176][T23596] EXT4-fs: Ignoring removed nobh option [ 342.751719][T23596] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.819835][ T3311] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.029325][T23614] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 343.520193][T23636] random: crng reseeded on system resumption [ 344.886359][T23671] loop1: detected capacity change from 0 to 164 [ 344.943602][T23671] bio_check_eod: 25 callbacks suppressed [ 344.943695][T23671] syz.1.8143: attempt to access beyond end of device [ 344.943695][T23671] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 345.068490][T23671] syz.1.8143: attempt to access beyond end of device [ 345.068490][T23671] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 345.099111][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8144'. [ 345.308307][T23677] loop4: detected capacity change from 0 to 1024 [ 345.322046][T23679] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.331896][T23679] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.390970][T23677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.419052][T23679] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.429044][T23679] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.447372][T23677] siw: device registration error -23 [ 345.459729][T23688] vlan2: entered allmulticast mode [ 345.464943][T23688] bridge_slave_0: entered allmulticast mode [ 345.490001][T23679] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.499917][T23679] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.588347][T23679] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.598279][T23679] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 345.685309][T23679] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.693722][T23679] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.711129][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.762455][T23679] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.770901][T23679] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.800353][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8151'. [ 345.836629][T23679] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.844925][T23679] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.913176][T23679] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.921538][T23679] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 345.939022][T23691] loop1: detected capacity change from 0 to 128 [ 345.956572][T23701] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8153'. [ 346.055213][T23691] syz.1.8150: attempt to access beyond end of device [ 346.055213][T23691] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 346.379078][T23717] SELinux: ebitmap: truncated map [ 346.385474][T23717] SELinux: failed to load policy [ 347.176616][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 347.176635][ T29] audit: type=1326 audit(347.200:12646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23739 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 347.211197][ T29] audit: type=1326 audit(347.240:12647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23739 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 347.232845][T23743] loop1: detected capacity change from 0 to 256 [ 347.234610][ T29] audit: type=1326 audit(347.240:12648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23739 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 347.263758][ T29] audit: type=1326 audit(347.240:12649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23739 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 347.272545][T23743] FAT-fs (loop1): Directory bread(block 64) failed [ 347.292163][ T29] audit: type=1326 audit(347.240:12650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23739 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 347.302856][T23743] FAT-fs (loop1): Directory bread(block 65) failed [ 347.316431][ T29] audit: type=1400 audit(347.240:12651): avc: denied { accept } for pid=23739 comm="syz.3.8167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 347.323072][T23743] FAT-fs (loop1): Directory bread(block 66) failed [ 347.342055][ T29] audit: type=1326 audit(347.240:12652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23739 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 347.342089][ T29] audit: type=1326 audit(347.240:12653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23739 comm="syz.3.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 347.348819][T23743] FAT-fs (loop1): Directory bread(block 67) failed [ 347.416239][T23743] FAT-fs (loop1): Directory bread(block 68) failed [ 347.417415][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8169'. [ 347.422932][T23743] FAT-fs (loop1): Directory bread(block 69) failed [ 347.438427][T23743] FAT-fs (loop1): Directory bread(block 70) failed [ 347.468543][T23743] FAT-fs (loop1): Directory bread(block 71) failed [ 347.475238][T23743] FAT-fs (loop1): Directory bread(block 72) failed [ 347.485363][T23743] FAT-fs (loop1): Directory bread(block 73) failed [ 347.546831][T23743] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8168'. [ 347.579152][T23762] futex_wake_op: syz.1.8176 tries to shift op by -1; fix this program [ 347.628486][ T29] audit: type=1400 audit(347.660:12654): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 347.698694][T23771] loop1: detected capacity change from 0 to 512 [ 347.726849][T23771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 347.760035][ T29] audit: type=1326 audit(347.780:12655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.0.8182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 347.801475][T23771] EXT4-fs (loop1): 1 truncate cleaned up [ 347.807777][T23771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.838048][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.914178][T23783] loop4: detected capacity change from 0 to 128 [ 347.971650][T23782] hugetlbfs: syz.0.8183 (23782): Using mlock ulimits for SHM_HUGETLB is obsolete [ 348.064899][T23785] block device autoloading is deprecated and will be removed. [ 348.768372][T23796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8190'. [ 348.860835][T23796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8190'. [ 349.618072][T23822] selinux_netlink_send: 161 callbacks suppressed [ 349.618094][T23822] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23822 comm=syz.4.8196 [ 349.980366][T23846] netlink: 'syz.2.8204': attribute type 14 has an invalid length. [ 350.142835][T23854] loop1: detected capacity change from 0 to 512 [ 350.183506][T23854] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.8209: casefold flag without casefold feature [ 350.214462][T23854] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.8209: couldn't read orphan inode 15 (err -117) [ 350.248249][T23854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.339272][T23854] macvlan2: entered promiscuous mode [ 350.344790][T23854] bridge0: port 1(macvlan2) entered blocking state [ 350.351837][T23854] bridge0: port 1(macvlan2) entered disabled state [ 350.358800][T23854] macvlan2: entered allmulticast mode [ 350.366373][T23854] macvlan2: left allmulticast mode [ 350.378029][T23872] netlink: 'syz.2.8213': attribute type 10 has an invalid length. [ 350.406895][T23870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8212'. [ 351.320375][T23890] netlink: 'syz.4.8218': attribute type 10 has an invalid length. [ 351.328343][T23890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8218'. [ 351.411988][T23892] openvswitch: netlink: Message has 6 unknown bytes. [ 351.463628][T23890] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 351.481437][T23890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.490276][T23890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.622429][T13469] IPVS: starting estimator thread 0... [ 351.679354][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.720138][T23910] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 351.727211][T23901] IPVS: using max 2352 ests per chain, 117600 per kthread [ 352.204047][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 352.204062][ T29] audit: type=1326 audit(352.210:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.0.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 352.233393][ T29] audit: type=1326 audit(352.210:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23913 comm="syz.0.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 352.293534][T23918] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.318712][T23922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8230'. [ 352.332250][ T29] audit: type=1326 audit(352.340:12815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23916 comm="syz.0.8228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 352.411230][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8230'. [ 352.449661][ T29] audit: type=1326 audit(352.480:12816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 352.452141][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8230'. [ 352.472826][ T29] audit: type=1326 audit(352.480:12817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 352.504834][ T29] audit: type=1326 audit(352.480:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 352.527853][ T29] audit: type=1326 audit(352.480:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 352.550989][ T29] audit: type=1326 audit(352.480:12820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 352.574168][ T29] audit: type=1326 audit(352.480:12821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 352.595892][T23922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.597304][ T29] audit: type=1326 audit(352.480:12822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23926 comm="syz.2.8231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 352.638584][T23931] netlink: 'gtp': attribute type 4 has an invalid length. [ 352.645884][T23931] netlink: 152 bytes leftover after parsing attributes in process `gtp'. [ 352.655564][T23931] : renamed from  (while UP) [ 352.687483][T23928] bond1 (unregistering): Released all slaves [ 352.726922][T23918] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.764314][T23935] IPVS: Error connecting to the multicast addr [ 352.772195][T23935] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 352.797326][T23918] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.847160][T23918] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.871426][T23938] netlink: 'syz.0.8235': attribute type 27 has an invalid length. [ 353.171156][T23938] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.180156][T23938] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.671606][T23943] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 353.812217][T23938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.822091][T23938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.319407][T23938] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.328543][T23938] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.337584][T23938] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.346688][T23938] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.567632][T23918] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.579690][T23955] loop1: detected capacity change from 0 to 164 [ 354.782846][T23918] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.817901][T23918] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.838321][T23918] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.913872][T23970] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23970 comm=syz.4.8247 [ 354.944749][T23967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8245'. [ 354.992638][T23974] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.042344][T23980] netlink: 'syz.4.8248': attribute type 10 has an invalid length. [ 355.050338][T23980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8248'. [ 355.063827][T23979] loop1: detected capacity change from 0 to 1024 [ 355.077360][T23980] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 355.098745][T23974] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.117244][T23979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.190716][T23979] SELinux: ebitmap: map size 74280818 does not match my size 64 (high bit was 33554432) [ 355.202995][T23974] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.218673][T23979] SELinux: failed to load policy [ 355.242279][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.308757][T23974] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.322572][T23988] loop1: detected capacity change from 0 to 1024 [ 355.332774][T23988] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 355.343143][T23988] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 355.389133][T23990] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 356.271881][T23997] Set syz1 is full, maxelem 65536 reached [ 356.824767][T24034] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24034 comm=syz.3.8271 [ 356.972339][T23974] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.984550][T23974] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 356.996368][T23974] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.008753][T23974] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.037031][T24038] IPVS: Error connecting to the multicast addr [ 357.976702][T24052] pim6reg: entered allmulticast mode [ 358.015405][T24052] pim6reg: left allmulticast mode [ 358.034096][T24054] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 358.723393][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 358.723434][ T29] audit: type=1326 audit(358.750:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 358.823402][T24074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8285'. [ 358.834265][T24074] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 358.873844][ T29] audit: type=1326 audit(358.840:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 358.897014][ T29] audit: type=1326 audit(358.840:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 358.920480][ T29] audit: type=1326 audit(358.840:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 358.943519][ T29] audit: type=1326 audit(358.840:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 358.966522][ T29] audit: type=1326 audit(358.840:12963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 358.989755][ T29] audit: type=1326 audit(358.840:12964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 359.012833][ T29] audit: type=1326 audit(358.840:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 359.035781][ T29] audit: type=1400 audit(358.840:12966): avc: denied { read } for pid=24072 comm="syz.0.8285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.054795][ T29] audit: type=1326 audit(358.840:12967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24072 comm="syz.0.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 359.356685][T24088] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.366503][T24088] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.391686][T24092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8289'. [ 359.400795][T24092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8289'. [ 359.466713][T24088] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.476676][T24088] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.557766][T24088] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.567707][T24088] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.647353][T24088] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.657230][T24088] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 359.729651][T24088] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.737985][T24088] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.769049][T24088] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.777371][T24088] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.813260][T24088] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.821519][T24088] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.873567][T24088] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.881941][T24088] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 359.995617][T24101] lo: entered allmulticast mode [ 360.008333][T24100] lo: left allmulticast mode [ 360.319207][T24109] loop1: detected capacity change from 0 to 128 [ 362.780739][T24137] netlink: 'syz.0.8303': attribute type 10 has an invalid length. [ 362.788637][T24137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8303'. [ 362.847538][T24137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.856411][T24137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.875491][T24137] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 362.884474][T24137] team0: Failed to send options change via netlink (err -105) [ 362.892061][T24137] team0: Port device geneve1 added [ 362.903718][T24133] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.931192][T24140] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.981328][T24133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.993346][T24141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8304'. [ 363.002403][T24141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8304'. [ 363.039678][T24140] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.079155][T24133] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.097738][T24140] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.120139][T24133] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.133335][T24133] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.149799][T24133] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.163084][T24140] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.347428][T24140] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.364389][T24140] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.396896][T24140] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.778451][T24140] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.865496][T24150] loop1: detected capacity change from 0 to 2048 [ 363.964152][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 363.964177][ T29] audit: type=1326 audit(363.990:13073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24139 comm="syz.4.8304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 363.999172][T24150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.301039][ T29] audit: type=1326 audit(364.020:13074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24139 comm="syz.4.8304" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 364.360732][ T29] audit: type=1326 audit(364.390:13075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.3.8309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 364.383864][ T29] audit: type=1326 audit(364.390:13076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.3.8309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 364.407009][ T29] audit: type=1326 audit(364.390:13077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.3.8309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 364.407092][ T29] audit: type=1326 audit(364.390:13078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.3.8309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 364.431903][ T29] audit: type=1326 audit(364.390:13079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.3.8309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 364.433117][T24160] batman_adv: batadv0: Adding interface: dummy0 [ 364.433203][T24160] batman_adv: batadv0: Interface activated: dummy0 [ 364.434756][ T29] audit: type=1400 audit(364.460:13080): avc: denied { ioctl } for pid=24156 comm="syz.3.8309" path="socket:[81963]" dev="sockfs" ino=81963 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 364.437993][T24158] loop4: detected capacity change from 0 to 2048 [ 364.443402][T24160] batadv0: mtu less than device minimum [ 364.443827][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.444262][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.444676][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.445123][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.445702][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.446269][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.446727][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.447162][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.447695][T24160] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 364.456267][ T29] audit: type=1326 audit(364.490:13081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.3.8309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 364.456402][ T29] audit: type=1326 audit(364.490:13082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24156 comm="syz.3.8309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 364.501116][T24158] loop4: p1 < > p3 [ 364.504290][T24162] xt_hashlimit: size too large, truncated to 1048576 [ 364.508193][T24158] loop4: p3 size 134217728 extends beyond EOD, truncated [ 364.511575][T24158] .Ó¡ðûA¸ß9÷ûÎwN: renamed from bond0 (while UP) [ 364.928241][T24172] Cannot find set identified by id 0 to match [ 364.961615][T24174] netlink: 'syz.3.8314': attribute type 1 has an invalid length. [ 364.978568][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.011765][T24177] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 365.029001][T24177] loop1: detected capacity change from 0 to 1024 [ 365.043064][T24174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 365.090090][T24174] bond2: (slave bond3): making interface the new active one [ 365.124001][T24174] bond2: (slave bond3): Enslaving as an active interface with an up link [ 365.203451][T24183] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 365.225103][T24174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8314'. [ 365.234847][T24174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.500060][T24196] nfs4: Bad value for 'source' [ 365.509671][T24198] loop1: detected capacity change from 0 to 256 [ 365.536809][T24198] syz_tun: entered allmulticast mode [ 365.543650][T24197] syz_tun: left allmulticast mode [ 365.555277][T24200] batman_adv: batadv0: Interface deactivated: dummy0 [ 365.562323][T24200] batman_adv: batadv0: Removing interface: dummy0 [ 365.596665][T24200] bond1: (slave ip6gretap1): Removing an active aggregator [ 365.616536][T24200] bond1: (slave ip6gretap1): Releasing backup interface [ 365.635375][T24203] loop4: detected capacity change from 0 to 512 [ 365.643384][T24200] ip6gretap1: left promiscuous mode [ 365.648796][T24200] ip6gretap1: left allmulticast mode [ 365.688294][T24200] bond2: (slave bond3): Releasing backup interface [ 365.695014][T24200] bond2: (slave bond3): the permanent HWaddr of slave - d6:2e:cb:51:ad:08 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 365.716927][T24205] netlink: 4 bytes leftover after parsing attributes in process `kfree'. [ 365.761019][T24200] bond2: (slave gretap1): making interface the new active one [ 365.815090][T24200] bond2: (slave gretap1): Releasing backup interface [ 366.647995][T24219] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24219 comm=syz.2.8328 [ 366.663585][T24219] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.673508][T24219] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.708162][T24219] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.718100][T24219] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.817457][T24219] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.827348][T24219] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.906421][T24219] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.916324][T24219] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 366.998868][T24219] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.007293][T24219] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.025534][T24219] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.033903][T24219] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.063315][T24219] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.071745][T24219] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.116133][T24239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8335'. [ 367.130696][T24219] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.139265][T24219] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 367.172718][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8336'. [ 367.356939][T24250] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8338'. [ 367.559090][T24263] loop4: detected capacity change from 0 to 512 [ 367.653909][T24260] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.707780][T24264] team0: Failed to send options change via netlink (err -105) [ 367.764495][T24264] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 367.853037][T24264] team0: Port device team_slave_1 removed [ 367.903376][T24266] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.966105][T24260] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.014939][T24266] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.048009][T24260] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.060166][T24266] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.097229][T24260] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.137223][T24266] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.222085][T24278] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24278 comm=syz.1.8352 [ 368.245594][T24260] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.260468][T24260] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.273878][T24260] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.293871][T24260] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.314759][T24266] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.327222][T24266] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.339532][T24266] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.352911][T24266] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 368.549403][T24286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8354'. [ 368.560583][T24286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8354'. [ 368.743357][T24297] netlink: 'syz.3.8358': attribute type 10 has an invalid length. [ 369.113025][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 369.113127][ T29] audit: type=1400 audit(369.140:13496): avc: denied { name_connect } for pid=24303 comm="syz.1.8360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 369.334457][T24308] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8361'. [ 369.574392][T24314] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8363'. [ 369.754714][ T29] audit: type=1326 audit(369.750:13497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.777837][ T29] audit: type=1326 audit(369.750:13498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.800905][ T29] audit: type=1326 audit(369.750:13499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.823978][ T29] audit: type=1326 audit(369.750:13500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.847077][ T29] audit: type=1326 audit(369.750:13501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.870093][ T29] audit: type=1326 audit(369.750:13502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.893189][ T29] audit: type=1326 audit(369.750:13503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.916300][ T29] audit: type=1326 audit(369.750:13504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.939498][ T29] audit: type=1326 audit(369.760:13505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24321 comm="syz.1.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 369.953980][T24323] loop1: detected capacity change from 0 to 128 [ 370.097105][T24323] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 370.643454][T24331] tipc: Started in network mode [ 370.648495][T24331] tipc: Node identity eebd0f384133, cluster identity 4711 [ 370.655876][T24331] tipc: Enabled bearer , priority 0 [ 370.664106][T24337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8370'. [ 370.673574][T24337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8370'. [ 370.731509][T24326] tipc: Resetting bearer [ 370.759474][T24326] tipc: Disabling bearer [ 371.066770][T24361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=24361 comm=syz.4.8381 [ 371.175601][T24363] loop1: detected capacity change from 0 to 512 [ 371.308549][T24361] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.339581][T24363] EXT4-fs error (device loop1): ext4_iget_extra_inode:4692: inode #15: comm syz.1.8379: corrupted in-inode xattr: invalid ea_ino [ 371.357186][T24363] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.8379: couldn't read orphan inode 15 (err -117) [ 371.373757][T24363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.498161][T24361] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.647625][T24361] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.975206][T24370] netlink: '+}[@': attribute type 13 has an invalid length. [ 371.985004][T24361] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.033763][T24370] 8021q: adding VLAN 0 to HW filter on device  [ 372.071333][T24370] net_ratelimit: 10 callbacks suppressed [ 372.071408][T24370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.131979][T24361] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.146139][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8384'. [ 372.188153][T24361] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.234897][T24361] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.298653][T24361] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.441163][T24389] netlink: 'syz.2.8389': attribute type 3 has an invalid length. [ 373.176454][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.400910][T24409] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 373.674821][T24422] netlink: 'syz.3.8400': attribute type 10 has an invalid length. [ 373.686329][T24422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.694621][T24422] batadv0: entered allmulticast mode [ 373.701032][T24422] : (slave batadv0): Enslaving as an active interface with an up link [ 374.146119][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 374.146159][ T29] audit: type=1326 audit(374.090:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24400 comm="syz.1.8392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7fc00000 [ 374.781381][T24439] xt_hashlimit: size too large, truncated to 1048576 [ 374.900032][T24446] xt_hashlimit: size too large, truncated to 1048576 [ 375.056064][T24450] loop4: detected capacity change from 0 to 2048 [ 375.149755][T24450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.307177][ T29] audit: type=1326 audit(375.320:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.330304][ T29] audit: type=1326 audit(375.320:13665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.353317][ T29] audit: type=1326 audit(375.320:13666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.376439][ T29] audit: type=1326 audit(375.330:13667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.399573][ T29] audit: type=1326 audit(375.330:13668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.422681][ T29] audit: type=1326 audit(375.330:13669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.445660][ T29] audit: type=1326 audit(375.330:13670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.469004][ T29] audit: type=1326 audit(375.330:13671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.492053][ T29] audit: type=1326 audit(375.330:13672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24458 comm="syz.0.8409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 375.600154][T24455] netlink: '+}[@': attribute type 1 has an invalid length. [ 375.614234][T24455] 8021q: adding VLAN 0 to HW filter on device bond6 [ 375.688093][T24465] loop1: detected capacity change from 0 to 128 [ 375.694775][T24465] EXT4-fs: Ignoring removed nobh option [ 375.702739][T24467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8411'. [ 375.711822][T24467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8411'. [ 375.720731][T24467] netlink: 'syz.0.8411': attribute type 18 has an invalid length. [ 375.736903][T24465] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.790588][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.809398][T22420] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.879689][T24474] loop4: detected capacity change from 0 to 512 [ 375.900481][T24474] EXT4-fs: Ignoring removed oldalloc option [ 375.930421][T24474] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.8413: Parent and EA inode have the same ino 15 [ 375.996747][T24474] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.8413: Parent and EA inode have the same ino 15 [ 376.039071][T24474] EXT4-fs (loop4): 1 orphan inode deleted [ 376.076285][T24474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.190370][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.245426][T24472] Set syz1 is full, maxelem 65536 reached [ 376.425391][T24492] syzkaller1: entered promiscuous mode [ 376.431254][T24492] syzkaller1: entered allmulticast mode [ 376.598337][T24508] loop4: detected capacity change from 0 to 164 [ 377.551466][T24537] loop4: detected capacity change from 0 to 1024 [ 377.593065][T24537] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 377.697642][T24541] vlan0: entered promiscuous mode [ 377.702743][T24541] dummy0: entered promiscuous mode [ 377.713074][T24539] rdma_op ffff88814b847580 conn xmit_rdma 0000000000000000 [ 377.787152][T24547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8439'. [ 377.850010][T24552] loop1: detected capacity change from 0 to 1024 [ 377.860493][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8439'. [ 377.879733][T24552] EXT4-fs: Ignoring removed orlov option [ 377.885476][T24552] EXT4-fs: Ignoring removed nomblk_io_submit option [ 377.909201][T24552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.933366][T24552] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.012796][T24559] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8443'. [ 378.022038][T24559] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8443'. [ 378.031137][T24559] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8443'. [ 378.323254][T24569] netlink: 172 bytes leftover after parsing attributes in process `syz.3.8448'. [ 378.404675][T24575] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 378.460514][T24579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8451'. [ 378.506994][T24585] loop4: detected capacity change from 0 to 512 [ 378.571364][T24585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.574792][T24564] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 378.617470][T24585] EXT4-fs (loop4): shut down requested (0) [ 378.642422][T24585] smc: net device bond0 applied user defined pnetid SYZ0 [ 378.710451][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.763631][T24600] sd 0:0:1:0: device reset [ 378.866253][ T7959] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): link status up again after 0 ms [ 378.874627][ T7959] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 378.986012][ T59] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.096040][ T59] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.163296][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 379.163392][ T29] audit: type=1326 audit(379.190:14015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91fd7a4127 code=0x7ffc0000 [ 379.193140][ T29] audit: type=1326 audit(379.210:14016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91fd749359 code=0x7ffc0000 [ 379.216311][ T29] audit: type=1326 audit(379.210:14017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 379.216490][ T7959] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.239387][ T29] audit: type=1326 audit(379.230:14018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91fd7a4127 code=0x7ffc0000 [ 379.239422][ T29] audit: type=1326 audit(379.230:14019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91fd749359 code=0x7ffc0000 [ 379.239454][ T29] audit: type=1326 audit(379.230:14020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 379.331730][ T29] audit: type=1326 audit(379.230:14021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91fd7a4127 code=0x7ffc0000 [ 379.354859][ T29] audit: type=1326 audit(379.230:14022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91fd749359 code=0x7ffc0000 [ 379.378133][ T29] audit: type=1326 audit(379.230:14023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 379.401234][ T29] audit: type=1326 audit(379.230:14024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24574 comm="syz.3.8450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91fd7a4127 code=0x7ffc0000 [ 379.436280][ T7959] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.546191][ T8017] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.656380][ T8017] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.771948][T24714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8470'. [ 379.805791][ T59] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.865560][T24723] loop4: detected capacity change from 0 to 512 [ 379.876635][T24723] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 379.885257][T24721] tipc: Enabling of bearer rejected, already enabled [ 379.926093][ T7963] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): failed to get link speed/duplex [ 379.953739][T24723] EXT4-fs (loop4): orphan cleanup on readonly fs [ 379.989661][T24723] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 380.031129][T24723] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 380.052721][T24723] EXT4-fs error (device loop4): ext4_orphan_get:1390: inode #16: comm syz.4.8472: iget: immutable or append flags not allowed on symlinks [ 380.080841][T24723] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.8472: couldn't read orphan inode 16 (err -117) [ 380.098314][T24723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.589027][T24737] loop1: detected capacity change from 0 to 1024 [ 380.630188][T24737] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 380.648720][T24737] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 380.674382][T24737] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #32: comm syz.1.8476: iget: special inode unallocated [ 380.732166][T24737] EXT4-fs (loop1): no journal found [ 380.737675][T24737] EXT4-fs (loop1): can't get journal size [ 380.771515][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.865311][T24737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c19c, mo2=0002] [ 380.882744][T24737] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.8476: iget: special inode unallocated [ 380.890555][T24744] netlink: 596 bytes leftover after parsing attributes in process `syz.0.8479'. [ 380.900352][T24737] EXT4-fs (loop1): failed to initialize system zone (-117) [ 380.912598][T24737] EXT4-fs (loop1): mount failed [ 380.982673][T24743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8477'. [ 380.996441][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8481'. [ 381.005519][T24752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8481'. [ 381.014567][T24752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8481'. [ 381.044981][T24756] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8484'. [ 381.056666][T24756] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.066564][T24756] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.161456][T24756] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.171405][T24756] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.200887][T24765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8486'. [ 381.217731][T24756] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.227575][T24756] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.241975][T24765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8486'. [ 381.277530][T24766] netlink: 'syz.1.8485': attribute type 6 has an invalid length. [ 381.309129][T24756] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.319010][T24756] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 381.397395][T24756] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.405643][T24756] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.434467][T24756] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.435238][T24768] netlink: 'syz.4.8487': attribute type 27 has an invalid length. [ 381.442765][T24756] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.471744][T24756] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.480117][T24756] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.496603][T24756] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.504925][T24756] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 381.742737][T24768] batadv0: left promiscuous mode [ 381.749107][T24768] batadv0: left allmulticast mode [ 381.797083][T24768] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 381.822703][T24768] geneve0: left allmulticast mode [ 381.846235][T24768] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.855486][T24768] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.865856][T24768] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.874913][T24768] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.892018][T24768] vxlan0: left promiscuous mode [ 382.020886][T24768] .Ó¡ðûA¸ß9÷ûÎwN: left promiscuous mode [ 382.027512][T24768] ip6gretap1: left promiscuous mode [ 382.034123][T24768] .Ó¡ðûA¸ß9÷ûÎwN: left allmulticast mode [ 382.040662][T24768] ip6gretap1: left allmulticast mode [ 382.645040][T24782] loop4: detected capacity change from 0 to 512 [ 382.670106][T24782] EXT4-fs (loop4): orphan cleanup on readonly fs [ 382.677312][T24782] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8492: bg 0: block 248: padding at end of block bitmap is not set [ 382.704461][T24782] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8492: Failed to acquire dquot type 1 [ 382.724637][T24782] EXT4-fs (loop4): 1 truncate cleaned up [ 382.751503][T24786] loop1: detected capacity change from 0 to 512 [ 382.764941][T24782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.787550][T24782] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 382.800595][T24786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.828404][T24782] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8492: Failed to acquire dquot type 1 [ 382.841213][T24782] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-28, ino=4). Please run e2fsck to fix. [ 382.878802][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.892331][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.028970][T24805] loop4: detected capacity change from 0 to 2048 [ 383.065562][T24805] EXT4-fs: Ignoring removed oldalloc option [ 383.087720][T24805] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 383.122169][T24805] wg2: entered promiscuous mode [ 383.127142][T24805] wg2: entered allmulticast mode [ 383.262085][T24813] loop4: detected capacity change from 0 to 512 [ 383.282396][T24813] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 383.286406][T24815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8500'. [ 383.317822][T24813] netlink: 'syz.4.8501': attribute type 27 has an invalid length. [ 383.342762][T24813] wg2: left promiscuous mode [ 383.347505][T24813] wg2: left allmulticast mode [ 384.055079][T24827] tipc: Enabling of bearer rejected, failed to enable media [ 384.127190][T24835] veth0_to_team: entered promiscuous mode [ 384.337733][T24848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8515'. [ 384.426420][ T29] kauditd_printk_skb: 595 callbacks suppressed [ 384.426437][ T29] audit: type=1326 audit(384.460:14616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.473472][T24854] loop1: detected capacity change from 0 to 1024 [ 384.515814][ T29] audit: type=1326 audit(384.490:14617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.538995][ T29] audit: type=1326 audit(384.490:14618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.561907][ T29] audit: type=1326 audit(384.490:14619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.585325][ T29] audit: type=1326 audit(384.490:14620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.608525][ T29] audit: type=1326 audit(384.490:14621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.631818][ T29] audit: type=1326 audit(384.490:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.654844][ T29] audit: type=1326 audit(384.490:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.677933][ T29] audit: type=1326 audit(384.490:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 384.700999][ T29] audit: type=1326 audit(384.490:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24849 comm="syz.3.8516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 385.257980][T24877] bond_slave_1: entered promiscuous mode [ 385.266537][T24877] bond_slave_1 (unregistering): left promiscuous mode [ 385.575257][T24893] 8021q: adding VLAN 0 to HW filter on device bond7 [ 385.770971][T24904] IPVS: Error connecting to the multicast addr [ 386.446249][T24916] __nla_validate_parse: 7 callbacks suppressed [ 386.446265][T24916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8550'. [ 386.461587][T24916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8550'. [ 386.470605][T24916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8550'. [ 386.492588][T24916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8550'. [ 386.522540][T24914] loop4: detected capacity change from 0 to 2048 [ 386.586410][T24914] loop4: p1 < > p4 [ 386.605356][T24914] loop4: p4 size 8388608 extends beyond EOD, truncated [ 386.641108][T24929] netlink: 'syz.2.8546': attribute type 27 has an invalid length. [ 387.167395][T24929] dummy0: left promiscuous mode [ 387.228511][T24929] wg2: left promiscuous mode [ 387.235131][T24929] wg2: left allmulticast mode [ 387.312844][T24929] geneve0: left allmulticast mode [ 387.372340][T24929] ip6erspan0: left allmulticast mode [ 387.487949][T24929] geneve2: left promiscuous mode [ 387.509822][T24929] bond4: left promiscuous mode [ 387.514796][T24929] bond4: left allmulticast mode [ 387.526866][T24929] gtp0: left promiscuous mode [ 387.638757][T24929] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 387.647338][T24929] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 387.655902][T24929] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 387.664456][T24929] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 387.900856][T24929] geneve3: left promiscuous mode [ 387.905909][T24929] geneve3: left allmulticast mode [ 387.985012][T24929] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.993522][T24929] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.001985][T24929] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.010399][T24929] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.036028][T24929] geneve4: left promiscuous mode [ 388.100990][T24929] veth11: left promiscuous mode [ 388.105940][T24929] veth11: left allmulticast mode [ 388.126673][T24929] bridge7: left allmulticast mode [ 388.281695][T24956] loop1: detected capacity change from 0 to 512 [ 388.322180][T24956] EXT4-fs: Ignoring removed bh option [ 388.351020][T24956] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 388.456613][T24968] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 388.541552][T24970] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8556'. [ 388.553115][T24970] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8556'. [ 388.635801][ T8011] unregister_netdevice: waiting for batadv0 to become free. Usage count = 4 [ 389.311864][T24990] : (slave batadv0): Releasing backup interface [ 389.415608][T24990] batadv0: left allmulticast mode [ 389.496814][T24993] loop1: detected capacity change from 0 to 512 [ 389.552204][T24993] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 389.574953][T24993] EXT4-fs (loop1): orphan cleanup on readonly fs [ 389.669746][T24993] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 389.704504][T24993] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 389.724954][T24993] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #16: comm syz.1.8565: iget: immutable or append flags not allowed on symlinks [ 389.818915][T24993] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.8565: couldn't read orphan inode 16 (err -117) [ 389.838849][T24993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 389.845892][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 389.845911][ T29] audit: type=1326 audit(389.870:14824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 389.880729][ T29] audit: type=1326 audit(389.870:14825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 389.903183][T24940] syz.4.8548 (24940) used greatest stack depth: 5384 bytes left [ 389.903718][ T29] audit: type=1326 audit(389.870:14826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 389.934338][ T29] audit: type=1326 audit(389.870:14827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 389.957371][ T29] audit: type=1326 audit(389.870:14828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 389.980526][ T29] audit: type=1326 audit(389.870:14829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 390.003569][ T29] audit: type=1326 audit(389.870:14830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 390.026753][ T29] audit: type=1326 audit(389.870:14831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 390.255325][ T29] audit: type=1326 audit(389.900:14832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 390.278484][ T29] audit: type=1326 audit(390.090:14833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24997 comm="syz.0.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 390.535349][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.971321][T25034] loop4: detected capacity change from 0 to 512 [ 391.070850][T25034] EXT4-fs error (device loop4): ext4_iget_extra_inode:4692: inode #15: comm syz.4.8574: corrupted in-inode xattr: invalid ea_ino [ 391.071030][T25034] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.8574: couldn't read orphan inode 15 (err -117) [ 391.072199][T25034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.004875][T25048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8583'. [ 392.401272][T25062] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8587'. [ 392.447126][T25062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8587'. [ 392.543954][T25065] netlink: 'syz.0.8588': attribute type 4 has an invalid length. [ 392.551851][T25065] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8588'. [ 392.567884][T25065] : renamed from bond0 [ 392.626302][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8586'. [ 392.641820][T25068] bond8: entered promiscuous mode [ 392.646945][T25068] bond8: entered allmulticast mode [ 392.652401][T25068] 8021q: adding VLAN 0 to HW filter on device bond8 [ 392.706505][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.721811][T25071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8590'. [ 392.731615][T25071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8590'. [ 392.750112][T25074] loop4: detected capacity change from 0 to 512 [ 392.757990][T25074] EXT4-fs: Ignoring removed oldalloc option [ 392.912998][T25074] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 393.214686][T25080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=25080 comm=syz.0.8592 [ 393.227667][T25080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=25080 comm=syz.0.8592 [ 393.240455][T25080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=25080 comm=syz.0.8592 [ 394.611743][T25108] set match dimension is over the limit! [ 394.834147][T25112] blktrace: Concurrent blktraces are not allowed on loop1 [ 394.913876][T25116] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 395.175784][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 395.175804][ T29] audit: type=1326 audit(395.180:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.205093][ T29] audit: type=1326 audit(395.180:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.228612][ T29] audit: type=1326 audit(395.180:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.251587][ T29] audit: type=1326 audit(395.180:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.274566][ T29] audit: type=1326 audit(395.180:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.297649][ T29] audit: type=1326 audit(395.180:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.320674][ T29] audit: type=1326 audit(395.180:15221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.343644][ T29] audit: type=1326 audit(395.180:15222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 395.366647][ T29] audit: type=1400 audit(395.180:15223): avc: denied { getopt } for pid=25120 comm="syz.4.8606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 395.385739][ T29] audit: type=1326 audit(395.180:15224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25120 comm="syz.4.8606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 396.077783][T25134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8611'. [ 396.536608][T25160] netlink: 'syz.1.8620': attribute type 4 has an invalid length. [ 396.544416][T25160] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8620'. [ 396.558179][T25160] : renamed from . [ 396.615603][T25167] net_ratelimit: 12 callbacks suppressed [ 396.615622][T25167] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 396.929624][T25186] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8630'. [ 397.612515][T25204] netlink: 'syz.0.8635': attribute type 3 has an invalid length. [ 397.632783][T25208] loop1: detected capacity change from 0 to 1024 [ 397.639651][T25208] EXT4-fs: dax option not supported [ 397.654025][T25208] loop1: detected capacity change from 0 to 512 [ 397.660953][T25208] EXT4-fs: Ignoring removed oldalloc option [ 397.673181][T25210] __nla_validate_parse: 5 callbacks suppressed [ 397.673198][T25210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8634'. [ 397.699420][T25208] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.8637: Parent and EA inode have the same ino 15 [ 397.719140][T25208] EXT4-fs (loop1): Remounting filesystem read-only [ 397.725918][T25208] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 397.752772][T25208] EXT4-fs (loop1): 1 orphan inode deleted [ 397.762967][T25208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.781925][T25208] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.987003][T25227] vlan0: entered allmulticast mode [ 397.992180][T25227] bond0: entered allmulticast mode [ 398.067053][T25227] bond0: (slave vlan0): Opening slave failed [ 398.133236][T25226] hsr_slave_0: left promiscuous mode [ 398.442662][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 398.508102][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 398.775824][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 398.805927][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 398.822013][T25242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8647'. [ 398.854700][T25242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8647'. [ 398.943255][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 398.969585][T25235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8645'. [ 399.221072][T25266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8654'. [ 399.294927][T25269] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 399.521484][T25284] loop4: detected capacity change from 0 to 2048 [ 400.187982][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 400.187999][ T29] audit: type=1400 audit(400.200:15485): avc: denied { associate } for pid=25279 comm="syz.2.8663" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 400.307143][ T29] audit: type=1326 audit(400.340:15486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.330389][ T29] audit: type=1326 audit(400.340:15487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.353582][ T29] audit: type=1326 audit(400.340:15488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.393393][ T29] audit: type=1326 audit(400.340:15489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.416779][ T29] audit: type=1326 audit(400.340:15490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.439999][ T29] audit: type=1326 audit(400.340:15491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.463084][ T29] audit: type=1326 audit(400.340:15492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.486159][ T29] audit: type=1326 audit(400.340:15493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.509290][ T29] audit: type=1326 audit(400.340:15494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25292 comm="syz.3.8666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f91fd7ad169 code=0x7ffc0000 [ 400.655060][T25309] loop1: detected capacity change from 0 to 2048 [ 400.692973][T25314] bond4: entered promiscuous mode [ 400.698254][T25314] bond4: entered allmulticast mode [ 400.714910][T25314] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.724253][T25309] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.740355][T25319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25319 comm=syz.0.8671 [ 400.753144][T25319] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=25319 comm=syz.0.8671 [ 400.775194][T25314] bond4 (unregistering): Released all slaves [ 400.799995][T25319] batman_adv: batadv0: Adding interface: dummy0 [ 400.806405][T25319] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.831979][T25319] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 401.748083][T25351] netlink: 'syz.4.8680': attribute type 10 has an invalid length. [ 401.767016][T25351] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 401.863511][T25354] bond0: entered promiscuous mode [ 401.868718][T25354] bond0: entered allmulticast mode [ 401.874443][T25354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.884365][T25354] bond0 (unregistering): Released all slaves [ 401.913593][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.175189][T25358] loop1: detected capacity change from 0 to 512 [ 402.294051][T25358] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8682: bg 0: block 248: padding at end of block bitmap is not set [ 402.394265][T25358] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.8682: Failed to acquire dquot type 1 [ 402.405944][T25361] netlink: 'syz.4.8684': attribute type 13 has an invalid length. [ 402.415490][T25358] EXT4-fs (loop1): 1 truncate cleaned up [ 402.424381][T25358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.465680][T25358] tipc: Enabled bearer , priority 27 [ 402.499460][T25358] hub 4-0:1.0: USB hub found [ 402.504284][T25358] hub 4-0:1.0: 8 ports detected [ 402.602181][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.619787][ T7959] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 402.681945][T25376] netlink: 'syz.1.8686': attribute type 10 has an invalid length. [ 402.689930][T25376] __nla_validate_parse: 3 callbacks suppressed [ 402.689948][T25376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8686'. [ 402.719171][T25376] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.727508][T25376] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.735908][T25376] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.744102][T25376] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.757513][T25376] geneve1: entered promiscuous mode [ 402.763416][T25376] team0: Port device geneve1 added [ 402.782181][T25384] loop4: detected capacity change from 0 to 512 [ 402.799084][T25386] netlink: 344 bytes leftover after parsing attributes in process `syz.1.8693'. [ 402.815124][T25386] loop1: detected capacity change from 0 to 512 [ 402.845463][T25386] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.042689][T25400] tmpfs: Bad value for 'mpol' [ 403.168996][T22420] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.203113][T25411] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8701'. [ 403.215834][T25411] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8701'. [ 403.239603][T25410] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8698'. [ 403.422546][T25426] loop4: detected capacity change from 0 to 4096 [ 403.448005][T25426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.535694][T25433] xt_hashlimit: size too large, truncated to 1048576 [ 403.575800][T13453] tipc: Node number set to 2945322808 [ 403.652362][T25439] xt_hashlimit: size too large, truncated to 1048576 [ 403.920097][T25459] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8715'. [ 403.929967][T25456] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8715'. [ 404.013382][T25464] macvlan0: entered promiscuous mode [ 404.019263][T25464] bridge0: port 1(macvlan0) entered blocking state [ 404.025940][T25464] bridge0: port 1(macvlan0) entered disabled state [ 404.036847][T25464] macvlan0: entered allmulticast mode [ 404.043072][T25464] macvlan0: left allmulticast mode [ 404.244164][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.595924][T25496] netlink: 'syz.3.8729': attribute type 1 has an invalid length. [ 405.619988][T25496] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.647854][T25496] bond4: (slave gretap2): making interface the new active one [ 405.665829][T25496] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 405.698897][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 405.698915][ T29] audit: type=1326 audit(405.730:15740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.734264][ T29] audit: type=1326 audit(405.760:15741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.757558][ T29] audit: type=1326 audit(405.760:15742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.780705][ T29] audit: type=1326 audit(405.760:15743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.804082][ T29] audit: type=1326 audit(405.760:15744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.827078][ T29] audit: type=1326 audit(405.760:15745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.850203][ T29] audit: type=1326 audit(405.760:15746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.873216][ T29] audit: type=1326 audit(405.760:15747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.896366][ T29] audit: type=1326 audit(405.760:15748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 405.919431][ T29] audit: type=1326 audit(405.760:15749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25492 comm="syz.2.8728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2c5f4bd169 code=0x7ffc0000 [ 406.079395][T25505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8742'. [ 406.148008][T25505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8742'. [ 406.849881][T25528] bond5: entered promiscuous mode [ 406.855041][T25528] bond5: entered allmulticast mode [ 406.943990][T25528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.018996][T25528] bond5 (unregistering): Released all slaves [ 407.940266][T25543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8744'. [ 407.949269][T25543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8744'. [ 407.958257][T25543] netlink: 'syz.3.8744': attribute type 18 has an invalid length. [ 408.031150][T25546] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8746'. [ 408.040398][T25546] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8746'. [ 408.049493][T25546] netlink: 108 bytes leftover after parsing attributes in process `syz.1.8746'. [ 408.381765][T25550] sch_tbf: burst 3092 is lower than device lo mtu (11337746) ! [ 409.072595][T25578] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 409.110629][T25578] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 409.160369][T25558] cgroup2: Unknown parameter 'cpuacct' [ 409.618121][T25595] netlink: 'syz.1.8761': attribute type 13 has an invalid length. [ 409.651335][T25595] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.659823][T25595] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.668297][T25595] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.676707][T25595] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.718913][T25596] bond9: entered promiscuous mode [ 409.724142][T25596] bond9: entered allmulticast mode [ 409.729612][T25596] 8021q: adding VLAN 0 to HW filter on device bond9 [ 409.744718][T25596] bond9 (unregistering): Released all slaves [ 409.765661][T25601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8763'. [ 409.794158][T25601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8763'. [ 409.843256][T25604] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.8764'. [ 409.999854][T25614] xt_CT: No such helper "pptp" [ 410.817391][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 410.817414][ T29] audit: type=1326 audit(410.850:15797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 410.867448][T25638] netlink: 'syz.0.8777': attribute type 27 has an invalid length. [ 410.902973][T25638] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.916133][T25638] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.925504][T25638] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.934754][T25638] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.957444][ T29] audit: type=1326 audit(410.880:15798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 410.980583][ T29] audit: type=1326 audit(410.880:15799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.003631][ T29] audit: type=1326 audit(410.880:15800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.026650][ T29] audit: type=1326 audit(410.880:15801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.049722][ T29] audit: type=1326 audit(410.880:15802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.072751][ T29] audit: type=1326 audit(410.880:15803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.095786][ T29] audit: type=1326 audit(410.880:15804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.118801][ T29] audit: type=1326 audit(410.880:15805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.141801][ T29] audit: type=1326 audit(410.880:15806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25636 comm="syz.0.8777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03d71d169 code=0x7ffc0000 [ 411.629125][T25652] loop4: detected capacity change from 0 to 512 [ 411.652691][T25652] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8781: bg 0: block 35: padding at end of block bitmap is not set [ 411.674738][T25652] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 411.687167][T25652] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.8781: invalid indirect mapped block 4294967295 (level 1) [ 411.708563][T25652] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.8781: invalid indirect mapped block 4294967295 (level 2) [ 411.727995][T25652] EXT4-fs (loop4): 1 truncate cleaned up [ 411.745464][T25652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.789805][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.814441][T25662] netlink: 'syz.4.8785': attribute type 4 has an invalid length. [ 412.870857][T25677] bond0: entered promiscuous mode [ 412.876064][T25677] bond0: entered allmulticast mode [ 412.881734][T25677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.890671][T25677] bond0 (unregistering): Released all slaves [ 413.243888][T25681] netlink: 'syz.1.8790': attribute type 27 has an invalid length. [ 413.254946][T25683] tipc: Enabled bearer , priority 27 [ 413.481903][T25689] __nla_validate_parse: 7 callbacks suppressed [ 413.481921][T25689] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8793'. [ 413.512800][T25687] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.8793'. [ 413.726538][T25701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8794'. [ 413.749680][T25701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8794'. [ 414.500670][T13475] tipc: Node number set to 2886997007 [ 414.777619][T25733] loop4: detected capacity change from 0 to 128 [ 414.784245][T25733] EXT4-fs: test_dummy_encryption option not supported [ 414.931416][T25736] bond0: entered promiscuous mode [ 414.936577][T25736] bond0: entered allmulticast mode [ 414.945860][T25736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.022082][T25738] loop4: detected capacity change from 0 to 256 [ 415.177173][T25736] bond0 (unregistering): Released all slaves [ 415.350937][T25742] netlink: 596 bytes leftover after parsing attributes in process `syz.3.8812'. [ 415.684664][T25745] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8813'. [ 415.732400][T25745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8813'. [ 415.861175][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 415.861193][ T29] audit: type=1326 audit(415.890:15930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 415.901410][ T29] audit: type=1326 audit(415.930:15931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 415.924512][ T29] audit: type=1326 audit(415.930:15932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 415.947806][ T29] audit: type=1326 audit(415.930:15933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 415.970919][ T29] audit: type=1326 audit(415.930:15934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 415.988198][T25758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8815'. [ 415.994252][ T29] audit: type=1326 audit(415.930:15935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 416.003173][T25758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8815'. [ 416.003194][T25758] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8815'. [ 416.044835][ T29] audit: type=1326 audit(415.930:15936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 416.067829][ T29] audit: type=1326 audit(415.930:15937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 416.090846][ T29] audit: type=1326 audit(415.930:15938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 416.114303][ T29] audit: type=1326 audit(415.930:15939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25756 comm="syz.4.8817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7682d169 code=0x7ffc0000 [ 416.561923][T25768] vlan0: entered allmulticast mode [ 416.707151][T25770] loop4: detected capacity change from 0 to 512 [ 416.718999][T25770] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8822: bg 0: block 248: padding at end of block bitmap is not set [ 416.734759][T25770] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8822: Failed to acquire dquot type 1 [ 416.764844][T25770] EXT4-fs (loop4): 1 truncate cleaned up [ 416.794289][T25770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.845385][T25770] tipc: Enabled bearer , priority 27 [ 416.889756][T25770] hub 4-0:1.0: USB hub found [ 416.894996][T25770] hub 4-0:1.0: 8 ports detected [ 416.928004][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.945203][ T7963] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 417.192721][T25788] macsec1: entered promiscuous mode [ 417.198093][T25788] veth1_to_batadv: entered promiscuous mode [ 417.253834][T25795] bond0: entered promiscuous mode [ 417.258999][T25795] bond0: entered allmulticast mode [ 417.280707][T25795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.347367][T25795] bond0 (unregistering): Released all slaves [ 418.129879][T25812] tipc: Failed to obtain node identity [ 418.135463][T25812] tipc: Enabling of bearer rejected, failed to enable media [ 418.371491][T25822] netlink: 'syz.4.8840': attribute type 27 has an invalid length. [ 418.996081][T25837] __nla_validate_parse: 5 callbacks suppressed [ 418.996105][T25837] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 419.119538][T25837] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 419.517212][T25850] bond9: entered promiscuous mode [ 419.522288][T25850] bond9: entered allmulticast mode [ 419.527714][T25850] 8021q: adding VLAN 0 to HW filter on device bond9 [ 419.551486][T25850] bond9 (unregistering): Released all slaves [ 420.325316][T25862] loop4: detected capacity change from 0 to 1024 [ 420.334780][T25856] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 420.365542][T25865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8853'. [ 420.401708][T25862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.425919][T25867] netlink: 'syz.2.8854': attribute type 4 has an invalid length. [ 420.433750][T25867] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8854'. [ 420.454740][T25862] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8863: bg 0: block 88: padding at end of block bitmap is not set [ 420.463622][T25867] : renamed from bond0 [ 420.494872][T25862] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 420.515407][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8856'. [ 420.543274][T25862] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): Removing an active aggregator [ 420.552268][T25877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8856'. [ 420.566425][T25862] .Ó¡ðûA¸ß9÷ûÎwN: (slave ip6gretap1): Releasing backup interface [ 420.577115][T25883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8857'. [ 420.591853][T25883] rdma_op ffff8881516ba580 conn xmit_rdma 0000000000000000 [ 420.652439][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.970835][T25902] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8867'. [ 421.234076][T25905] tipc: Enabling of bearer rejected, already enabled [ 421.248867][T25906] loop4: detected capacity change from 0 to 512 [ 421.297580][T25905] hub 4-0:1.0: USB hub found [ 421.327983][T25905] hub 4-0:1.0: 8 ports detected [ 421.514603][T25911] batman_adv: batadv0: Removing interface: dummy0 [ 421.524001][T25912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8870'. [ 421.646285][T25911] bridge_slave_0: left allmulticast mode [ 421.652051][T25911] bridge_slave_0: left promiscuous mode [ 421.657859][T25911] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.674276][T25911] bridge_slave_1: left allmulticast mode [ 421.678818][T25906] __quota_error: 706 callbacks suppressed [ 421.678839][T25906] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 421.680028][T25911] bridge_slave_1: left promiscuous mode [ 421.685756][T25906] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 421.695986][T25911] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.701423][T25906] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8867: Failed to acquire dquot type 1 [ 421.712981][T25906] EXT4-fs (loop4): 1 truncate cleaned up [ 421.736033][T25906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.793927][T25911] : (slave bond_slave_0): Releasing backup interface [ 421.806985][T25911] : (slave bond_slave_1): Releasing backup interface [ 421.817365][T25911] team0: Port device team_slave_0 removed [ 421.823522][T25911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.831721][T25911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.840698][T25911] team0: Port device geneve1 removed [ 421.856148][T25914] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 421.894099][T25915] team0: Mode changed to "activebackup" [ 421.974371][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.982371][ T29] audit: type=1326 audit(422.010:16643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.022998][ T29] audit: type=1326 audit(422.050:16644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.046239][ T29] audit: type=1326 audit(422.050:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.069349][ T29] audit: type=1326 audit(422.050:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.092464][ T29] audit: type=1326 audit(422.050:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.115646][ T29] audit: type=1326 audit(422.050:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.138842][ T29] audit: type=1326 audit(422.050:16649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.162016][ T29] audit: type=1326 audit(422.050:16650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25923 comm="syz.1.8873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0fbf34d169 code=0x7ffc0000 [ 422.279634][T25926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8875'. [ 422.342170][T25942] loop4: detected capacity change from 0 to 512 [ 422.397249][T25942] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8882: bg 0: block 248: padding at end of block bitmap is not set [ 422.419446][T25942] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.8882: Failed to acquire dquot type 1 [ 422.432862][T25942] EXT4-fs (loop4): 1 truncate cleaned up [ 422.441334][T25942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.523506][T25942] tipc: Enabling of bearer rejected, already enabled [ 422.571851][T25942] hub 4-0:1.0: USB hub found [ 422.587063][T25942] hub 4-0:1.0: 8 ports detected [ 422.651129][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.663881][ T7963] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:17: Failed to release dquot type 1 [ 422.774415][T25961] SELinux: ebitmap: truncated map [ 422.791842][T25963] Invalid ELF header magic: != ELF [ 422.810505][T25961] SELinux: failed to load policy [ 423.950529][T25978] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 424.088725][T25982] __nla_validate_parse: 3 callbacks suppressed [ 424.088758][T25982] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8890'. [ 424.112290][T25987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8894'. [ 424.112315][T25987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8894'. [ 424.112706][T25987] xt_hashlimit: max too large, truncated to 1048576 [ 424.122924][T25987] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98 [ 424.165945][T25988] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 424.199653][T25995] loop4: detected capacity change from 0 to 2048 [ 424.243440][T25995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.815969][T25995] ================================================================== [ 424.824140][T25995] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 424.831365][T25995] [ 424.833701][T25995] write to 0xffff88814ec09d44 of 4 bytes by task 26005 on cpu 0: [ 424.841439][T25995] __xa_set_mark+0x192/0x1c0 [ 424.846082][T25995] __folio_mark_dirty+0x3b8/0x4e0 [ 424.851129][T25995] mark_buffer_dirty+0x134/0x230 [ 424.856096][T25995] block_write_end+0x123/0x210 [ 424.860880][T25995] ext4_write_end+0x148/0x770 [ 424.865571][T25995] ext4_da_write_end+0x74/0x810 [ 424.870435][T25995] generic_perform_write+0x31e/0x4b0 [ 424.875734][T25995] ext4_buffered_write_iter+0x1ed/0x3c0 [ 424.881312][T25995] ext4_file_write_iter+0x3b2/0xf80 [ 424.886551][T25995] iter_file_splice_write+0x5f2/0x980 [ 424.891948][T25995] direct_splice_actor+0x160/0x2c0 [ 424.897111][T25995] splice_direct_to_actor+0x305/0x680 [ 424.902532][T25995] do_splice_direct+0xd9/0x150 [ 424.907319][T25995] do_sendfile+0x40a/0x690 [ 424.911751][T25995] __x64_sys_sendfile64+0x113/0x160 [ 424.916968][T25995] x64_sys_call+0xfc3/0x2e10 [ 424.921594][T25995] do_syscall_64+0xc9/0x1c0 [ 424.926120][T25995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.932073][T25995] [ 424.934423][T25995] read to 0xffff88814ec09d44 of 4 bytes by task 25995 on cpu 1: [ 424.942081][T25995] xas_find_marked+0x614/0x660 [ 424.946868][T25995] find_get_entry+0x5d/0x370 [ 424.951480][T25995] filemap_get_folios_tag+0xa0/0x220 [ 424.956794][T25995] filemap_fdatawait_range+0x8c/0x200 [ 424.962180][T25995] __writeback_single_inode+0xe8/0x850 [ 424.967669][T25995] writeback_single_inode+0x16c/0x3f0 [ 424.973050][T25995] sync_inode_metadata+0x60/0x90 [ 424.978001][T25995] generic_buffers_fsync_noflush+0xd8/0x120 [ 424.983923][T25995] ext4_sync_file+0x1c3/0x6c0 [ 424.988611][T25995] vfs_fsync_range+0x116/0x130 [ 424.993399][T25995] ext4_buffered_write_iter+0x358/0x3c0 [ 424.998955][T25995] ext4_file_write_iter+0x3b2/0xf80 [ 425.004263][T25995] iter_file_splice_write+0x5f2/0x980 [ 425.009650][T25995] direct_splice_actor+0x160/0x2c0 [ 425.014791][T25995] splice_direct_to_actor+0x305/0x680 [ 425.020199][T25995] do_splice_direct+0xd9/0x150 [ 425.024979][T25995] do_sendfile+0x40a/0x690 [ 425.029426][T25995] __x64_sys_sendfile64+0x113/0x160 [ 425.034671][T25995] x64_sys_call+0xfc3/0x2e10 [ 425.039278][T25995] do_syscall_64+0xc9/0x1c0 [ 425.043797][T25995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.049732][T25995] [ 425.052065][T25995] value changed: 0x00000021 -> 0x0a000021 [ 425.057786][T25995] [ 425.060111][T25995] Reported by Kernel Concurrency Sanitizer on: [ 425.066264][T25995] CPU: 1 UID: 0 PID: 25995 Comm: syz.4.8896 Tainted: G W 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 425.079998][T25995] Tainted: [W]=WARN [ 425.083817][T25995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.093887][T25995] ================================================================== [ 425.197821][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.