last executing test programs: 5m5.286732129s ago: executing program 32 (id=2058): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0300000804000000040000000a00000000000000ad4ae641b338bd3ba04ecaab23d246d251e4550847db414720241ec355a9ac2e51dc2f000000b5010000008a27b12a18271aa7205a16504277d309ee25170b191cb3b2edbfd7aba0050de07df6e69126c603e76291aae1d6aafdf81f929ae3329954134ce94c9cf9c8b711fa2601fbb13d7ce1875f61b542fbf7ac6b37f228c4ee4db98afcee0760b663a4b811b04be25a8e470830242250c4588c234101445fb565d9a82bdc5a3da3a2e9ba60f8870487f86431fd6ae883cd136ce6b3da02b740a4a249782387b8391f0946ef8345e42b", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffdffffffffffe}, 0x18) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r5, &(0x7f0000000340)=""/211, 0xd3, 0x12122, &(0x7f00000000c0)=@ethernet={0x1, @broadcast}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32=r6, @ANYBLOB="0000000000000000000400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000004000001c0018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) 4m16.36747308s ago: executing program 4 (id=2479): socket(0x2000000000000021, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0x70ca, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4d10, 0x2, 0x2, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@initdev, @loopback, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', r2, 0x8080, 0x7, 0x4, 0x9, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x67, 0x0, 0x80, 0x2f, 0x0, @remote, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x2c, 0x9c, 0x3, 0x9, [{@private=0xa010101, 0x8}, {@multicast1, 0x8001}, {@rand_addr=0x64010101, 0x3f82}, {@multicast2, 0x7}, {@local, 0x400}]}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0xfffffffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 4m16.314980564s ago: executing program 4 (id=2480): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040500030700000000000000030006000000090300003800000000000000018000000500200011fe050000040000113f1f550300000008000000f30000007f00000004000014041020000c0000000004000000"], 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r4, 0x6400}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) ioperm(0xfffffffffffffffa, 0x0, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) close(r0) 4m16.272058117s ago: executing program 4 (id=2481): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) preadv2(r0, 0x0, 0x0, 0x5, 0x8, 0x1e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0xc, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0xbc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x8f194f9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x40, r2, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x14, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000abdc00008500000006000000b358e62ac475c51198abdc7445089ee4da650effff78dd320bae1a11190e9a90a4da251af357c8f4fdc848391febe078b4447c30c93a47a43f6f02b5a4b2b8418926d7918eb5053b4af8ce3c6eca7947b40ebb995bcca357e03178"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e65766531000000000000000000080010000000000008000a"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r8, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x2}, 0x18) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000040)=0x14200, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x7ff, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9}, 0x94) 4m16.178968985s ago: executing program 4 (id=2483): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000440)=""/104) timer_create(0x4, &(0x7f0000000040)={0x0, 0x5, 0x4, @tid=r1}, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="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", @ANYBLOB="000000000000b9e4b7040000010000008500000078ffff0000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r3, @ANYRES32], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000006de91f442d540dfd014de000000000000"], &(0x7f0000000600)='GPL\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$key(r6, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x3, 0x8, {{0x31, 0x4, 0x1, 0x39, 0xc4, 0x64, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0xb, [@dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @local, @private=0xa010102, @rand_addr=0x64010102, @empty, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x39, 0x1, 0x0, [{@broadcast, 0xb3}, {@multicast2, 0xac}, {@empty, 0x4}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@remote, 0xd}, {@broadcast, 0xfffffffd}, {@multicast2, 0x4}, {@loopback, 0x1}]}, @rr={0x7, 0x1f, 0xe7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x7, [{@local, 0xffffff0d}, {@local, 0x2}]}, @timestamp={0x44, 0xc, 0xa1, 0x0, 0x8, [0x3, 0x9]}]}}}}}) truncate(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xf26, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xfffffd26) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='ext4\x00', &(0x7f00000004c0)="7c45b3605983c4136d54327f5eef6a4026c5626bf070243d82bda771f560ddaf05eb4736919d2b4c9d1a0b709bd329475e5acec7504603129b47cb87b6c23f0429a72da688be2c08ddc3da077ef1dde006233c0b4a332b2a1e25820b2f5122ad56f1fee3a2422728b76efa3d15cb9fd196913afbff302933d6f3799f47c12e000dc9308b90353f418477ab117e796a3c521d413b67a5b520fc7b25e45ec5c34514c059c21080d0b08461d99c0b4d73c1d4e68b6d876943e655de703f3b279c3d519332ba7b40b2693cb147f6ff6b0b19ce6317056b277aebd6fe40e5e821ebb1acf1665dee841a6a45b33924b075638c", 0xf0) 4m15.950770343s ago: executing program 4 (id=2484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r3) keyctl$instantiate(0xc, r3, &(0x7f0000000000)=ANY=[], 0x27, 0xfffffffffffffffb) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) r4 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) syz_io_uring_setup(0x15b7, &(0x7f00000005c0)={0x0, 0xb030, 0x4042, 0x0, 0xd9, 0x0, r4}, &(0x7f0000000640), &(0x7f0000000680)) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x14, 0x14, 0x1}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x64010101, @local}, {{0x200, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x1000, 0x0, 0x1c}}}}}, 0x36) 4m15.634899408s ago: executing program 4 (id=2488): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000200)) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pread64(r3, 0x0, 0x0, 0x8) mq_getsetattr(r3, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0xffffffff7fffffbe, 0xd}, &(0x7f00000002c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f00000004c0)="a2609885a1c37cfcb4bc65ff233f282359751f4c51b0fb96c310a3959c62bb506708dfcc387b1a01de888aa5210daeeb3203be283e8b6dca663f2a0d1e5a94be2d381791ad16b43c7318a1ac761c1d9f70f4107e292512bc8aee125a7c93e8d551e4af0b1522f4ef59c78dcb6c1c2ce4441abb065ca27c8db3672d09d03516b97036deaaa2e32d13fb14455dec2a8e5c23f9661f7f6258cc9d334a6a545a31099a408a69c9c3d76ca176c1d0f70b69a6e693c78822e400965b533f60ef7138d6cec1c48f7202eafd47b93143ed8aeda26e75e8709015633c1df835ccec5b85ebaedd4e8e26b073bbe5d06cc26f492e62cdd0bec60741040845bd353a5e05d2cca3b38e08a234289d7045dd973ec8b4bf64c9f532abf169684ca25bdda82a0d495919cc5d5e840113806660467ee9c4e9530f7ec49bd5035717812c9e98909ec3901df33add1b9bb5ac589252f5da6b9d78b500285dfe94eeb01ed66681b62eb0da2b6349306fa93597a48c5e999b2e3a439c5969373babbfdcffda3dee57df9cb7dc0e0198ba4802f0f737ad587445e4863d14c2b6b043510e986f87080674173123be937f8ad5eec03af6cdee7de98337605377812e6ddda13667e47b05c4614cc2cf37f67f6cab461ad2b2d5276f2ab995bb6abcfa763c41bca8cca84ada9fe10596ba1908a57ec6f3350b6d46d13f0c167934d9f97a431d242adc17af318e144c86a39e6b96926c537631515ec462173e7e1128871a32b2857f1615a2696e1c61f36eda76d1d7f0fdac04d22a003f0b2c8c951b52f8d8da5c5ec9a0cdc28c7d978716856decc7d27cee809e048ba42d9bcd193f1a9a5ce6398df194f1570efe113ba1ebdafa48aa151ef9a5aad98825fa78b5f92c066d453b3a28c154ec9642236892e4513c8a4766a4fc4a9c4212a076044c8c0684af421b055507ec32731d9dcfc1d96aecb669af44e5a425a5e40b42a2e7b9914760ddd2947360d7533b68e76c6999751ec6a52f01d401a7e9087b08c92bd9720d1f137424a2e8ebe1e06198405e4de90e7250861994f737a6fd984724161c72d442b1115d89659e4f6c7f978043f7b0661cb9def422e880551822dcd5a9889e01f1e6acb466a289349323dbcdf114138461ebe3c96ca00345d8e404d183833eb3eecf26ca995f5715ae1c59bab3458e0ddda9461ecd12cf2f905d3c5d8f588a75328407b74c8571d02f57bba3704d67b70ba2c3d1cbba48b1bcd7f443e793554247eb05f3c624b2f333a1f257d639fb4086d4a682b911863e3fa6c0e70468e7a9540c73053d8ce960d22f93b1e26827bc3007d46dfb30738aab281dc52cc06d589dd54016c69bd3d6800f6f8bd35662c6de0569312e0e8f1197d7c150a3a44534fbc5806cf02be043a1e5890962e62275fd174a217d172dd0671e755bf60e913b1d0abf0e229b6b4fd7"}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa10000000000000701", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800923df6000085000000950000009500000000000000bdbd21830c5a1466dc89af88b067ab00bfab32a5920bda99f77f953a775c98eea3f4a8d48b856f92b90c6379a0bc998bcd090511f09d7bac6a3926a1e51748ef63ff0c3607aee0edd6b8ce30ee7c01c4c70fd71a50517130db8cfd10c77d07c1c6e9ae7b9ef07de6a249ecd72f6c4737ad6e3ca9c5f6cfb19778e25fd97f8fb7fa49257ab5071459c3ad96b7cc5f6637f6994a006d7c8de1369b2d62834eef84e1a73888ec1e2b9cfde7261967f11b0209deee3f3a01260b7e808ac120eb8d137ba298d878af8e1c61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x8030, &(0x7f0000000900)={[{@usrquota}, {@user_xattr}, {@i_version}, {@nobarrier}, {@noquota}, {@resgid}, {@errors_continue}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@noblock_validity}, {@acl}]}, 0x1, 0xb80, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = semget(0x1, 0x4, 0x39c) semop(r8, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) sendfile(r7, r7, 0x0, 0x800000009) accept4$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0xc0000) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000005c0)=0x8000, 0x4) 4m15.625961709s ago: executing program 33 (id=2488): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000200)) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pread64(r3, 0x0, 0x0, 0x8) mq_getsetattr(r3, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0xffffffff7fffffbe, 0xd}, &(0x7f00000002c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000140)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f00000004c0)="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"}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa10000000000000701", @ANYRES32=r5, @ANYBLOB="0000000000000000b70400000800923df6000085000000950000009500000000000000bdbd21830c5a1466dc89af88b067ab00bfab32a5920bda99f77f953a775c98eea3f4a8d48b856f92b90c6379a0bc998bcd090511f09d7bac6a3926a1e51748ef63ff0c3607aee0edd6b8ce30ee7c01c4c70fd71a50517130db8cfd10c77d07c1c6e9ae7b9ef07de6a249ecd72f6c4737ad6e3ca9c5f6cfb19778e25fd97f8fb7fa49257ab5071459c3ad96b7cc5f6637f6994a006d7c8de1369b2d62834eef84e1a73888ec1e2b9cfde7261967f11b0209deee3f3a01260b7e808ac120eb8d137ba298d878af8e1c61"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x8030, &(0x7f0000000900)={[{@usrquota}, {@user_xattr}, {@i_version}, {@nobarrier}, {@noquota}, {@resgid}, {@errors_continue}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@noblock_validity}, {@acl}]}, 0x1, 0xb80, &(0x7f0000000c40)="$eJzs3M1rVFcbAPDn3nwYNb6JL/LyWkoNtGChOBrFSl2py9ZFof0DDHEiIdcPkhRMcBHbhXRVC910UWgXpX9AoetstNBV6aaVFrqXShHdp9zJnWQwM0mqMx4/fj84c8/HZM7z5JK555C5E8BLa6x8yCP2R8S5LGKk6s8jYrBRG4pYWn3eg/vXJh/evzaZxcrKB39nkVV9zdfKquPuqjEUEb+cyeK/n2ycd25hcWaiKOqzVfvw/MUrh+cWFg9NX5y4UL9QvzR+YvzY8RPHjr99pGu5vrv35tmvxk/t+f7Mrauv3fj9yyxOxXA11ppHt4zFWKxUWvv7I2Ki25Ml0lflk7X0Zf0JAwIAYFN5yxrufzESfbG+eBuJW78mDQ4AAADoipW+WPsfFQAAAPCiyuz/AQAA4AXX/BzAg/vXJpsl7ScSnq57pyNitF3+/bHUOA7FQETsepBF622t2eqPPbGxiNj30+iPZYke3Ye8maXrEfH/dvlnjfxHG3dxb8w/j4hu3Jk99kj7ecr/VBfmT50/AC+n5dOrF7KN1798bf0Tba5//W2uXY8j9fWv8/pvPf++Duu/97c5R/3Ap593Gmtd/xXfvnq7nL88PlFS/8K96xGv9Hde/5T5Zx3yP7fNOQb++PmHTmNl/mW+zfK081/5JuJg2/3P+jfaZJt/P9HhqemiXj22nePG7e/2dZq/9fyXpZy/uRd4Gsrzv6tD/lud/yvbnGP5r4N/dhrbOv/87mD2YaM2WPVcnZifnx2PGMzObuw/unkszec0X6PM/83XN//7b5d/+Z6wVP0eyr3A9epYtj9+ZM5D773zxuPn31tl/ucf8/zf3OYcX382e7fTWOr8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+5BExHFleW6vnea0WsTsi9sWuvLg8N//W1OWPLp0vxyJGYyCfmi7qRyJiZLWdle3xRn29ffSR9rGI2BsRX4zsbLRrk5eL86mTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYM3uiBiOLK9FRB4RD0fyvFZLHRUAAADQdaOpAwAAAAB6zv4fAAAAXnz2/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTY3gPLd7KIWDq5s1FKg9XYQNLIgF7LUwcAJNOXOgAgmf7UAQDJ2OMD2RbjQx1HdnQ9FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeXQf3L9/JImLp5M5GKQ1WYwNJIwN6LU8dAJBMX+oAgGT6UwcAJGOPD2RbjA91HNnR9VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHYNN0qW1yIib9TzvFaL2BMRozGQTU0X9SMR8Z+I+G1kYEfZHk8dNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF03t7A4M1EU9VkVFRWVtUrqdyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFKYW1icmSiK+uxc6kgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1OYWFmcmiqI+28NK6hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEjnnwAAAP///JMJmQ==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = semget(0x1, 0x4, 0x39c) semop(r8, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) sendfile(r7, r7, 0x0, 0x800000009) accept4$bt_l2cap(r7, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0xc0000) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000005c0)=0x8000, 0x4) 1m18.50943155s ago: executing program 1 (id=6852): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01bbcba87500fcdbdf251900000008000300", @ANYRES32=r2], 0x30}}, 0x20000000) 1m18.473685454s ago: executing program 1 (id=6855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) sigaltstack(0x0, 0x0) 1m18.459803784s ago: executing program 1 (id=6856): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="300000000000000084000000010000000220000044"], 0x30, 0x80}, 0x0) 1m17.534463608s ago: executing program 1 (id=6900): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81020, 0x0) 1m17.51896303s ago: executing program 1 (id=6901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1m17.327075285s ago: executing program 1 (id=6910): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m17.326936885s ago: executing program 34 (id=6910): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 30.527025917s ago: executing program 6 (id=9043): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 30.182848514s ago: executing program 7 (id=9055): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) 30.182671964s ago: executing program 6 (id=9056): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 30.136121397s ago: executing program 6 (id=9058): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 30.10845974s ago: executing program 6 (id=9060): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 30.045134545s ago: executing program 7 (id=9061): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r1, 0xffffffffffffffff, {0x2, 0xf0}}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 29.930470564s ago: executing program 6 (id=9068): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) unshare(0x24020400) 29.678712824s ago: executing program 6 (id=9077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 29.672446834s ago: executing program 35 (id=9077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 28.998007708s ago: executing program 7 (id=9084): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 28.903031766s ago: executing program 7 (id=9085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1, 0x7fff, 0x0, 0x0) 28.614899089s ago: executing program 7 (id=9087): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100003050200"/20, @ANYRES32=0x0, @ANYBLOB="42000000000000002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}}, 0x4008890) 28.219138891s ago: executing program 7 (id=9094): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3a1}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 28.218979851s ago: executing program 36 (id=9094): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x800, 0x2, 0x3a1}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) 18.730916997s ago: executing program 9 (id=9375): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x14e24, 0x0, @rand_addr, 0x4000}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) splice(r3, 0x0, r0, 0x0, 0x7ffff000, 0x6) 18.44099434s ago: executing program 9 (id=9379): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@bsdgroups}, {@nodelalloc}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 17.454114469s ago: executing program 9 (id=9409): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) open$dir(0x0, 0x100000, 0x40) semop(0x0, &(0x7f0000000000), 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) 16.278159592s ago: executing program 9 (id=9449): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 16.257698564s ago: executing program 9 (id=9440): socket$nl_generic(0x10, 0x3, 0x10) setfsgid(0xee00) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) preadv(r1, &(0x7f0000003940)=[{&(0x7f00000000c0)=""/4089, 0xff9}], 0x1, 0x47, 0x3) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000580)='fd/3\x00') 16.047077141s ago: executing program 9 (id=9443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 16.046935381s ago: executing program 37 (id=9443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2.001509551s ago: executing program 2 (id=9810): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000004c0)={[{@check_relaxed}, {@uid}, {@cruft}, {@block={'block', 0x3d, 0x200}}, {@gid}, {@map_acorn}, {@cruft}, {@overriderock}, {@nojoliet}, {@map_off}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000000e40)="$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") 1.967256824s ago: executing program 2 (id=9811): socket(0x1e, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x2000c800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 1.901745159s ago: executing program 2 (id=9812): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000900)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xbffffffffffffffb}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8020) r8 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb68, 0x40, 0x3, 0x131}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000480), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 1.38373163s ago: executing program 5 (id=9821): unshare(0x22020600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) alarm(0x1) alarm(0xb95) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000180)={0x7}) memfd_create(0x0, 0x0) 1.299549547s ago: executing program 5 (id=9824): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) pipe2$9p(&(0x7f0000001900), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) 1.243095361s ago: executing program 5 (id=9827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000001000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) ioctl$int_in(r2, 0x5452, &(0x7f00000004c0)=0x1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[], 0xe0}, 0x20004065) 1.036098098s ago: executing program 3 (id=9836): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 1.01498158s ago: executing program 3 (id=9838): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 995.001251ms ago: executing program 3 (id=9839): umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x81c0, 0x80000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 977.781582ms ago: executing program 2 (id=9841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) 915.901487ms ago: executing program 3 (id=9843): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000900)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xbffffffffffffffb}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8020) r8 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb68, 0x40, 0x3, 0x131}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000480), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 813.862166ms ago: executing program 8 (id=9844): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, 0x0, 0x600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0) unshare(0x2c060000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 758.84949ms ago: executing program 8 (id=9845): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x495, &(0x7f0000000a40)={0x0, 0x4661, 0x800, 0x0, 0x20e}, &(0x7f0000000540)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0x0) close_range(r1, r2, 0x0) 729.145082ms ago: executing program 2 (id=9846): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigqueueinfo(0x0, 0x6, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz9EJwjAYBOBLa2sriOu4gTiAi7iA6DKCL45Yaa2IA4gI3/cQQvLfhYSf6salXmxL2uGU7DfzefU51pyTqtRJ2iTDcopem/myy1DmwV1/6af9/dm0fjUcU8Zseb/arHK4fft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPHgEAAP//e8QItw==") setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) 666.827157ms ago: executing program 2 (id=9850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r5, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) 650.749378ms ago: executing program 8 (id=9851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 635.861419ms ago: executing program 0 (id=9852): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 633.8075ms ago: executing program 8 (id=9853): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 617.296892ms ago: executing program 8 (id=9854): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x215}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x8, 0x0, @fd, 0x10, 0x0, 0xfffdfff9, 0x5, 0x259792cd96d38d81}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 611.721561ms ago: executing program 0 (id=9855): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xfffffffffffffff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) close(0xffffffffffffffff) close(0x3) 555.094646ms ago: executing program 8 (id=9856): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000340)=""/117, 0x92}], 0x1, 0x0, 0xa0000000) ppoll(&(0x7f0000000440)=[{r0, 0x1065}], 0x1, 0x0, 0x0, 0x0) 488.323311ms ago: executing program 0 (id=9857): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000540)=r2) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 369.552321ms ago: executing program 5 (id=9858): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0xbfab, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r3}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) 332.237634ms ago: executing program 0 (id=9859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4f84d40c794487f9}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8005}, 0x4041080) 331.504134ms ago: executing program 5 (id=9860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) 298.411837ms ago: executing program 5 (id=9861): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x1, 0x20000000, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x25) 243.094571ms ago: executing program 0 (id=9862): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 15.437869ms ago: executing program 3 (id=9863): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 14.635169ms ago: executing program 0 (id=9873): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000900)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff61, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xbffffffffffffffb}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff1, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffb}]}, 0x38}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000009c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8020) r8 = io_uring_setup(0x4d42, &(0x7f0000000240)={0x0, 0xcb68, 0x40, 0x3, 0x131}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') exit(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000480), 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 0s ago: executing program 3 (id=9864): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) readv(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1) kernel console output (not intermixed with test programs): 25][ T29] audit: type=1326 audit(412.082:73503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 435.925098][ T29] audit: type=1326 audit(412.091:73504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 435.948915][ T29] audit: type=1326 audit(412.091:73505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 435.971959][ T29] audit: type=1326 audit(412.091:73506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 435.982385][T23850] binfmt_misc: register: failed to install interpreter file ./file2 [ 435.995183][ T29] audit: type=1326 audit(412.091:73507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 436.026169][ T29] audit: type=1326 audit(412.091:73508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 436.049135][ T29] audit: type=1326 audit(412.091:73509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 436.072142][ T29] audit: type=1326 audit(412.091:73510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 436.095441][ T29] audit: type=1326 audit(412.091:73511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23838 comm="syz.7.7273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 436.414056][T23907] openvswitch: netlink: Message has 6 unknown bytes. [ 436.443589][T23913] loop6: detected capacity change from 0 to 512 [ 436.457563][T23913] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 436.485391][T23913] EXT4-fs (loop6): 1 truncate cleaned up [ 436.491562][T23913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.550492][T23913] EXT4-fs error (device loop6): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.6.7307: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 436.594615][T23913] EXT4-fs (loop6): Remounting filesystem read-only [ 436.601211][T23913] EXT4-fs warning (device loop6): ext4_rename_delete:3735: inode #2: comm syz.6.7307: Deleting old file: nlink 5, error=-117 [ 436.636259][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.878114][T23978] openvswitch: netlink: Message has 6 unknown bytes. [ 436.907315][T23984] macvtap0: refused to change device tx_queue_len [ 436.939547][T23989] loop7: detected capacity change from 0 to 1024 [ 436.949063][T23989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.995678][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.069390][T24009] loop7: detected capacity change from 0 to 512 [ 437.081691][T24009] EXT4-fs: Ignoring removed i_version option [ 437.089932][T24009] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 437.101332][T24009] EXT4-fs (loop7): 1 truncate cleaned up [ 437.108908][T24009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.146748][T24013] openvswitch: netlink: Message has 6 unknown bytes. [ 437.280101][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.314506][T24042] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7362'. [ 437.351816][T24045] siw: device registration error -23 [ 437.488069][T24065] loop7: detected capacity change from 0 to 164 [ 437.497070][T24065] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.510207][T24065] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.520832][T24065] Symlink component flag not implemented [ 437.526491][T24065] Symlink component flag not implemented [ 437.529984][T24068] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7375'. [ 437.532541][T24065] Symlink component flag not implemented (7) [ 437.547400][T24065] Symlink component flag not implemented (116) [ 437.616045][T24079] siw: device registration error -23 [ 437.625220][T24081] macvtap0: refused to change device tx_queue_len [ 437.784344][T24104] loop6: detected capacity change from 0 to 512 [ 437.784982][T24106] siw: device registration error -23 [ 437.797977][T24104] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 437.815049][T24104] EXT4-fs (loop6): orphan cleanup on readonly fs [ 437.824041][T24104] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 437.839587][T24104] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 437.847469][T24104] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #16: comm syz.6.7392: casefold flag without casefold feature [ 437.861294][T24104] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7392: couldn't read orphan inode 16 (err -117) [ 437.874718][T24104] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.902583][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.919880][T24119] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7400'. [ 438.542075][T24165] bridge0: entered promiscuous mode [ 438.547417][T24165] macsec1: entered promiscuous mode [ 438.554855][T24165] bridge0: port 1(macsec1) entered blocking state [ 438.561379][T24165] bridge0: port 1(macsec1) entered disabled state [ 438.568188][T24165] macsec1: entered allmulticast mode [ 438.573501][T24165] bridge0: entered allmulticast mode [ 438.579436][T24165] macsec1: left allmulticast mode [ 438.584756][T24165] bridge0: left allmulticast mode [ 438.590605][T24165] bridge0: left promiscuous mode [ 438.643708][T24175] openvswitch: netlink: Message has 6 unknown bytes. [ 438.699054][T24185] netlink: 'syz.2.7428': attribute type 1 has an invalid length. [ 438.784900][T24198] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7434'. [ 438.974230][T24213] loop6: detected capacity change from 0 to 256 [ 439.022429][T24215] siw: device registration error -23 [ 439.180368][T24230] loop6: detected capacity change from 0 to 1024 [ 439.205701][T24230] EXT4-fs: Ignoring removed oldalloc option [ 439.228354][T24230] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 439.255212][T24234] openvswitch: netlink: Message has 6 unknown bytes. [ 439.273889][T24230] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.332854][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.390858][T24245] siw: device registration error -23 [ 439.392192][T24249] loop6: detected capacity change from 0 to 512 [ 439.420706][T24249] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.7453: inode #15: comm syz.6.7453: iget: illegal inode # [ 439.451530][T24249] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7453: couldn't read orphan inode 15 (err -117) [ 439.474039][T24249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.509870][T24249] EXT4-fs (loop6): shut down requested (2) [ 439.528060][T24261] loop7: detected capacity change from 0 to 128 [ 439.536446][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.547274][T24261] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.589190][T24261] EXT4-fs (loop7): shut down requested (1) [ 439.620020][T22961] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.662715][T24272] loop7: detected capacity change from 0 to 128 [ 439.723939][T24274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7466'. [ 439.736069][T24274] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7466'. [ 439.800393][ T9] IPVS: starting estimator thread 0... [ 439.928759][T24284] IPVS: using max 2784 ests per chain, 139200 per kthread [ 440.024728][T24323] loop7: detected capacity change from 0 to 1024 [ 440.036493][T24323] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 440.064599][T24323] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm syz.7.7487: lblock 0 mapped to illegal pblock 0 (length 6) [ 440.081363][T24323] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.7487: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 440.113389][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 440.174744][T24354] siw: device registration error -23 [ 440.223236][T24360] openvswitch: netlink: Message has 6 unknown bytes. [ 440.378082][T24397] openvswitch: netlink: Message has 6 unknown bytes. [ 440.532891][T24437] netlink: 268 bytes leftover after parsing attributes in process `syz.5.7513'. [ 440.578724][T24446] netlink: 'syz.6.7516': attribute type 21 has an invalid length. [ 440.594180][T24446] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7516'. [ 440.603343][T24446] netlink: 'syz.6.7516': attribute type 1 has an invalid length. [ 440.662457][T24461] netlink: 'syz.5.7521': attribute type 1 has an invalid length. [ 441.193703][T24518] openvswitch: netlink: Message has 6 unknown bytes. [ 441.231117][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7531'. [ 441.300410][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 441.300426][ T29] audit: type=1326 audit(417.103:74589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24469 comm="syz.5.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 441.335155][ T29] audit: type=1400 audit(417.122:74590): avc: denied { connect } for pid=24531 comm="syz.2.7537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 441.354428][ T29] audit: type=1326 audit(417.131:74591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24469 comm="syz.5.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 441.402974][ T29] audit: type=1326 audit(417.186:74592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24469 comm="syz.5.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 441.426151][ T29] audit: type=1400 audit(417.186:74593): avc: denied { create } for pid=24535 comm="syz.7.7540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 441.445473][ T29] audit: type=1400 audit(417.186:74594): avc: denied { connect } for pid=24535 comm="syz.7.7540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 441.464902][ T29] audit: type=1326 audit(417.196:74595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24469 comm="syz.5.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 441.487955][ T29] audit: type=1326 audit(417.205:74596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24469 comm="syz.5.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 441.512037][ T29] audit: type=1400 audit(417.223:74597): avc: denied { read } for pid=24543 comm="syz.7.7543" dev="nsfs" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 441.532861][ T29] audit: type=1400 audit(417.223:74598): avc: denied { open } for pid=24543 comm="syz.7.7543" path="net:[4026533107]" dev="nsfs" ino=4026533107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 441.686341][T24574] netlink: 'syz.7.7554': attribute type 1 has an invalid length. [ 441.694179][T24574] netlink: 76 bytes leftover after parsing attributes in process `syz.7.7554'. [ 441.801269][T24592] loop6: detected capacity change from 0 to 512 [ 441.817969][T24592] EXT4-fs (loop6): orphan cleanup on readonly fs [ 441.836835][T24592] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7565: Failed to acquire dquot type 1 [ 441.856269][T24592] EXT4-fs (loop6): 1 truncate cleaned up [ 441.863281][T24592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 441.893946][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.931889][T23361] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 441.944112][T23361] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 441.954309][T23361] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 441.965741][T23361] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 442.081738][T24639] loop6: detected capacity change from 0 to 1764 [ 442.151916][T24647] siw: device registration error -23 [ 442.205152][T24654] loop6: detected capacity change from 0 to 128 [ 442.348885][T24678] netlink: 'syz.5.7602': attribute type 3 has an invalid length. [ 442.366214][T24676] siw: device registration error -23 [ 442.406176][T24686] openvswitch: netlink: Message has 6 unknown bytes. [ 442.467823][T24692] lo speed is unknown, defaulting to 1000 [ 442.474851][T24692] lo speed is unknown, defaulting to 1000 [ 442.543349][T24692] lo speed is unknown, defaulting to 1000 [ 442.691424][T24716] tipc: Enabling of bearer rejected, failed to enable media [ 442.895692][T24746] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 442.991412][T24766] loop7: detected capacity change from 0 to 512 [ 443.005581][T24766] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 443.022584][T24766] EXT4-fs (loop7): 1 truncate cleaned up [ 443.030726][T24766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.067452][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.081866][T24776] openvswitch: netlink: Message has 6 unknown bytes. [ 443.102084][T24780] loop7: detected capacity change from 0 to 1024 [ 443.124669][T24780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.126951][T24786] __nla_validate_parse: 1 callbacks suppressed [ 443.126964][T24786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7651'. [ 443.188500][T23393] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 443.208091][T24792] netlink: 'syz.5.7656': attribute type 3 has an invalid length. [ 443.216168][T23393] EXT4-fs (loop7): Remounting filesystem read-only [ 443.228825][T23361] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 443.231112][T23342] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 443.253461][T23361] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 443.253779][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.261886][T23361] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 443.279736][T23361] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 443.304799][T24804] vhci_hcd: invalid port number 96 [ 443.309968][T24804] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 443.358366][T24806] openvswitch: netlink: Message has 6 unknown bytes. [ 443.371742][T24812] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7664'. [ 443.401535][T24819] IPv6: Can't replace route, no match found [ 443.425273][T24824] IPv6: Can't replace route, no match found [ 443.455462][T24826] 9pnet_fd: Insufficient options for proto=fd [ 443.646660][T24856] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7685'. [ 443.885436][T24889] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 443.973491][T24908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7710'. [ 444.078143][T24929] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 444.151760][T24940] loop6: detected capacity change from 0 to 1024 [ 444.193731][T24940] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.211605][T24940] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 3: comm syz.6.7722: lblock 3 mapped to illegal pblock 3 (length 13) [ 444.226949][T24940] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 444.239410][T24940] EXT4-fs (loop6): This should not happen!! Data will be lost [ 444.239410][T24940] [ 444.265287][T24944] openvswitch: netlink: Message has 6 unknown bytes. [ 444.288203][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.309764][T24946] loop6: detected capacity change from 0 to 512 [ 444.317121][T24946] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 444.330975][T24946] EXT4-fs (loop6): 1 truncate cleaned up [ 444.337182][T24946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.364532][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.437563][T24963] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7732'. [ 444.460552][T24965] netlink: 'syz.6.7733': attribute type 10 has an invalid length. [ 444.498210][T24970] netlink: 'syz.5.7736': attribute type 1 has an invalid length. [ 444.513533][T24970] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.533802][T24970] bond1: (slave geneve3): making interface the new active one [ 444.543076][T24970] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 444.575550][T23367] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.583876][T23367] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.593482][T23361] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.602355][T23361] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.704206][T24986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7742'. [ 444.715551][T24986] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 445.022842][T25026] SELinux: failed to load policy [ 445.068181][T25038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7766'. [ 445.159875][T25054] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 445.243914][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7779'. [ 445.253514][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7779'. [ 445.270580][T25069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7779'. [ 445.382759][T25080] pim6reg: entered allmulticast mode [ 445.449406][T25083] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 445.461730][T25084] pim6reg: left allmulticast mode [ 446.019876][T25117] lo speed is unknown, defaulting to 1000 [ 446.026709][T25117] lo speed is unknown, defaulting to 1000 [ 446.074727][T25117] lo speed is unknown, defaulting to 1000 [ 446.120322][T25130] netlink: 'syz.6.7806': attribute type 1 has an invalid length. [ 446.135455][T25130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 446.160397][T25130] bond3: (slave geneve3): making interface the new active one [ 446.180098][T25130] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 446.188845][T23342] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.199479][T23342] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.228194][T23342] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.245862][T23342] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 446.666417][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.673995][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.681574][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.689085][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.696623][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x4 [ 446.700822][T25188] loop7: detected capacity change from 0 to 512 [ 446.704319][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.718073][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.725694][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.732681][T25188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.733247][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x2 [ 446.747490][T25188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.753123][ T3381] hid-generic 0000:0000:40000.0003: unknown main item tag 0x0 [ 446.770667][ T3381] hid-generic 0000:0000:40000.0003: hidraw0: HID v0.01 Device [syz1] on syz1 [ 446.799657][T25192] netlink: 'syz.7.7832': attribute type 10 has an invalid length. [ 446.808409][T25192] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.815975][T25192] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.831102][T25192] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.838398][T25192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.846299][T25192] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.853621][T25192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.864150][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 446.864166][ T29] audit: type=1326 audit(422.217:75242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.893376][ T29] audit: type=1326 audit(422.217:75243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.900445][T25192] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 446.916651][ T29] audit: type=1326 audit(422.217:75244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.916694][ T29] audit: type=1326 audit(422.217:75245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.916799][ T29] audit: type=1326 audit(422.217:75246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.917005][ T29] audit: type=1326 audit(422.217:75247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.917034][ T29] audit: type=1326 audit(422.217:75248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.917114][ T29] audit: type=1326 audit(422.217:75249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.917178][ T29] audit: type=1326 audit(422.217:75250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25195 comm="syz.5.7833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 446.926397][ T29] audit: type=1400 audit(422.244:75251): avc: denied { mount } for pid=25200 comm="syz.6.7837" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 447.148161][T25209] vhci_hcd: default hub control req: 6006 v0f00 i0001 l0 [ 447.264251][T25232] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 447.294749][T25226] Falling back ldisc for ttyS3. [ 447.711615][T25324] loop7: detected capacity change from 0 to 512 [ 447.712025][T25320] lo speed is unknown, defaulting to 1000 [ 447.725542][T25320] lo speed is unknown, defaulting to 1000 [ 447.752091][T25324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.782781][T25324] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.7894: corrupted inode contents [ 447.806667][T25324] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.7894: mark_inode_dirty error [ 447.829946][T25320] lo speed is unknown, defaulting to 1000 [ 447.836749][T25324] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.7894: corrupted inode contents [ 447.858751][T25340] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.7894: corrupted inode contents [ 447.882519][T25340] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.7894: mark_inode_dirty error [ 447.909514][T25340] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.7894: corrupted inode contents [ 447.956228][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.046681][T25365] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 448.125931][T25375] tipc: Enabling of bearer rejected, already enabled [ 448.415067][T25424] netlink: 'syz.3.7940': attribute type 1 has an invalid length. [ 448.429537][T25424] 8021q: adding VLAN 0 to HW filter on device bond14 [ 448.447399][T25424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.457823][T25424] bond14: (slave batadv0): making interface the new active one [ 448.467361][T25424] bond14: (slave batadv0): Enslaving as an active interface with an up link [ 448.800608][T25471] __nla_validate_parse: 21 callbacks suppressed [ 448.800621][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.815959][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.824952][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.845468][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.854558][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.863645][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.891339][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.900500][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 448.909615][T25471] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7961'. [ 449.044717][T25502] loop7: detected capacity change from 0 to 2048 [ 449.105809][T25502] loop7: p1 < > p3 p4 [ 449.112482][T25502] loop7: p3 size 54016 extends beyond EOD, truncated [ 449.121199][T25502] loop7: p4 start 4294967295 is beyond EOD, truncated [ 449.234406][T25528] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7987'. [ 449.268726][T25534] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 449.587599][T25583] loop7: detected capacity change from 0 to 512 [ 449.601284][T25583] EXT4-fs: Ignoring removed oldalloc option [ 449.607723][T25583] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 449.625020][T25583] EXT4-fs (loop7): 1 truncate cleaned up [ 449.635768][T25583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.701130][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.746666][T25591] hub 6-0:1.0: USB hub found [ 449.754637][T25591] hub 6-0:1.0: 8 ports detected [ 450.468137][T25682] openvswitch: netlink: Message has 6 unknown bytes. [ 451.953047][ T9] usb usb6-port1: attempt power cycle [ 452.204335][T25799] netlink: 'syz.5.8102': attribute type 298 has an invalid length. [ 452.228032][T25801] siw: device registration error -23 [ 452.295432][ T29] kauditd_printk_skb: 651 callbacks suppressed [ 452.295447][ T29] audit: type=1326 audit(428.250:75903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.325463][ T29] audit: type=1326 audit(428.287:75904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.362094][ T29] audit: type=1326 audit(428.305:75905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.380251][T25809] netlink: 'syz.6.8107': attribute type 10 has an invalid length. [ 452.385125][ T29] audit: type=1326 audit(428.314:75906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.417040][ T29] audit: type=1326 audit(428.361:75907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.442064][ T29] audit: type=1326 audit(428.379:75908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.466462][ T29] audit: type=1326 audit(428.416:75909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.490607][ T29] audit: type=1326 audit(428.434:75910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.515833][ T29] audit: type=1326 audit(428.453:75911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.539147][ T29] audit: type=1326 audit(428.481:75912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25792 comm="syz.2.8100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 452.635730][T25817] siw: device registration error -23 [ 452.704122][T25821] openvswitch: netlink: Message has 6 unknown bytes. [ 452.869652][T25846] netlink: 'syz.5.8125': attribute type 1 has an invalid length. [ 453.281158][T25892] openvswitch: netlink: Message has 6 unknown bytes. [ 453.629212][T25917] netlink: 'syz.5.8156': attribute type 21 has an invalid length. [ 453.831034][T25949] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 454.233725][ T9] usb usb6-port1: unable to enumerate USB device [ 454.331079][T26001] netlink: 'syz.7.8193': attribute type 13 has an invalid length. [ 454.361875][T26001] gretap0: refused to change device tx_queue_len [ 454.372712][T26001] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 454.692180][T26064] __nla_validate_parse: 14 callbacks suppressed [ 454.692195][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8220'. [ 454.709169][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8220'. [ 454.748662][T26070] openvswitch: netlink: Message has 6 unknown bytes. [ 454.786154][T26074] loop6: detected capacity change from 0 to 512 [ 454.793902][T26074] ext2: Unknown parameter 'permit_directio' [ 454.807304][T26074] loop6: detected capacity change from 0 to 1024 [ 454.826105][T26074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 454.845105][T26074] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.8225: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.859453][T26074] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 454.871766][T26074] EXT4-fs (loop6): This should not happen!! Data will be lost [ 454.871766][T26074] [ 454.894501][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 455.094266][T26114] ipvlan0: entered promiscuous mode [ 455.099934][T26114] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 455.116166][T26114] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.568219][T26130] siw: device registration error -23 [ 456.040490][T26149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8256'. [ 456.049464][T26149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8256'. [ 456.123842][T23361] batman_adv: batadv0: IGMP Querier appeared [ 456.129878][T23361] batman_adv: batadv0: MLD Querier appeared [ 456.421893][T26186] pim6reg: entered allmulticast mode [ 456.495981][T26188] pim6reg: left allmulticast mode [ 456.584272][T26196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26196 comm=syz.7.8275 [ 456.597117][T26196] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26196 comm=syz.7.8275 [ 456.668873][T26204] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8279'. [ 456.678257][T26204] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8279'. [ 456.763876][T26210] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8282'. [ 456.928724][T26221] loop6: detected capacity change from 0 to 512 [ 456.937160][T26221] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 456.950161][T26221] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.8287: Unimplemented hash flags: 0x0001 [ 456.961678][T26221] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8287: Corrupt directory, running e2fsck is recommended [ 456.977475][T26221] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.8287: path /939/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 457.051964][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.122235][T26240] loop6: detected capacity change from 0 to 1024 [ 457.132940][T26240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.156399][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.218904][T26253] loop6: detected capacity change from 0 to 1024 [ 457.225842][T26253] EXT4-fs: Ignoring removed oldalloc option [ 457.232358][T26253] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 457.252319][T26253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.384918][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.598360][T26304] siw: device registration error -23 [ 457.645578][T26311] openvswitch: netlink: Message has 6 unknown bytes. [ 457.705038][T26320] IPVS: Error connecting to the multicast addr [ 457.707637][T26318] sctp: Trying to GSO but underlying device doesn't support it. [ 457.805959][T26332] siw: device registration error -23 [ 457.854838][T26339] loop7: detected capacity change from 0 to 512 [ 457.865348][T26337] lo speed is unknown, defaulting to 1000 [ 457.873488][T26337] lo speed is unknown, defaulting to 1000 [ 457.883257][T26339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.911137][T26339] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.8340: corrupted inode contents [ 457.930608][T26339] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.8340: mark_inode_dirty error [ 457.949724][T26337] lo speed is unknown, defaulting to 1000 [ 457.950680][T26339] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.8340: corrupted inode contents [ 457.969927][T26339] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.8340: mark_inode_dirty error [ 457.982283][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 457.982370][ T29] audit: type=1400 audit(433.502:76606): avc: denied { create } for pid=26338 comm="syz.7.8340" name=05C0 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 457.985020][T26339] EXT4-fs warning (device loop7): ext4_empty_dir:3093: inode #18: comm syz.7.8340: directory missing '.' [ 457.989560][ T29] audit: type=1400 audit(433.502:76607): avc: denied { rmdir } for pid=26338 comm="syz.7.8340" name=05C0 dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 458.049285][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.093392][ T29] audit: type=1326 audit(433.603:76608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.118461][ T29] audit: type=1326 audit(433.603:76609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.141560][ T29] audit: type=1326 audit(433.612:76610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.164568][ T29] audit: type=1326 audit(433.612:76611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.167003][T26365] netlink: 'syz.7.8350': attribute type 1 has an invalid length. [ 458.187561][ T29] audit: type=1326 audit(433.612:76612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.187593][ T29] audit: type=1326 audit(433.612:76613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.187704][ T29] audit: type=1326 audit(433.612:76614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.253800][T26365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.264725][ T29] audit: type=1326 audit(433.612:76615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26360 comm="syz.7.8348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 458.296898][T26370] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8350'. [ 458.317157][T26370] bond1 (unregistering): Released all slaves [ 458.415086][T26382] openvswitch: netlink: Message has 6 unknown bytes. [ 458.441632][T26384] bridge0: port 1(batadv1) entered blocking state [ 458.448283][T26384] bridge0: port 1(batadv1) entered disabled state [ 458.463791][T26384] batadv1: entered allmulticast mode [ 458.469604][T26384] batadv1: entered promiscuous mode [ 458.494187][T26388] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8359'. [ 458.657844][T26399] loop6: detected capacity change from 0 to 512 [ 458.671479][T26399] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.720985][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.807063][T26406] loop6: detected capacity change from 0 to 2048 [ 458.823141][T26406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.843033][T26406] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 458.855541][T26406] EXT4-fs (loop6): This should not happen!! Data will be lost [ 458.855541][T26406] [ 458.865650][T26406] EXT4-fs (loop6): Total free blocks count 0 [ 458.871628][T26406] EXT4-fs (loop6): Free/Dirty block details [ 458.877548][T26406] EXT4-fs (loop6): free_blocks=0 [ 458.882483][T26406] EXT4-fs (loop6): dirty_blocks=0 [ 458.887684][T26406] EXT4-fs (loop6): Block reservation details [ 458.893790][T26406] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 458.914773][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.978106][T26424] loop6: detected capacity change from 0 to 128 [ 458.988283][T26424] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 458.995647][T23361] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 459.005451][T23361] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 459.005959][T26424] System zones: 1-3, 19-19, 35-36 [ 459.021366][T26424] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 459.068647][T11959] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.089926][T26434] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8377'. [ 459.427925][T26461] openvswitch: netlink: Message has 6 unknown bytes. [ 459.435613][T26461] 9pnet_virtio: no channels available for device  [ 459.901944][T26487] loop7: detected capacity change from 0 to 1024 [ 459.909499][T26487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.917054][T26487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 459.927584][T26487] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 459.936019][T26487] System zones: 0-1, 3-36 [ 459.941523][T26487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.975365][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.527729][T26604] geneve3: entered promiscuous mode [ 460.532959][T26604] geneve3: entered allmulticast mode [ 460.665032][T26612] SELinux: Context @ is not valid (left unmapped). [ 461.072700][T26662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26662 comm=syz.3.8476 [ 461.085310][T26662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26662 comm=syz.3.8476 [ 461.129753][ T1049] usb usb6-port1: attempt power cycle [ 461.189235][T26678] lo speed is unknown, defaulting to 1000 [ 461.195616][T26678] lo speed is unknown, defaulting to 1000 [ 461.243006][T26678] lo speed is unknown, defaulting to 1000 [ 461.415601][T26692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26692 comm=syz.2.8488 [ 461.437090][T26692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8488'. [ 461.629462][T26724] IPv6: Can't replace route, no match found [ 462.118743][T26806] netlink: 'syz.5.8538': attribute type 10 has an invalid length. [ 462.272394][T26831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8548'. [ 462.522088][T26869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8565'. [ 462.569696][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8567'. [ 462.578925][T26873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8567'. [ 462.588027][T26873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8567'. [ 462.603028][T26873] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8567'. [ 462.612096][T26873] netlink: 'syz.5.8567': attribute type 6 has an invalid length. [ 463.101328][ T1049] usb usb6-port1: unable to enumerate USB device [ 463.109267][T26441] hub 6-0:1.0: USB hub found [ 463.113996][T26441] hub 6-0:1.0: 8 ports detected [ 463.187471][T26899] loop6: detected capacity change from 0 to 512 [ 463.201465][T26899] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.255538][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.425562][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 463.425576][ T29] audit: type=1326 audit(438.523:76851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.455537][ T29] audit: type=1326 audit(438.523:76852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.478548][ T29] audit: type=1326 audit(438.523:76853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.501684][ T29] audit: type=1326 audit(438.523:76854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.524714][ T29] audit: type=1326 audit(438.523:76855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.548313][ T29] audit: type=1326 audit(438.523:76856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.571305][ T29] audit: type=1326 audit(438.523:76857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.594496][ T29] audit: type=1326 audit(438.523:76858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.617605][ T29] audit: type=1326 audit(438.523:76859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.640715][ T29] audit: type=1326 audit(438.523:76860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26905 comm="syz.3.8579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3a6fcebe9 code=0x7ffc0000 [ 463.674236][T26917] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8584'. [ 463.711709][T26919] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8585'. [ 463.890805][T26957] pim6reg: entered allmulticast mode [ 463.905537][T26961] loop7: detected capacity change from 0 to 512 [ 463.915123][T26961] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.931058][T26961] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8604: bg 0: block 64: padding at end of block bitmap is not set [ 463.959287][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.977162][T26967] pim6reg: left allmulticast mode [ 463.994009][T26973] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.8607'. [ 464.040462][T26981] loop7: detected capacity change from 0 to 512 [ 464.057855][T26981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.106882][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.143257][T26997] netlink: 'syz.7.8617': attribute type 10 has an invalid length. [ 464.153575][T26997] team0: Port device netdevsim1 added [ 464.267270][T27015] loop7: detected capacity change from 0 to 512 [ 464.276535][T27015] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.337059][T22961] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.380338][T27026] loop7: detected capacity change from 0 to 128 [ 464.387797][T27026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 464.396196][T27026] System zones: 1-3, 19-19, 35-36 [ 464.403377][T27026] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 464.428064][T22961] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.457087][T27033] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 464.626138][T27040] loop7: detected capacity change from 0 to 512 [ 464.632894][T27040] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 464.747558][T27045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.756220][T27045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.940993][T27069] pim6reg: entered allmulticast mode [ 465.015871][T27074] pim6reg: left allmulticast mode [ 465.068206][T27077] bridge0: entered allmulticast mode [ 465.077110][T27077] batadv1: left allmulticast mode [ 465.082412][T27077] batadv1: left promiscuous mode [ 465.087640][T27077] bridge0: port 1(batadv1) entered disabled state [ 465.105711][ T1049] usb usb6-port1: attempt power cycle [ 465.406415][T27099] veth0_to_team: entered promiscuous mode [ 465.412262][T27099] veth0_to_team: entered allmulticast mode [ 465.670955][T27137] IPv6: Can't replace route, no match found [ 465.729132][T27150] netlink: 'syz.5.8683': attribute type 10 has an invalid length. [ 465.836234][T27170] loop6: detected capacity change from 0 to 128 [ 465.852435][T27170] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 465.972260][T27194] IPv4: Oversized IP packet from 127.202.26.0 [ 466.160158][T27225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.168702][T27225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.197216][T27226] 9pnet_fd: Insufficient options for proto=fd [ 466.451306][T27229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=27229 comm=syz.2.8716 [ 466.952996][T27249] __nla_validate_parse: 5 callbacks suppressed [ 466.953012][T27249] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8726'. [ 467.008023][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8727'. [ 467.017160][T27251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8727'. [ 467.069310][T27266] loop6: detected capacity change from 0 to 512 [ 467.077508][ T1049] usb usb6-port1: unable to enumerate USB device [ 467.089744][T27266] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.090967][T27271] team_slave_0: entered promiscuous mode [ 467.107872][T27271] team_slave_1: entered promiscuous mode [ 467.113535][T27271] netdevsim netdevsim7 netdevsim1: entered promiscuous mode [ 467.122567][T27271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 467.133029][T27274] pim6reg: entered allmulticast mode [ 467.151394][T27271] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 467.203672][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.225887][T27283] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.8741'. [ 467.247782][T27284] pim6reg: left allmulticast mode [ 468.313571][T27351] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.8770'. [ 469.182611][T27460] lo speed is unknown, defaulting to 1000 [ 469.188823][T27460] lo speed is unknown, defaulting to 1000 [ 469.235627][T27460] lo speed is unknown, defaulting to 1000 [ 469.271962][T27463] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8814'. [ 469.302989][T27465] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8815'. [ 469.310107][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8816'. [ 469.325200][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8816'. [ 469.381728][T27475] 9pnet_fd: Insufficient options for proto=fd [ 469.418447][T27481] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 469.419240][T27483] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.432980][T27483] IPv6: NLM_F_CREATE should be set when creating new route [ 469.460429][T27485] netlink: 'syz.3.8825': attribute type 10 has an invalid length. [ 469.496060][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 469.496075][ T29] audit: type=1400 audit(444.135:77126): avc: denied { mount } for pid=27488 comm="syz.6.8827" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 469.614283][T27491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8828'. [ 469.655549][ T29] audit: type=1400 audit(444.273:77127): avc: denied { mounton } for pid=27501 comm="syz.6.8831" path="/996/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 469.686844][ T29] audit: type=1400 audit(444.301:77128): avc: denied { unmount } for pid=11959 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 469.853093][ T29] audit: type=1326 audit(444.467:77129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.7.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 469.876225][ T29] audit: type=1326 audit(444.467:77130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27376 comm="syz.7.8780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 470.191517][ T29] audit: type=1326 audit(444.772:77131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.6.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 470.214812][ T29] audit: type=1326 audit(444.772:77132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.6.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 470.247210][ T29] audit: type=1326 audit(444.818:77133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.6.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 470.270244][ T29] audit: type=1326 audit(444.818:77134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.6.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 470.293337][ T29] audit: type=1326 audit(444.818:77135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27545 comm="syz.6.8851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 470.326908][T23367] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.326946][T23367] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.327046][T23367] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.327124][T23367] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 470.410822][T27564] loop6: detected capacity change from 0 to 1024 [ 470.419155][T27564] EXT4-fs: Ignoring removed bh option [ 470.457308][T27564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.496520][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.578660][ T3383] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 470.686577][T23385] $Hÿ (unregistering): Released all slaves [ 470.694982][T23385] bond1 (unregistering): Released all slaves [ 470.703037][T23385] bond2 (unregistering): Released all slaves [ 470.711160][T23385] bond3 (unregistering): Released all slaves [ 470.720107][T23385] bond4 (unregistering): Released all slaves [ 470.727865][T23385] bond5 (unregistering): Released all slaves [ 470.735971][T23385] bond6 (unregistering): Released all slaves [ 470.747395][T23385] bond7 (unregistering): Released all slaves [ 470.756106][T23385] bond8 (unregistering): Released all slaves [ 470.764860][T23385] bond9 (unregistering): Released all slaves [ 470.773062][T27576] netlink: 'syz.7.8863': attribute type 3 has an invalid length. [ 470.839533][T23385] tipc: Left network mode [ 471.032365][T23385] C (unregistering): left allmulticast mode [ 471.043857][T27611] pim6reg: entered allmulticast mode [ 471.073707][T27627] IPVS: Error connecting to the multicast addr [ 471.149580][T27619] pim6reg: left allmulticast mode [ 471.176360][T23385] IPVS: stop unused estimator thread 0... [ 471.287066][T27652] bridge: RTM_NEWNEIGH with invalid ether address [ 471.353261][T27658] bridge0: entered promiscuous mode [ 471.362585][T27658] bridge0: port 2(macvlan0) entered blocking state [ 471.369335][T27658] bridge0: port 2(macvlan0) entered disabled state [ 471.376640][T27658] macvlan0: entered allmulticast mode [ 471.382094][T27658] bridge0: entered allmulticast mode [ 471.388137][T27658] macvlan0: left allmulticast mode [ 471.393326][T27658] bridge0: left allmulticast mode [ 471.398938][T27658] bridge0: left promiscuous mode [ 472.035381][T27726] netlink: 'syz.2.8927': attribute type 4 has an invalid length. [ 472.057450][T27728] pim6reg: entered allmulticast mode [ 472.069632][T27726] netlink: 'syz.2.8927': attribute type 4 has an invalid length. [ 472.078962][ T3383] lo speed is unknown, defaulting to 1000 [ 472.084766][ T3383] syz0: Port: 1 Link ACTIVE [ 472.090907][ T3383] lo speed is unknown, defaulting to 1000 [ 472.096756][ T3383] syz0: Port: 1 Link DOWN [ 472.140571][T27736] loop6: detected capacity change from 0 to 1024 [ 472.151106][T27736] EXT4-fs: Ignoring removed bh option [ 472.156529][T27736] EXT4-fs: inline encryption not supported [ 472.164178][T27736] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 472.192024][T27736] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.8928: lblock 2 mapped to illegal pblock 2 (length 1) [ 472.218253][T27736] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.8928: lblock 0 mapped to illegal pblock 48 (length 1) [ 472.234332][T27736] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.8928: Failed to acquire dquot type 0 [ 472.256009][T27736] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 472.267298][T27736] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.8928: mark_inode_dirty error [ 472.289015][T27736] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 472.299198][T27736] EXT4-fs (loop6): 1 orphan inode deleted [ 472.312943][T23342] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 472.316434][T27736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.342949][T23342] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0 [ 472.378082][T27736] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 472.396392][T27736] pim6reg: left allmulticast mode [ 472.956537][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.518541][T27836] pim6reg: entered allmulticast mode [ 473.607601][T27837] pim6reg: left allmulticast mode [ 473.984081][T27859] program syz.6.8979 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.003759][T27865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.150432][T27878] loop6: detected capacity change from 0 to 1024 [ 474.176782][T27878] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.214657][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.787725][T27927] netlink: 'syz.5.9003': attribute type 10 has an invalid length. [ 475.115019][T27943] __nla_validate_parse: 7 callbacks suppressed [ 475.115036][T27943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9010'. [ 475.161926][T27949] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.171074][T27949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.180061][T27949] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.198418][T27949] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.207568][T27949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.216606][T27949] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.227559][T27947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.262977][T27949] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.271967][T27949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.281078][T27949] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9011'. [ 475.393613][T27968] pim6reg: entered allmulticast mode [ 475.473695][T27975] pim6reg: left allmulticast mode [ 475.589405][T27988] program syz.6.9028 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.623380][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 475.623394][ T29] audit: type=1326 audit(449.783:77325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27991 comm="syz.6.9030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 475.625995][T27992] sd 0:0:1:0: device reset [ 475.630727][ T29] audit: type=1326 audit(449.783:77326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27991 comm="syz.6.9030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 475.680015][ T29] audit: type=1326 audit(449.793:77327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27991 comm="syz.6.9030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f542486d550 code=0x7ffc0000 [ 475.703051][ T29] audit: type=1326 audit(449.793:77328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27991 comm="syz.6.9030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 475.726078][ T29] audit: type=1326 audit(449.793:77329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27991 comm="syz.6.9030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 475.749678][ T29] audit: type=1326 audit(449.820:77330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27991 comm="syz.6.9030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 475.772713][ T29] audit: type=1326 audit(449.820:77331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27991 comm="syz.6.9030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542486ebe9 code=0x7ffc0000 [ 475.828078][T27997] loop6: detected capacity change from 0 to 512 [ 475.859611][ T29] audit: type=1326 audit(450.005:77332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28000 comm="syz.7.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 475.882852][ T29] audit: type=1326 audit(450.005:77333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28000 comm="syz.7.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 475.924805][T27997] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.987129][T11959] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.030111][ T29] audit: type=1326 audit(450.060:77334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28000 comm="syz.7.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7efd843febe9 code=0x7ffc0000 [ 476.038084][T28013] loop7: detected capacity change from 0 to 128 [ 476.081849][T28013] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 476.278254][T22961] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 476.368961][T28035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28035 comm=syz.7.9046 [ 476.400747][T28035] netlink: 'syz.7.9046': attribute type 5 has an invalid length. [ 476.449915][T28044] loop7: detected capacity change from 0 to 128 [ 476.451165][T28046] 9pnet_fd: Insufficient options for proto=fd [ 476.481202][T23349] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 476.489417][T23349] FAT-fs (loop7): Filesystem has been set read-only [ 476.496223][T23349] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 476.533329][T28057] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 476.599710][T28063] wg2: entered promiscuous mode [ 476.604784][T28063] wg2: entered allmulticast mode [ 476.615392][T28065] loop6: detected capacity change from 0 to 1024 [ 476.623555][T28065] EXT4-fs: Ignoring removed oldalloc option [ 476.629795][T28065] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 476.658534][T28065] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.708920][T28065] loop6: detected capacity change from 1024 to 64 [ 476.719984][T28065] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.9060: corrupted xattr entries [ 476.732431][T28065] EXT4-fs error (device loop6): get_max_inline_xattr_value_size:74: inode #15: comm syz.6.9060: corrupt xattr in inline inode [ 476.746073][T28065] EXT4-fs error (device loop6): xattr_find_entry:333: inode #15: comm syz.6.9060: corrupted xattr entries [ 476.769023][T11959] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /1061/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 476.869460][T14132] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.873071][T28084] IPv4: Oversized IP packet from 127.202.26.0 [ 476.900050][T28066] bio_check_eod: 21 callbacks suppressed [ 476.900066][T28066] kmmpd-loop6: attempt to access beyond end of device [ 476.900066][T28066] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 476.919256][T28066] buffer_io_error: 21 callbacks suppressed [ 476.919271][T28066] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 476.928791][T28090] 9pnet_fd: Insufficient options for proto=fd [ 476.982597][T23345] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 476.992578][T23345] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.068515][T23345] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 477.078472][T23345] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.106908][T28109] pim6reg: entered allmulticast mode [ 477.181656][T28114] pim6reg: left allmulticast mode [ 477.201583][T23345] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 477.211666][T23345] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.321433][T28106] lo speed is unknown, defaulting to 1000 [ 477.327531][T28106] lo speed is unknown, defaulting to 1000 [ 477.339254][T23345] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 477.349198][T23345] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 477.416581][T28106] lo speed is unknown, defaulting to 1000 [ 477.445146][T23345] batadv1: left allmulticast mode [ 477.450226][T23345] batadv1: left promiscuous mode [ 477.455287][T23345] bridge0: port 1(batadv1) entered disabled state [ 477.490340][ T3381] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 477.516468][T23345] bond3 (unregistering): (slave geneve3): Releasing active interface [ 477.675088][T23345] bond0 (unregistering): Released all slaves [ 477.692371][T23345] bond1 (unregistering): Released all slaves [ 477.706485][T23345] bond2 (unregistering): Released all slaves [ 477.715518][T23345] bond3 (unregistering): Released all slaves [ 477.786084][T28129] loop7: detected capacity change from 0 to 1024 [ 477.802430][T28129] EXT4-fs: Ignoring removed oldalloc option [ 477.827527][T28129] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 477.880868][T28129] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.915632][T23345] pimreg (unregistering): left allmulticast mode [ 477.967975][T28129] loop7: detected capacity change from 1024 to 64 [ 477.979683][T28129] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.9085: corrupted xattr entries [ 478.004507][T28129] EXT4-fs error (device loop7): get_max_inline_xattr_value_size:74: inode #15: comm syz.7.9085: corrupt xattr in inline inode [ 478.018427][T23345] team0 (unregistering): Port device dummy0 removed [ 478.037493][T28129] EXT4-fs error (device loop7): xattr_find_entry:333: inode #15: comm syz.7.9085: corrupted xattr entries [ 478.053542][T28106] chnl_net:caif_netlink_parms(): no params data found [ 478.084838][T22961] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /330/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 478.142900][T24547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.154041][T28106] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.161217][T28106] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.168345][T28132] kmmpd-loop7: attempt to access beyond end of device [ 478.168345][T28132] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 478.181878][T28132] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 478.191909][T28106] bridge_slave_0: entered allmulticast mode [ 478.198421][T28106] bridge_slave_0: entered promiscuous mode [ 478.208493][T28106] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.215543][T28106] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.222820][T28106] bridge_slave_1: entered allmulticast mode [ 478.229276][T28106] bridge_slave_1: entered promiscuous mode [ 478.245933][T28106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.256287][T28106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.275862][T28106] team0: Port device team_slave_0 added [ 478.282726][T28106] team0: Port device team_slave_1 added [ 478.297581][T28106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.304648][T28106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.330778][T28106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.342066][T28106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.349018][T28106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.375036][T28106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.410073][T28106] hsr_slave_0: entered promiscuous mode [ 478.416117][T28106] hsr_slave_1: entered promiscuous mode [ 478.422010][T28106] debugfs: 'hsr0' already exists in 'hsr' [ 478.427729][T28106] Cannot create hsr debugfs directory [ 478.462495][T23345] IPVS: stop unused estimator thread 0... [ 478.547503][T28162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28162 comm=syz.3.9097 [ 478.635021][T28106] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 478.652872][T23345] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.664639][T28106] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 478.687497][T28106] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.703148][T28106] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.722597][T28157] lo speed is unknown, defaulting to 1000 [ 478.733125][T23345] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.750496][T28157] lo speed is unknown, defaulting to 1000 [ 478.790094][T23345] team0: Port device netdevsim1 removed [ 478.796713][T23345] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.846464][T28106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.870545][T28106] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.885109][T23345] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.909253][T28157] lo speed is unknown, defaulting to 1000 [ 478.917463][T23367] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.924615][T23367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.944287][T23367] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.951336][T23367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.039125][T23345] bridge_slave_1: left allmulticast mode [ 479.044784][T23345] bridge_slave_1: left promiscuous mode [ 479.050667][T23345] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.086250][T28202] netlink: 'syz.2.9106': attribute type 1 has an invalid length. [ 479.094337][T23345] bridge_slave_0: left allmulticast mode [ 479.100031][T23345] bridge_slave_0: left promiscuous mode [ 479.105866][T23345] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.243001][T23345] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 479.300915][T23345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.314600][T23345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.328404][T23345] bond0 (unregistering): Released all slaves [ 479.360460][T28106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.475509][T23345] hsr_slave_0: left promiscuous mode [ 479.481383][T23345] hsr_slave_1: left promiscuous mode [ 479.499700][T23345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.507220][T23345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.542069][T23345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.549605][T23345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.575158][T23345] team_slave_0: left promiscuous mode [ 479.580575][T23345] team_slave_1: left promiscuous mode [ 479.586011][T23345] veth1_macvtap: left promiscuous mode [ 479.591868][T23345] veth0_macvtap: left promiscuous mode [ 479.597467][T23345] veth1_vlan: left promiscuous mode [ 479.603156][T23345] veth0_vlan: left promiscuous mode [ 479.718062][T23345] team0 (unregistering): Port device team_slave_1 removed [ 479.735135][T23345] team0 (unregistering): Port device team_slave_0 removed [ 479.773928][T28157] chnl_net:caif_netlink_parms(): no params data found [ 479.924307][T28157] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.931448][T28157] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.938715][T28157] bridge_slave_0: entered allmulticast mode [ 479.945499][T28157] bridge_slave_0: entered promiscuous mode [ 479.952415][T28157] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.959750][T28157] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.967177][T28157] bridge_slave_1: entered allmulticast mode [ 479.973776][T28157] bridge_slave_1: entered promiscuous mode [ 480.010651][T28157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.036896][T28157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.069335][T28157] team0: Port device team_slave_0 added [ 480.077327][T28157] team0: Port device team_slave_1 added [ 480.094737][T28157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.101720][T28157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.127824][T28157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.139290][T23345] IPVS: stop unused estimator thread 0... [ 480.139523][T28157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.151998][T28157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.177920][T28157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.221349][T28157] hsr_slave_0: entered promiscuous mode [ 480.236412][T28157] hsr_slave_1: entered promiscuous mode [ 480.243535][T28157] debugfs: 'hsr0' already exists in 'hsr' [ 480.249290][T28157] Cannot create hsr debugfs directory [ 480.262191][T28106] veth0_vlan: entered promiscuous mode [ 480.289245][T28106] veth1_vlan: entered promiscuous mode [ 480.306112][T28106] veth0_macvtap: entered promiscuous mode [ 480.313782][T28106] veth1_macvtap: entered promiscuous mode [ 480.326109][T28106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.362309][T28106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.392645][T23353] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.424964][T23353] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.438844][T23353] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.448067][T23345] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.489031][T28157] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 480.504239][T28157] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 480.514907][T28157] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 480.527626][T28157] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 480.555458][T28307] __nla_validate_parse: 6 callbacks suppressed [ 480.555468][T28307] netlink: 100 bytes leftover after parsing attributes in process `syz.8.9143'. [ 480.603517][T28157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.625456][T28157] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.638525][T23367] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.645632][T23367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.658730][T23367] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.665845][T23367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.782756][T28157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.992329][T28380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9165'. [ 481.001440][T28380] netlink: 212 bytes leftover after parsing attributes in process `syz.2.9165'. [ 481.015290][T28157] veth0_vlan: entered promiscuous mode [ 481.033605][T28157] veth1_vlan: entered promiscuous mode [ 481.055857][T28157] veth0_macvtap: entered promiscuous mode [ 481.066608][T28157] veth1_macvtap: entered promiscuous mode [ 481.088060][T28157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.100566][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 481.100580][ T29] audit: type=1326 audit(454.841:77459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.102266][T28157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.106824][ T29] audit: type=1326 audit(454.841:77460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.166514][T23395] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.178467][ T29] audit: type=1326 audit(454.897:77461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.201674][ T29] audit: type=1326 audit(454.897:77462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.224673][ T29] audit: type=1326 audit(454.897:77463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.247711][ T29] audit: type=1326 audit(454.897:77464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.270768][ T29] audit: type=1326 audit(454.897:77465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.293793][ T29] audit: type=1326 audit(454.897:77466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.316824][ T29] audit: type=1326 audit(454.897:77467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.339774][ T29] audit: type=1326 audit(454.897:77468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28388 comm="syz.8.9170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45bfdfebe9 code=0x7ffc0000 [ 481.367293][T23395] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.378740][T23395] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.387617][T23395] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.520619][T28412] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.783894][T28418] lo speed is unknown, defaulting to 1000 [ 481.805243][T28418] lo speed is unknown, defaulting to 1000 [ 482.503736][T28418] lo speed is unknown, defaulting to 1000 [ 483.060424][T28513] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 483.191719][T28531] bridge0: port 1(bond0) entered blocking state [ 483.198126][T28531] bridge0: port 1(bond0) entered disabled state [ 483.204770][T28531] bond0: entered allmulticast mode [ 483.211076][T28531] bond0: entered promiscuous mode [ 483.217275][T28531] bond0: left allmulticast mode [ 483.222310][T28531] bond0: left promiscuous mode [ 483.227407][T28531] bridge0: port 1(bond0) entered disabled state [ 483.324062][T28537] SELinux: ebitmap: truncated map [ 483.334763][T28537] SELinux: failed to load policy [ 483.365596][T28542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9232'. [ 483.445205][T28553] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 484.970140][T28642] can0: slcan on ttyS3. [ 485.029808][T28642] can0 (unregistered): slcan off ttyS3. [ 485.343571][T28668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9284'. [ 485.428518][T28679] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 485.439483][T28680] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 485.447636][T28680] tipc: Enabled bearer , priority 10 [ 485.458430][T28682] IPv4: Oversized IP packet from 127.202.26.0 [ 485.659716][T28703] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.726808][T28703] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.784967][T28703] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.849800][T28703] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.905793][T23368] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.919288][T23361] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.930800][T23361] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.942428][T23361] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.003283][T28726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9310'. [ 486.029575][T28726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9310'. [ 486.794000][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 486.794013][ T29] audit: type=1326 audit(460.093:77611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28767 comm="syz.2.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 486.823525][ T29] audit: type=1326 audit(460.093:77612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28767 comm="syz.2.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 486.836635][T28770] tipc: New replicast peer: 255.255.255.83 [ 486.852966][T28770] tipc: Enabled bearer , priority 10 [ 486.862703][ T29] audit: type=1326 audit(460.093:77613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28767 comm="syz.2.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 486.885757][ T29] audit: type=1326 audit(460.112:77614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28767 comm="syz.2.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 486.908817][ T29] audit: type=1326 audit(460.112:77615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28767 comm="syz.2.9329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 487.174590][T28806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9346'. [ 487.219608][T28806] team0: entered promiscuous mode [ 487.224677][T28806] team0: entered allmulticast mode [ 487.230234][ T144] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.248253][ T144] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.258100][ T144] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.301707][ T144] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 487.332858][T28818] IPv4: Oversized IP packet from 127.202.26.0 [ 487.696305][ T29] audit: type=1326 audit(460.933:77616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28856 comm="syz.5.9364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 487.719537][ T29] audit: type=1326 audit(460.933:77617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28856 comm="syz.5.9364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 487.744791][ T29] audit: type=1326 audit(460.933:77618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28856 comm="syz.5.9364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 487.767892][ T29] audit: type=1326 audit(460.933:77619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28856 comm="syz.5.9364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 487.790958][ T29] audit: type=1326 audit(460.933:77620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28856 comm="syz.5.9364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 488.539170][T28916] pim6reg: entered allmulticast mode [ 488.632503][T28921] pim6reg: left allmulticast mode [ 488.687016][T28931] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.758786][T28931] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.813197][T28931] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.866832][T28931] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 488.928231][T23368] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 488.969522][T23368] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 488.996245][T23368] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 489.017573][T28945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9402'. [ 489.026770][T23368] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 489.387127][T28973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9414'. [ 489.397147][T28973] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9414'. [ 489.804791][T29029] pim6reg: entered allmulticast mode [ 489.926041][T29039] pim6reg: left allmulticast mode [ 489.978112][T29050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9434'. [ 490.085002][T29066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9436'. [ 490.565234][T29136] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9441'. [ 490.623870][T23396] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.680020][T23396] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.748844][T29151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9446'. [ 490.776182][T29141] lo speed is unknown, defaulting to 1000 [ 490.793772][T29141] lo speed is unknown, defaulting to 1000 [ 490.802063][T23396] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.817470][T29157] IPVS: Error connecting to the multicast addr [ 490.862118][T23396] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.908025][T29141] lo speed is unknown, defaulting to 1000 [ 490.983768][T29141] chnl_net:caif_netlink_parms(): no params data found [ 490.994271][T23396] bridge_slave_1: left allmulticast mode [ 490.999994][T23396] bridge_slave_1: left promiscuous mode [ 491.005687][T23396] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.014140][T23396] bridge_slave_0: left allmulticast mode [ 491.019816][T23396] bridge_slave_0: left promiscuous mode [ 491.025652][T23396] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.104280][T23396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.114759][T23396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.124564][T23396] bond0 (unregistering): Released all slaves [ 491.164995][T29141] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.172097][T29141] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.179537][T29141] bridge_slave_0: entered allmulticast mode [ 491.186024][T29141] bridge_slave_0: entered promiscuous mode [ 491.193193][T29141] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.200351][T29141] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.207860][T29141] bridge_slave_1: entered allmulticast mode [ 491.214399][T29141] bridge_slave_1: entered promiscuous mode [ 491.246227][T29141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.267293][T29141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.314339][T23396] hsr_slave_0: left promiscuous mode [ 491.320265][T23396] hsr_slave_1: left promiscuous mode [ 491.326003][T23396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.333396][T23396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.341190][T23396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.348638][T23396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.369080][T23396] veth1_macvtap: left promiscuous mode [ 491.374802][T23396] veth0_macvtap: left promiscuous mode [ 491.380572][T23396] veth1_vlan: left promiscuous mode [ 491.386076][T23396] veth0_vlan: left promiscuous mode [ 491.477873][T23396] team0 (unregistering): Port device team_slave_1 removed [ 491.488460][T23396] team0 (unregistering): Port device team_slave_0 removed [ 491.616509][T29141] team0: Port device team_slave_0 added [ 491.630021][T29141] team0: Port device team_slave_1 added [ 491.656660][T29141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.663749][T29141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.689783][T29141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.707720][T29141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.714710][T29141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.740715][T29141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.770320][T29141] hsr_slave_0: entered promiscuous mode [ 491.776723][T29141] hsr_slave_1: entered promiscuous mode [ 491.787067][T29141] debugfs: 'hsr0' already exists in 'hsr' [ 491.792884][T29141] Cannot create hsr debugfs directory [ 491.836174][T29185] syzkaller0: entered promiscuous mode [ 491.841662][T29185] syzkaller0: entered allmulticast mode [ 492.219167][T29141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 492.235085][T29141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 492.257241][T29141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 492.272370][T29141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 492.278032][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 492.278079][ T29] audit: type=1326 audit(465.161:77673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.328665][ T29] audit: type=1326 audit(465.161:77674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.351684][ T29] audit: type=1326 audit(465.161:77675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd0ee5ec23 code=0x7ffc0000 [ 492.374566][ T29] audit: type=1326 audit(465.161:77676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd0ee5ec23 code=0x7ffc0000 [ 492.397643][ T29] audit: type=1326 audit(465.161:77677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.420671][ T29] audit: type=1326 audit(465.161:77678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.433466][T29141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.443710][ T29] audit: type=1326 audit(465.161:77679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.443739][ T29] audit: type=1326 audit(465.161:77680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.443774][ T29] audit: type=1326 audit(465.161:77681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.519411][ T29] audit: type=1326 audit(465.161:77682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29232 comm="syz.5.9476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 492.555397][T29141] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.589660][T23396] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.596731][T23396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.623108][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.630190][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.653860][T29141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.664256][T29141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 492.694702][T29256] Process accounting resumed [ 492.782811][T29141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.806065][T29270] ALSA: seq fatal error: cannot create timer (-19) [ 492.839150][T29276] tipc: Enabling of bearer rejected, already enabled [ 492.912187][T29141] veth0_vlan: entered promiscuous mode [ 492.921892][T29141] veth1_vlan: entered promiscuous mode [ 492.941857][T29141] veth0_macvtap: entered promiscuous mode [ 492.949667][T29141] veth1_macvtap: entered promiscuous mode [ 492.962680][T29141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.974728][T29141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.987818][T23353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.997199][T23353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.017541][T23353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.033255][T23353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.002709][T29344] __nla_validate_parse: 2 callbacks suppressed [ 494.002725][T29344] netlink: 14 bytes leftover after parsing attributes in process `syz.8.9515'. [ 494.025188][T29344] hsr_slave_0: left promiscuous mode [ 494.036772][T29344] hsr_slave_1: left promiscuous mode [ 494.187186][T29354] loop8: detected capacity change from 0 to 512 [ 494.212426][T29354] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 494.238185][T29354] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.9520: bg 0: block 4: invalid block bitmap [ 494.251583][T29354] EXT4-fs (loop8): Remounting filesystem read-only [ 494.259117][T29354] EXT4-fs (loop8): 1 truncate cleaned up [ 494.266529][T29354] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.283781][T29366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9525'. [ 494.300169][T29366] batadv0 (unregistering): left allmulticast mode [ 494.306672][T29366] batadv0 (unregistering): left promiscuous mode [ 494.313107][T29366] bridge0: port 1(batadv0) entered disabled state [ 494.320565][T28106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.493711][T29394] loop0: detected capacity change from 0 to 128 [ 494.503097][T29394] EXT4-fs: Ignoring removed nobh option [ 494.543053][T29394] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 494.561810][T29396] SELinux: failed to load policy [ 494.614264][T29141] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 494.721852][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9543'. [ 494.768443][T29430] netlink: 'syz.3.9551': attribute type 12 has an invalid length. [ 495.245692][T29460] syz.2.9563 (29460): attempted to duplicate a private mapping with mremap. This is not supported. [ 495.499236][T29485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9575'. [ 495.549413][T29488] netlink: 'syz.3.9576': attribute type 1 has an invalid length. [ 495.596597][T29488] 8021q: adding VLAN 0 to HW filter on device bond15 [ 495.670929][T29495] 8021q: adding VLAN 0 to HW filter on device bond9 [ 495.690144][T29498] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 495.700734][T29498] bond15: (slave batadv1): making interface the new active one [ 495.709459][T29498] bond15: (slave batadv1): Enslaving as an active interface with an up link [ 495.751660][T29511] ip6gre1: entered allmulticast mode [ 495.899709][T29526] lo speed is unknown, defaulting to 1000 [ 495.905944][T29526] lo speed is unknown, defaulting to 1000 [ 495.988772][T29540] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.996018][T29540] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.044760][T29540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.055713][T29540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.086957][T23353] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.121574][T23353] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.130434][T29544] lo speed is unknown, defaulting to 1000 [ 496.136543][T23353] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.145797][T29544] lo speed is unknown, defaulting to 1000 [ 496.175580][T23353] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.188734][T29526] lo speed is unknown, defaulting to 1000 [ 496.249063][T29544] lo speed is unknown, defaulting to 1000 [ 496.951474][T29589] loop8: detected capacity change from 0 to 1024 [ 496.976204][T29589] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.238694][T29654] lo speed is unknown, defaulting to 1000 [ 497.266577][T29654] lo speed is unknown, defaulting to 1000 [ 497.328767][T29690] loop0: detected capacity change from 0 to 512 [ 497.364420][T29690] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.9621: casefold flag without casefold feature [ 497.434340][T29690] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.9621: couldn't read orphan inode 15 (err -117) [ 497.506541][T28106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.526988][T29690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.621813][T29141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.812987][T29700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9626'. [ 497.822045][T29700] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9626'. [ 497.859461][T29700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9626'. [ 497.868214][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 497.868229][ T29] audit: type=1326 audit(470.311:77826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 497.869606][T29700] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9626'. [ 497.874715][ T29] audit: type=1326 audit(470.311:77827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 497.897674][T29700] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9626'. [ 497.906695][ T29] audit: type=1326 audit(470.311:77828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 497.906723][ T29] audit: type=1326 audit(470.311:77829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 497.984911][ T29] audit: type=1326 audit(470.311:77830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 498.007900][ T29] audit: type=1326 audit(470.311:77831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 498.030932][ T29] audit: type=1326 audit(470.311:77832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 498.054013][ T29] audit: type=1326 audit(470.311:77833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 498.077009][ T29] audit: type=1326 audit(470.311:77834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 498.100224][ T29] audit: type=1326 audit(470.311:77835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.2.9620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 498.230483][T29654] lo speed is unknown, defaulting to 1000 [ 498.380575][T29727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9636'. [ 499.241127][T29771] loop0: detected capacity change from 0 to 1024 [ 499.248678][T29771] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 499.269695][T29771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.631666][T29141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.649895][T29793] loop0: detected capacity change from 0 to 512 [ 499.656639][T29793] EXT4-fs: Ignoring removed mblk_io_submit option [ 499.663097][T29793] EXT4-fs: dax option not supported [ 499.674025][T29793] __nla_validate_parse: 1 callbacks suppressed [ 499.674113][T29793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9664'. [ 499.689425][T29793] bridge_slave_1: left allmulticast mode [ 499.695067][T29793] bridge_slave_1: left promiscuous mode [ 499.700851][T29793] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.708978][T29793] bridge_slave_0: left allmulticast mode [ 499.714681][T29793] bridge_slave_0: left promiscuous mode [ 499.720351][T29793] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.732954][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9666'. [ 499.742019][T29797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9666'. [ 499.980933][T29824] syz_tun: entered promiscuous mode [ 500.005603][T29824] vlan2: entered promiscuous mode [ 500.052853][T29823] delete_channel: no stack [ 500.070644][T29837] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9681'. [ 500.253528][T29857] netlink: 'syz.5.9690': attribute type 2 has an invalid length. [ 500.261279][T29857] netlink: 'syz.5.9690': attribute type 1 has an invalid length. [ 500.269052][T29857] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.9690'. [ 500.361054][T29874] loop0: detected capacity change from 0 to 128 [ 500.600866][T29894] loop0: detected capacity change from 0 to 512 [ 500.646015][T29894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.678777][T29141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.696474][T29903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9704'. [ 500.952388][T29935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9720'. [ 501.326176][T29952] netlink: 'syz.8.9728': attribute type 10 has an invalid length. [ 501.340536][T29952] team0: Port device dummy0 added [ 501.353069][T29952] netlink: 'syz.8.9728': attribute type 10 has an invalid length. [ 501.365848][T29952] team0: Port device dummy0 removed [ 501.373693][T29952] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 502.139072][T29981] pim6reg: entered allmulticast mode [ 502.261447][T29988] loop0: detected capacity change from 0 to 1024 [ 502.293986][T29988] EXT4-fs: Ignoring removed bh option [ 502.369058][T29988] EXT4-fs: inline encryption not supported [ 502.393519][T29988] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 502.406867][T29992] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9741'. [ 502.421453][T29993] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 502.445000][T29995] netlink: 'gtp': attribute type 30 has an invalid length. [ 502.458265][T29988] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.9740: lblock 2 mapped to illegal pblock 2 (length 1) [ 502.492611][T29988] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.9740: lblock 0 mapped to illegal pblock 48 (length 1) [ 502.514787][T29988] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.9740: Failed to acquire dquot type 0 [ 502.542180][T29988] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 502.556485][T29988] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.9740: mark_inode_dirty error [ 502.568933][T29988] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 502.579869][T29988] EXT4-fs (loop0): 1 orphan inode deleted [ 502.587206][T29988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.599800][ T2614] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 502.627860][ T2614] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 502.648950][T29988] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 502.651238][T30012] lo speed is unknown, defaulting to 1000 [ 502.663512][T30012] lo speed is unknown, defaulting to 1000 [ 502.682609][T29988] pim6reg: left allmulticast mode [ 502.748714][T30022] ÿÿÿÿÿÿ: renamed from vlan1 [ 502.756647][T30012] lo speed is unknown, defaulting to 1000 [ 502.830039][T30030] syz_tun: entered allmulticast mode [ 502.836726][T30029] syz_tun: left allmulticast mode [ 503.043123][T29141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.243318][T30062] lo speed is unknown, defaulting to 1000 [ 503.261265][T30062] lo speed is unknown, defaulting to 1000 [ 503.336387][T30067] lo speed is unknown, defaulting to 1000 [ 503.350811][T30067] lo speed is unknown, defaulting to 1000 [ 503.394760][T30062] lo speed is unknown, defaulting to 1000 [ 503.467199][T30067] lo speed is unknown, defaulting to 1000 [ 503.548767][T30075] veth0_to_team: entered promiscuous mode [ 503.565282][T30077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9774'. [ 503.575741][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 503.575756][ T29] audit: type=1326 audit(475.581:78087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30074 comm="syz.5.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 503.605394][ T29] audit: type=1326 audit(475.581:78088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30074 comm="syz.5.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 503.628429][ T29] audit: type=1326 audit(475.618:78089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30074 comm="syz.5.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 503.651392][ T29] audit: type=1326 audit(475.618:78090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30074 comm="syz.5.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 503.674384][ T29] audit: type=1326 audit(475.618:78091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30074 comm="syz.5.9773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd0ee5ebe9 code=0x7ffc0000 [ 503.698289][T30080] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 503.721343][T30086] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9777'. [ 503.828949][ T29] audit: type=1400 audit(475.821:78092): avc: denied { write } for pid=30089 comm="syz.8.9779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 503.848235][ T29] audit: type=1400 audit(475.821:78093): avc: denied { read } for pid=30089 comm="syz.8.9779" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 504.077781][T30115] netlink: 'syz.2.9787': attribute type 7 has an invalid length. [ 504.246394][T30138] lo speed is unknown, defaulting to 1000 [ 504.253158][T30138] lo speed is unknown, defaulting to 1000 [ 504.307181][T30138] lo speed is unknown, defaulting to 1000 [ 504.326974][T30144] Unsupported xt match [ 504.326991][T30144] unable to load match [ 504.547979][ T29] audit: type=1326 audit(476.486:78094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30167 comm="syz.2.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 504.581107][ T29] audit: type=1326 audit(476.486:78095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30167 comm="syz.2.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 504.604236][ T29] audit: type=1326 audit(476.486:78096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30167 comm="syz.2.9806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f837022ebe9 code=0x7ffc0000 [ 504.689543][T30177] loop8: detected capacity change from 0 to 512 [ 504.710537][T30177] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.9808: corrupted inode contents [ 504.738552][T30177] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.9808: mark_inode_dirty error [ 504.804684][T30187] pim6reg: entered allmulticast mode [ 504.847227][T30177] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.9808: corrupted inode contents [ 504.876569][T30177] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.9808: mark_inode_dirty error [ 504.890961][T30177] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.9808: corrupted inode contents [ 504.903598][T30177] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 504.923410][T30190] pim6reg: left allmulticast mode [ 504.944439][T30177] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.9808: corrupted inode contents [ 505.028276][T30177] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.9808: mark_inode_dirty error [ 505.059646][T30177] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 505.122253][T30177] EXT4-fs (loop8): 1 truncate cleaned up [ 505.129070][T30177] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.141709][T23348] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 1 [ 505.195061][T30201] wg2: left promiscuous mode [ 505.199731][T30201] wg2: left allmulticast mode [ 505.224481][T30201] veth0_to_team: left promiscuous mode [ 505.231262][T30201] batadv_slave_1: left promiscuous mode [ 505.238916][T28106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.264665][ T9] lo speed is unknown, defaulting to 1000 [ 505.266844][T23348] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.270418][ T9] syz2: Port: 1 Link DOWN [ 505.315272][T23348] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.332516][T23348] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.343941][ T3715] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.444151][T30227] smc: net device bond0 erased user defined pnetid SYZ0 [ 505.462000][T30229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 505.469264][T30229] IPv6: NLM_F_CREATE should be set when creating new route [ 505.525167][T30232] loop8: detected capacity change from 0 to 4096 [ 505.547666][T30232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.597143][T30232] SELinux: failed to load policy [ 505.607249][T30246] loop0: detected capacity change from 0 to 512 [ 505.617609][T30246] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.9834: corrupted in-inode xattr: invalid ea_ino [ 505.633447][T30246] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.9834: couldn't read orphan inode 15 (err -117) [ 505.648871][T30246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.662540][T28106] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.687045][T30254] __nla_validate_parse: 3 callbacks suppressed [ 505.687061][T30254] netlink: 76 bytes leftover after parsing attributes in process `syz.8.9837'. [ 505.719794][T30259] netlink: 'syz.8.9840': attribute type 1 has an invalid length. [ 505.743087][T30259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.759391][T29141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.775690][T30264] pim6reg: entered allmulticast mode [ 505.796569][T30259] bond0: (slave dummy0): Releasing backup interface [ 505.807362][T30267] loop0: detected capacity change from 0 to 512 [ 505.816109][T30267] EXT4-fs: Ignoring removed mblk_io_submit option [ 505.827611][T30259] bond1: (slave dummy0): making interface the new active one [ 505.837391][T30259] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 505.848726][T30267] EXT4-fs (loop0): failed to initialize system zone (-117) [ 505.856592][T30267] EXT4-fs (loop0): mount failed [ 505.895736][T30270] : renamed from bond0 [ 505.929375][T30271] pim6reg: left allmulticast mode [ 506.097193][T30294] tipc: Started in network mode [ 506.102177][T30294] tipc: Node identity 92643f98f43e, cluster identity 4711 [ 506.109383][T30294] tipc: Enabled bearer , priority 0 [ 506.117938][T30294] tipc: Disabling bearer [ 506.224075][T30302] syzkaller0: entered promiscuous mode [ 506.229545][T30302] syzkaller0: entered allmulticast mode [ 506.338806][T30304] macsec0: entered promiscuous mode [ 506.344148][T30304] macsec0: entered allmulticast mode [ 506.349455][T30304] veth1_macvtap: entered allmulticast mode [ 506.690789][T30321] pim6reg: entered allmulticast mode [ 506.761387][T30324] loop0: detected capacity change from 0 to 1024 [ 506.768396][T30324] EXT4-fs: Ignoring removed bh option [ 506.774080][T30324] EXT4-fs: inline encryption not supported [ 506.780341][T30324] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 506.792882][T30324] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.9873: lblock 2 mapped to illegal pblock 2 (length 1) [ 506.807045][T30324] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.9873: lblock 0 mapped to illegal pblock 48 (length 1) [ 506.821469][T30324] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.9873: Failed to acquire dquot type 0 [ 506.832935][T30324] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 506.842417][T30324] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.9873: mark_inode_dirty error [ 506.853835][T30324] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 506.864033][T30324] EXT4-fs (loop0): 1 orphan inode deleted [ 506.869987][T30324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.882457][T23390] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:57: lblock 1 mapped to illegal pblock 1 (length 1) [ 506.882548][T30324] ================================================================== [ 506.882583][T30324] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 506.898269][T23390] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:57: Failed to release dquot type 0 [ 506.904750][T30324] [ 506.904758][T30324] write to 0xffffffff8686dd00 of 8 bytes by task 23390 on cpu 0: [ 506.904774][T30324] data_alloc+0x271/0x2b0 [ 506.904805][T30324] prb_reserve+0x808/0xaf0 [ 506.941832][T30324] vprintk_store+0x56d/0x860 [ 506.946431][T30324] vprintk_emit+0x178/0x650 [ 506.950921][T30324] vprintk_default+0x26/0x30 [ 506.955495][T30324] vprintk+0x1d/0x30 [ 506.959376][T30324] _printk+0x79/0xa0 [ 506.963265][T30324] __ext4_error_inode+0x30f/0x3f0 [ 506.968284][T30324] ext4_map_blocks+0xa14/0xd00 [ 506.973038][T30324] ext4_getblk+0x114/0x510 [ 506.977447][T30324] ext4_bread+0x28/0x110 [ 506.981677][T30324] ext4_quota_read+0xe8/0x260 [ 506.986338][T30324] remove_tree+0x129/0x1120 [ 506.990834][T30324] qtree_release_dquot+0x16e/0x180 [ 506.995940][T30324] v2_release_dquot+0x98/0xd0 [ 507.000615][T30324] dquot_release+0x10e/0x210 [ 507.005193][T30324] ext4_release_dquot+0x1e4/0x460 [ 507.010202][T30324] quota_release_workfn+0x253/0x530 [ 507.015391][T30324] process_scheduled_works+0x4cb/0x9d0 [ 507.020843][T30324] worker_thread+0x582/0x770 [ 507.025437][T30324] kthread+0x489/0x510 [ 507.029498][T30324] ret_from_fork+0xda/0x150 [ 507.033994][T30324] ret_from_fork_asm+0x1a/0x30 [ 507.038756][T30324] [ 507.041065][T30324] read to 0xffffffff8686dd00 of 16 bytes by task 30324 on cpu 1: [ 507.048773][T30324] _prb_read_valid+0x1bc/0x920 [ 507.053537][T30324] prb_read_valid+0x3c/0x60 [ 507.058036][T30324] console_unlock+0x164/0x330 [ 507.062696][T30324] vprintk_emit+0x388/0x650 [ 507.067185][T30324] vprintk_default+0x26/0x30 [ 507.071766][T30324] vprintk+0x1d/0x30 [ 507.075648][T30324] _printk+0x79/0xa0 [ 507.079538][T30324] __ext4_msg+0x18f/0x1a0 [ 507.083862][T30324] ext4_fill_super+0x2d05/0x34e0 [ 507.088796][T30324] get_tree_bdev_flags+0x28e/0x300 [ 507.093896][T30324] get_tree_bdev+0x1f/0x30 [ 507.098297][T30324] ext4_get_tree+0x1c/0x30 [ 507.102707][T30324] vfs_get_tree+0x57/0x1d0 [ 507.107110][T30324] do_new_mount+0x207/0x5e0 [ 507.111598][T30324] path_mount+0x4a4/0xb20 [ 507.115911][T30324] __se_sys_mount+0x28f/0x2e0 [ 507.120577][T30324] __x64_sys_mount+0x67/0x80 [ 507.125154][T30324] x64_sys_call+0x2b4d/0x2ff0 [ 507.129815][T30324] do_syscall_64+0xd2/0x200 [ 507.134306][T30324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.140192][T30324] [ 507.142501][T30324] Reported by Kernel Concurrency Sanitizer on: [ 507.148644][T30324] CPU: 1 UID: 0 PID: 30324 Comm: syz.0.9873 Tainted: G W 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(voluntary) [ 507.162711][T30324] Tainted: [W]=WARN [ 507.166500][T30324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.176544][T30324] ================================================================== [ 507.202808][T30324] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 507.212546][T30324] pim6reg: left allmulticast mode [ 507.598676][T29141] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.