last executing test programs: 4m32.484810062s ago: executing program 2 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r2, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) close(r2) 4m32.457424523s ago: executing program 2 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 4m31.54400129s ago: executing program 2 (id=912): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 4m31.511428411s ago: executing program 2 (id=913): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 4m31.411528613s ago: executing program 2 (id=915): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 4m31.378947963s ago: executing program 2 (id=916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 4m31.354080704s ago: executing program 32 (id=916): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r3, 0x0) 4m1.912350546s ago: executing program 5 (id=1271): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000000340)={0x0, 0x1060, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 4m1.872464437s ago: executing program 4 (id=1272): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') recvfrom(r1, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 4m1.759134589s ago: executing program 4 (id=1273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r1) 4m1.66128418s ago: executing program 4 (id=1274): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xd}, 0x604a, 0xb9, 0x2, 0x0, 0x2, 0x240, 0xfffd, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x1) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r0, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m1.645958931s ago: executing program 5 (id=1276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="4d7e2abd7000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r7, @ANYBLOB="0600060002"], 0x50}, 0x4, 0x700000000000000}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) socket(0x200000000000011, 0x2, 0x0) 4m1.624319161s ago: executing program 5 (id=1277): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_getres(0xffffffea, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 4m1.599133811s ago: executing program 5 (id=1278): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") syz_open_pts(0xffffffffffffffff, 0x2800) prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_io_uring_setup(0xd5, &(0x7f0000000640)={0x0, 0xc12d, 0x1, 0x0, 0x109}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4m1.513962823s ago: executing program 5 (id=1281): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 4m0.893348675s ago: executing program 5 (id=1289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1268, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 4m0.893196995s ago: executing program 33 (id=1289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1268, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 4m0.767125538s ago: executing program 4 (id=1292): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") syz_open_pts(0xffffffffffffffff, 0x2800) prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = syz_io_uring_setup(0xd5, &(0x7f0000000640)={0x0, 0xc12d, 0x1, 0x0, 0x109}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0xffffffffffffffff, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4m0.445260274s ago: executing program 4 (id=1296): bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20000800) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x800) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[]) 3m59.06460865s ago: executing program 4 (id=1311): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='xen_mmu_set_pud\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m59.05933144s ago: executing program 34 (id=1311): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000240)='xen_mmu_set_pud\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m21.764422701s ago: executing program 6 (id=3440): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000000)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 1m20.874859788s ago: executing program 6 (id=3460): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000800)=0x3, 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x13, 0x200, &(0x7f0000000d80)="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"}) ioctl$KDADDIO(r2, 0x4b34, 0xb) close(0x3) r4 = syz_open_procfs(0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/32, 0x20) getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) 1m20.76084405s ago: executing program 6 (id=3462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) 1m20.72046835s ago: executing program 6 (id=3464): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xe01, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) syz_clone3(&(0x7f00000004c0)={0x48080000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1m20.386239877s ago: executing program 6 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0xa1010000]}}) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sendmsg$unix(r1, &(0x7f0000000500)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000240)="52bf9b81b1ea2d120aad8f0a3d408f353c0192737644e94c32f5f3ae9c3e5a2287556435c5348d64ceb665dae7bbbe037e02c6c2f3bfa7b56608814130b9fc03317ea4e22023098b94504cd65521099e3fe107049fe579588090760c3f7662a3426fbf1cc7fbac50dd92370efe9004fbab3a", 0x72}, {&(0x7f0000000300)="eae2b3a409a7bef88242520139dec98b2d0679a9f2f4e41dc61a11accd59109668adc52afc10e69dd056fafaf7295a62ba5cd6fb27735550694f794f48694fe10b5dd4b2e28c1c046c0ca2575e5112770d531350e7791f8c81cc427641f1789912b15e36210b64d2ce6078f5c7791c74a80905d0ff38e3a5b169285101affc410d5b6ab38a", 0x85}], 0x2, &(0x7f0000000440)=[@rights={{0x18, 0x1, 0x1, [r0, r3]}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r4, r2, r2]}}], 0x40, 0x8081}, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000480)=0x1c) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) 1m20.128100042s ago: executing program 6 (id=3473): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xfffffff8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 1m20.125222802s ago: executing program 35 (id=3473): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0xfffffff8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 3.066787411s ago: executing program 8 (id=4233): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.891779425s ago: executing program 8 (id=4246): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x1020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x5f}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) close(0xffffffffffffffff) r6 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r6) 2.744082018s ago: executing program 1 (id=4238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)='PU', 0x2}], 0x1}}], 0x1, 0x20004810) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r1) 2.716365308s ago: executing program 1 (id=4239): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2000000000000246, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x35}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000240)=r4, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r6, &(0x7f00000019c0)=""/4097, 0x1001) 2.62065199s ago: executing program 8 (id=4240): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000080)) r2 = openat$cgroup_int(r0, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX=r2], 0x27) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) 1.846751575s ago: executing program 1 (id=4245): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x44000) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r4, &(0x7f0000000380)=ANY=[], 0x20021) 1.763396286s ago: executing program 8 (id=4249): close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(r3, 0x0, 0x40000000, 0x0) 1.653659558s ago: executing program 8 (id=4250): socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(0x0, 0x0, 0x401, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.638571258s ago: executing program 0 (id=4251): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext3\x00', &(0x7f00000007c0)='./file1\x00', 0x1416c14, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001d80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x9}, 0x18) r1 = socket(0xa, 0x3, 0xff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$unix(r1, &(0x7f0000004440)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000180)="31c92990f8448924061effca885344e1d27f0cf076e90c9029da492c396ca48d263b9946dcb510fd", 0x28}], 0x1, 0x0, 0x0, 0x95}}], 0x1, 0x40000a0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.60544845s ago: executing program 7 (id=4252): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x3}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00'}, 0xb4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1a, 0x1, 0x100000, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.499962601s ago: executing program 3 (id=4253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8db, 0x7ff, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x8, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x5, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 1.465426152s ago: executing program 7 (id=4254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) epoll_create1(0x80000) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) 1.312987725s ago: executing program 3 (id=4255): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r6, 0x7) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.215389797s ago: executing program 3 (id=4256): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x61f, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0x0, 0x1}, {0x8}}}, 0x24}}, 0x10) 1.112545239s ago: executing program 3 (id=4257): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)='$\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 971.903602ms ago: executing program 0 (id=4258): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b8, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x100, 0xc8, 0x2, 0x7, 0x0, 0x10003, 0xa}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000200)={0x27}, 0x6) 941.420122ms ago: executing program 0 (id=4259): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 923.311753ms ago: executing program 0 (id=4260): mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r0 = open(&(0x7f0000000000)='.\x00', 0x48400, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r2, &(0x7f0000000340)=[{&(0x7f00000013c0)=""/125, 0x7d}], 0x1, 0x0, 0xffffffff) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbf8, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 915.732612ms ago: executing program 1 (id=4261): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) pwritev(r1, &(0x7f0000000700), 0x0, 0x7, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb30, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 869.579334ms ago: executing program 0 (id=4262): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) 859.527234ms ago: executing program 1 (id=4263): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) 783.810615ms ago: executing program 1 (id=4264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000001c0007800c00028008000140000000000c000180080001c0ac1414bb05000500020000000500010006"], 0x64}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000140)={'wg0\x00', {0x2, 0x4e21, @broadcast}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0xd2e, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0xfffffff5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4271, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xf566, 0x100000, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x5, 0x0, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x0, 0x3, 0x10000, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0001, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x2000007, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x3, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x9, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x2, 0x89, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0x40ff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x100, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0xfffffffe, 0x0, 0x5, 0x2, 0x65, 0x40, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x6, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0xd0, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x80, 0x6, "33c49d9f2b0c4c5a4aace1acb6130aeb50495debb3a96347b634e5e9fcee7220f6f25513b05b90650d46547ffa9081d8d3c1ab0d99a4a6f74dcd04b33d0a58999118c3b2016955af74ae00afd2bdc057828c4264f778adb47c4cf02713653fe9315eb4a31f96eb7db4bfb9851b5dd928a1e7352592c36b56de328e15"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x6c, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x2d, 0x8, "5e679b26ebd15814569fc79a45384775fba3784c15547afd8b168b51f988e7bc929cfddef4199474b7"}, @NFTA_OBJ_USERDATA={0x7, 0x8, "f84b3b"}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}], {0x14}}, 0x1c4}, 0x1, 0x0, 0x0, 0x841}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 756.480926ms ago: executing program 8 (id=4265): r0 = socket$packet(0x11, 0x3, 0x300) socket(0x8, 0x5, 0x4) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xe5}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) 585.415129ms ago: executing program 7 (id=4266): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002940)='.', 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = inotify_init() creat(&(0x7f00000000c0)='./file0\x00', 0x80) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x4000cdd) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 491.351481ms ago: executing program 3 (id=4267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x6}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0), 0x6, 0x5fd, &(0x7f0000000c00)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050) 248.017885ms ago: executing program 7 (id=4268): r0 = io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) execve(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) prctl$PR_GET_SECUREBITS(0x1b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4400, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 118.332738ms ago: executing program 7 (id=4269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 0s ago: executing program 7 (id=4270): r0 = syz_io_uring_setup(0x816, &(0x7f00000004c0)={0x0, 0xaee2, 0x80, 0x0, 0x1f9}, &(0x7f00000001c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r2], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x200000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) memfd_secret(0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x1c3e00, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) unshare(0x2a020400) kernel console output (not intermixed with test programs): 5 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 249.010916][ T29] audit: type=1326 audit(248.884:18816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 249.034169][ T29] audit: type=1326 audit(248.884:18817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 249.057324][ T29] audit: type=1326 audit(248.884:18818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 249.080509][ T29] audit: type=1326 audit(248.884:18819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 249.103880][ T29] audit: type=1326 audit(248.894:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 249.127105][ T29] audit: type=1326 audit(248.894:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.6.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 249.202277][T11970] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3123'. [ 249.234649][T11970] loop3: detected capacity change from 0 to 256 [ 249.254879][T11974] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 249.261525][T11974] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 249.269109][T11974] vhci_hcd vhci_hcd.0: Device attached [ 249.296080][T11979] loop6: detected capacity change from 0 to 512 [ 249.321777][T11979] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.347004][T11981] loop3: detected capacity change from 0 to 764 [ 249.364823][T11981] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.381321][T11979] FAT-fs (loop6): Directory bread(block 1056) failed [ 249.417669][T11979] FAT-fs (loop6): Directory bread(block 1057) failed [ 249.444980][T11979] FAT-fs (loop6): Directory bread(block 1058) failed [ 249.460796][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 249.485407][T11979] FAT-fs (loop6): Directory bread(block 1059) failed [ 249.506040][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 249.511203][T11979] FAT-fs (loop6): Directory bread(block 1060) failed [ 249.531528][ T971] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 249.562058][T11979] FAT-fs (loop6): Directory bread(block 1061) failed [ 249.568859][T11979] FAT-fs (loop6): Directory bread(block 1062) failed [ 249.575884][T11979] FAT-fs (loop6): Directory bread(block 1063) failed [ 249.584612][T11979] FAT-fs (loop6): Directory bread(block 1064) failed [ 249.591579][T11979] FAT-fs (loop6): Directory bread(block 1065) failed [ 249.660289][T11988] tipc: New replicast peer: 255.255.255.83 [ 249.666302][T11988] tipc: Enabled bearer , priority 10 [ 249.740177][T11975] vhci_hcd: connection reset by peer [ 249.746426][ T3671] vhci_hcd: stop threads [ 249.750721][ T3671] vhci_hcd: release socket [ 249.755227][ T3671] vhci_hcd: disconnect device [ 249.909374][T12002] openvswitch: netlink: Message has 6 unknown bytes. [ 250.008976][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3138'. [ 250.049529][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3139'. [ 250.551540][T12047] loop3: detected capacity change from 0 to 512 [ 250.613544][T12049] loop6: detected capacity change from 0 to 1024 [ 250.648492][T12049] EXT4-fs: Ignoring removed orlov option [ 251.297565][T12057] __nla_validate_parse: 1 callbacks suppressed [ 251.297580][T12057] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3155'. [ 251.326439][T12049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.343440][T12047] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3147: bg 0: block 393: padding at end of block bitmap is not set [ 251.359315][T12047] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 251.369499][T12047] EXT4-fs (loop3): 2 truncates cleaned up [ 251.376765][T12047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.426149][T12058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3155'. [ 251.792839][ T6950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.953082][T12068] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3160'. [ 252.056422][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3162'. [ 252.304840][T12082] 9pnet_fd: Insufficient options for proto=fd [ 252.334659][T12082] 9pnet_fd: Insufficient options for proto=fd [ 252.454814][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.788146][T12099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3172'. [ 253.343956][T12111] loop3: detected capacity change from 0 to 512 [ 253.377342][T12111] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.412879][T12111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 253.445299][T12114] macsec0: left promiscuous mode [ 253.473156][T12119] loop6: detected capacity change from 0 to 1024 [ 253.477637][T12111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 253.502511][T12111] System zones: 1-12 [ 253.518500][T12111] EXT4-fs (loop3): 1 truncate cleaned up [ 253.524914][T12119] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 253.542384][T12111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.622633][T12126] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: comm syz.6.3180: lblock 0 mapped to illegal pblock 0 (length 6) [ 253.786392][T12126] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 253.798784][T12126] EXT4-fs (loop6): This should not happen!! Data will be lost [ 253.798784][T12126] [ 254.466601][ T3671] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:58: lblock 8 mapped to illegal pblock 8 (length 8) [ 254.486135][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.495551][ T3671] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 254.507948][ T3671] EXT4-fs (loop6): This should not happen!! Data will be lost [ 254.507948][ T3671] [ 254.562450][ T971] usb 13-1: enqueue for inactive port 0 [ 254.583967][ T3671] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 254.607801][ T971] usb 13-1: enqueue for inactive port 0 [ 254.616310][T12135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3183'. [ 254.635730][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 254.635747][ T29] audit: type=1326 audit(254.594:18964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.642043][T12134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3184'. [ 254.665284][ T29] audit: type=1326 audit(254.594:18965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.697219][ T29] audit: type=1326 audit(254.594:18966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.720226][ T29] audit: type=1326 audit(254.594:18967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.743214][ T29] audit: type=1326 audit(254.594:18968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.754133][T12137] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12137 comm=syz.3.3184 [ 254.766270][ T29] audit: type=1326 audit(254.594:18969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.766309][ T29] audit: type=1326 audit(254.594:18970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.791073][ T3671] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 254.802146][ T29] audit: type=1326 audit(254.594:18971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12133 comm="syz.0.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 254.825068][ T3671] EXT4-fs (loop6): This should not happen!! Data will be lost [ 254.825068][ T3671] [ 254.837786][ T971] vhci_hcd: vhci_device speed not set [ 254.860794][ T3671] EXT4-fs (loop6): Total free blocks count 0 [ 254.881857][ T3671] EXT4-fs (loop6): Free/Dirty block details [ 254.887830][ T3671] EXT4-fs (loop6): free_blocks=4293918720 [ 254.931701][T12140] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 255.024429][T12147] netlink: 'syz.6.3182': attribute type 10 has an invalid length. [ 255.235192][T12159] atomic_op ffff88811acb5528 conn xmit_atomic 0000000000000000 [ 255.914329][T12168] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3194'. [ 256.313729][T12113] lo speed is unknown, defaulting to 1000 [ 256.401184][T12156] lo speed is unknown, defaulting to 1000 [ 256.481668][T12179] lo speed is unknown, defaulting to 1000 [ 257.164930][T12190] netlink: 'syz.0.3201': attribute type 13 has an invalid length. [ 257.852735][T12193] loop3: detected capacity change from 0 to 2048 [ 257.880149][T12193] EXT4-fs: Ignoring removed orlov option [ 257.945421][T12193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.984161][ T29] audit: type=1326 audit(257.944:18972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.0.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 258.007407][ T29] audit: type=1326 audit(257.944:18973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12198 comm="syz.0.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 258.041382][ T971] Process accounting resumed [ 258.212043][T12204] netlink: 'syz.0.3205': attribute type 10 has an invalid length. [ 258.244182][T12204] veth0_vlan: entered allmulticast mode [ 258.434706][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.725022][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 258.869993][T12221] loop3: detected capacity change from 0 to 128 [ 258.887814][T12226] loop6: detected capacity change from 0 to 2048 [ 258.898279][T12226] EXT4-fs: dax option not supported [ 258.933315][T12226] loop6: detected capacity change from 0 to 1024 [ 258.965889][T12230] bio_check_eod: 19 callbacks suppressed [ 258.965905][T12230] syz.3.3206: attempt to access beyond end of device [ 258.965905][T12230] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 258.984403][T12232] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 258.996038][T12228] bridge0: port 3(30{X) entered blocking state [ 259.002817][T12228] bridge0: port 3(30{X) entered forwarding state [ 259.014170][T12230] syz.3.3206: attempt to access beyond end of device [ 259.014170][T12230] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 259.027822][T12230] syz.3.3206: attempt to access beyond end of device [ 259.027822][T12230] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 259.029190][T12226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.041469][T12230] syz.3.3206: attempt to access beyond end of device [ 259.041469][T12230] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 259.041517][T12230] syz.3.3206: attempt to access beyond end of device [ 259.041517][T12230] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 259.087243][T12228] bridge0: port 4(dummy0) entered blocking state [ 259.090353][T12230] syz.3.3206: attempt to access beyond end of device [ 259.090353][T12230] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 259.093796][T12228] bridge0: port 4(dummy0) entered forwarding state [ 259.107320][T12230] syz.3.3206: attempt to access beyond end of device [ 259.107320][T12230] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 259.129008][T12230] syz.3.3206: attempt to access beyond end of device [ 259.129008][T12230] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 259.143157][T12228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 259.159137][ T971] lo speed is unknown, defaulting to 1000 [ 259.163619][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3217'. [ 259.164944][ T971] syz0: Port: 1 Link ACTIVE [ 259.191253][ T4262] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 259.242598][T12244] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3221'. [ 259.253944][T12244] futex_wake_op: syz.3.3221 tries to shift op by -1; fix this program [ 259.301242][ T3661] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 259.364124][ T6950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.496363][T12257] loop3: detected capacity change from 0 to 1024 [ 259.512368][T12257] EXT4-fs: Ignoring removed orlov option [ 259.544236][T12257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.681927][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 259.681945][ T29] audit: type=1326 audit(259.654:19046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.682388][T12268] netlink: 'syz.0.3230': attribute type 13 has an invalid length. [ 259.688173][ T29] audit: type=1326 audit(259.654:19047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.741944][ T29] audit: type=1326 audit(259.654:19048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.764963][ T29] audit: type=1326 audit(259.654:19049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.787886][ T29] audit: type=1326 audit(259.654:19050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.811675][ T29] audit: type=1326 audit(259.654:19051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.835055][ T29] audit: type=1326 audit(259.654:19052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.859238][T12268] bridge0: port 3(30{X) entered disabled state [ 259.886325][T12268] bridge0: port 4(dummy0) entered disabled state [ 259.903275][ T4262] lo speed is unknown, defaulting to 1000 [ 259.909074][ T4262] syz0: Port: 1 Link DOWN [ 259.914727][ T29] audit: type=1326 audit(259.884:19053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 259.937914][ T29] audit: type=1326 audit(259.884:19054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12267 comm="syz.0.3230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 260.009254][T12254] loop6: detected capacity change from 0 to 512 [ 260.085596][T12274] lo speed is unknown, defaulting to 1000 [ 260.089500][T12254] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 260.104138][T12254] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 260.127228][T12254] EXT4-fs (loop6): mount failed [ 260.313118][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.384685][T12299] atomic_op ffff8881251e2128 conn xmit_atomic 0000000000000000 [ 260.399963][T12294] lo speed is unknown, defaulting to 1000 [ 260.424003][ T4262] Process accounting resumed [ 260.484038][T12302] loop3: detected capacity change from 0 to 512 [ 260.663887][T12302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.809000][T12302] netlink: 'syz.3.3242': attribute type 10 has an invalid length. [ 260.822984][T12311] netlink: 'syz.7.3245': attribute type 13 has an invalid length. [ 260.863670][T12302] veth0_vlan: entered allmulticast mode [ 260.960307][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.973309][T12311] tipc: Resetting bearer [ 261.168391][T12317] 9pnet_fd: Insufficient options for proto=fd [ 261.193797][T12317] 9pnet_fd: Insufficient options for proto=fd [ 261.201804][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 261.248697][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 261.308070][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 261.377276][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 261.403367][T12319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3249'. [ 261.406167][T12332] netlink: 'syz.7.3255': attribute type 4 has an invalid length. [ 261.461867][T12336] netlink: 'syz.7.3255': attribute type 4 has an invalid length. [ 261.582743][T12340] netlink: 'syz.7.3258': attribute type 10 has an invalid length. [ 261.595327][T12340] veth0_vlan: entered allmulticast mode [ 261.936099][T12353] loop6: detected capacity change from 0 to 512 [ 261.953319][T12353] EXT4-fs (loop6): orphan cleanup on readonly fs [ 261.965985][T12353] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3262: bg 0: block 248: padding at end of block bitmap is not set [ 261.994193][T12353] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3262: Failed to acquire dquot type 1 [ 262.020304][T12353] EXT4-fs (loop6): 1 truncate cleaned up [ 262.040251][T12353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.084853][T12353] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 262.111819][T12353] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 0 [ 262.139907][T12362] netlink: 'syz.6.3262': attribute type 13 has an invalid length. [ 262.227533][ T6950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.412985][T12370] loop6: detected capacity change from 0 to 1024 [ 262.420090][T12370] EXT4-fs: Ignoring removed i_version option [ 262.427823][T12370] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 262.442234][T12370] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.3264: Invalid block bitmap block 0 in block_group 0 [ 262.456965][T12370] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.3264: Failed to acquire dquot type 0 [ 262.501793][T12370] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.3264: Freeing blocks not in datazone - block = 0, count = 4096 [ 262.516004][T12370] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.3264: Invalid inode bitmap blk 0 in block_group 0 [ 262.529300][T12370] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 262.538567][T12370] EXT4-fs (loop6): 1 orphan inode deleted [ 262.545692][T12370] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.297562][ T3661] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:50: Failed to release dquot type 0 [ 264.234745][ T6950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.258234][T12390] loop6: detected capacity change from 0 to 512 [ 264.271778][T12386] pim6reg1: entered promiscuous mode [ 264.277295][T12386] pim6reg1: entered allmulticast mode [ 264.287324][T12390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.329787][T12390] netlink: 'syz.6.3270': attribute type 10 has an invalid length. [ 264.337743][T12390] veth0_vlan: entered allmulticast mode [ 264.363962][ T6950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.474125][T12403] 8021q: adding VLAN 0 to HW filter on device  [ 264.503018][T12403] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.877645][T12413] lo speed is unknown, defaulting to 1000 [ 264.891992][T12402] Set syz1 is full, maxelem 65536 reached [ 264.939024][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 264.939041][ T29] audit: type=1400 audit(264.904:19115): avc: denied { validate_trans } for pid=12416 comm="syz.6.3278" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 265.025720][T12421] siw: device registration error -23 [ 265.163545][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3287'. [ 265.930593][T12466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3301'. [ 266.176459][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3317'. [ 266.219237][T12487] loop3: detected capacity change from 0 to 2048 [ 266.252774][T12487] EXT4-fs: dax option not supported [ 266.307441][T12487] loop3: detected capacity change from 0 to 1024 [ 266.337152][T12487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.385309][T12495] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 266.512883][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.536588][ T29] audit: type=1326 audit(266.504:19116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 266.581179][ T29] audit: type=1326 audit(266.504:19117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 266.604409][ T29] audit: type=1326 audit(266.534:19118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 266.627492][ T29] audit: type=1326 audit(266.534:19119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 266.650619][ T29] audit: type=1326 audit(266.534:19120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 266.673735][ T29] audit: type=1326 audit(266.544:19121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 266.696765][ T29] audit: type=1326 audit(266.544:19122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 266.719844][ T29] audit: type=1326 audit(266.544:19123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb128095ba7 code=0x7ffc0000 [ 266.742865][ T29] audit: type=1326 audit(266.544:19124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.3.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb12803adb9 code=0x7ffc0000 [ 266.992232][T12507] loop3: detected capacity change from 0 to 512 [ 267.054081][T12507] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 267.092186][T12507] EXT4-fs (loop3): mount failed [ 267.375381][T12518] lo speed is unknown, defaulting to 1000 [ 267.623044][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3324'. [ 268.903214][T12541] lo speed is unknown, defaulting to 1000 [ 269.332876][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3331'. [ 269.623562][T12565] program syz.6.3330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.715780][T12566] syzkaller0: left promiscuous mode [ 269.721095][T12566] syzkaller0: left allmulticast mode [ 269.729543][T12566] tipc: Enabled bearer , priority 0 [ 269.824317][T12573] loop3: detected capacity change from 0 to 512 [ 269.841945][T12573] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 269.897516][T12573] EXT4-fs (loop3): failed to open journal device unknown-block(4,3) -6 [ 270.325688][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3347'. [ 270.357192][T12584] 9pnet: p9_errstr2errno: server reported unknown error [ 270.814205][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3356'. [ 272.092196][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3348'. [ 272.148519][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 272.148534][ T29] audit: type=1404 audit(272.114:19304): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 272.221716][ T29] audit: type=1400 audit(272.144:19305): avc: denied { lock } for pid=12618 comm="syz.0.3350" path="/" dev="configfs" ino=2094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=0 [ 272.243500][ T29] audit: type=1404 audit(272.144:19306): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 272.257993][ T29] audit: type=1400 audit(272.154:19307): avc: denied { create } for pid=12617 comm="syz.3.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.278044][ T29] audit: type=1400 audit(272.164:19308): avc: denied { write } for pid=12617 comm="syz.3.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.297975][ T29] audit: type=1400 audit(272.164:19309): avc: denied { read } for pid=12617 comm="syz.3.3351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 272.523024][ T29] audit: type=1400 audit(272.484:19310): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.546925][ T29] audit: type=1400 audit(272.484:19311): avc: denied { open } for pid=3316 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.570863][ T29] audit: type=1400 audit(272.484:19312): avc: denied { ioctl } for pid=3316 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 272.689822][ T29] audit: type=1400 audit(272.594:19313): avc: denied { prog_load } for pid=12625 comm="syz.3.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 272.734143][T12628] loop3: detected capacity change from 0 to 1024 [ 272.772918][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3355'. [ 272.785627][T12630] bridge0: port 1(macvlan2) entered blocking state [ 272.792340][T12630] bridge0: port 1(macvlan2) entered disabled state [ 272.800026][T12630] macvlan2: entered allmulticast mode [ 272.805539][T12630] bridge0: entered allmulticast mode [ 272.811688][T12630] macvlan2: left allmulticast mode [ 272.816862][T12630] bridge0: left allmulticast mode [ 272.828750][T12628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.845802][T12628] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3354: Allocating blocks 385-513 which overlap fs metadata [ 272.861029][T12635] tipc: Enabling of bearer rejected, failed to enable media [ 272.863021][T12628] EXT4-fs (loop3): pa ffff8881072a54d0: logic 16, phys. 129, len 24 [ 272.877937][T12628] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 272.916352][T12641] netlink: 'syz.6.3360': attribute type 1 has an invalid length. [ 272.950873][T12641] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 272.960312][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.988079][T12641] veth5: entered promiscuous mode [ 273.001309][T12641] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 273.052448][T12653] netlink: 'gtp': attribute type 1 has an invalid length. [ 273.059660][T12653] netlink: 180900 bytes leftover after parsing attributes in process `gtp'. [ 273.231420][T12663] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3368'. [ 273.324525][T12668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3369'. [ 273.333682][T12668] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3369'. [ 273.342666][T12668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3369'. [ 273.357389][T12668] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3369'. [ 273.746292][T12675] loop3: detected capacity change from 0 to 512 [ 273.767727][T12675] EXT4-fs (loop3): orphan cleanup on readonly fs [ 273.794003][T12675] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3373: bg 0: block 248: padding at end of block bitmap is not set [ 273.835937][T12675] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3373: Failed to acquire dquot type 1 [ 273.883259][T12675] EXT4-fs (loop3): 1 truncate cleaned up [ 274.173501][T12675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 274.187438][T12690] netlink: 'syz.1.3378': attribute type 1 has an invalid length. [ 274.196000][T12675] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 274.205465][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.217461][T12690] bond0 (unregistering): Released all slaves [ 274.225216][T12675] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 0 [ 274.238946][T12675] netlink: 'syz.3.3373': attribute type 13 has an invalid length. [ 274.354874][T12675] tipc: Resetting bearer [ 274.413291][T12709] netlink: 'syz.0.3390': attribute type 4 has an invalid length. [ 274.443027][T12697] dvmrp1: entered allmulticast mode [ 274.499784][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.629060][T12720] netlink: 'syz.3.3386': attribute type 10 has an invalid length. [ 275.283607][T12738] loop3: detected capacity change from 0 to 1024 [ 275.306538][T12738] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.348220][T12738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.689733][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.038518][T12742] Set syz1 is full, maxelem 65536 reached [ 277.133265][T12766] __nla_validate_parse: 1 callbacks suppressed [ 277.133283][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3405'. [ 277.153235][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 277.153254][ T29] audit: type=1400 audit(277.124:19461): avc: denied { unlink } for pid=7007 comm="syz-executor" name="file0" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 277.186545][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3408'. [ 277.216315][ T29] audit: type=1400 audit(277.164:19462): avc: denied { write } for pid=12770 comm="syz.0.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 277.262676][T12783] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3411'. [ 277.266738][ T29] audit: type=1400 audit(277.214:19463): avc: denied { bind } for pid=12782 comm="syz.6.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.271718][T12783] netlink: 212 bytes leftover after parsing attributes in process `syz.6.3411'. [ 277.290699][ T29] audit: type=1400 audit(277.224:19464): avc: denied { accept } for pid=12782 comm="syz.6.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 277.407679][ T29] audit: type=1400 audit(277.304:19465): avc: denied { read } for pid=12782 comm="syz.6.3411" dev="nsfs" ino=4026533284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 277.428437][ T29] audit: type=1400 audit(277.304:19466): avc: denied { open } for pid=12782 comm="syz.6.3411" path="net:[4026533284]" dev="nsfs" ino=4026533284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 277.436437][T12781] lo speed is unknown, defaulting to 1000 [ 277.451409][ T29] audit: type=1400 audit(277.304:19467): avc: denied { create } for pid=12782 comm="syz.6.3411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 277.476201][ T29] audit: type=1326 audit(277.374:19468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 277.499339][ T29] audit: type=1326 audit(277.374:19469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 277.531175][ T29] audit: type=1326 audit(277.494:19470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.6.3412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b369bebe9 code=0x7ffc0000 [ 277.556484][T12791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3413'. [ 277.664042][T12797] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3415'. [ 277.692717][T12799] tipc: Enabling of bearer rejected, failed to enable media [ 277.712452][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3415'. [ 277.885801][T12814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=12814 comm=syz.0.3423 [ 277.908530][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3422'. [ 278.183302][T12833] tipc: Enabling of bearer rejected, already enabled [ 278.272701][T12840] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3435'. [ 278.420959][T12849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3432'. [ 278.452308][T12856] netlink: 'syz.1.3441': attribute type 4 has an invalid length. [ 278.482459][T12856] netlink: 'syz.1.3441': attribute type 4 has an invalid length. [ 278.721540][T12872] loop3: detected capacity change from 0 to 512 [ 278.732374][T12872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.757356][T12872] EXT4-fs (loop3): 1 truncate cleaned up [ 278.769903][T12872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.822428][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.382857][T12913] block device autoloading is deprecated and will be removed. [ 279.463722][T12919] netlink: 'syz.1.3463': attribute type 1 has an invalid length. [ 279.474444][T12918] loop6: detected capacity change from 0 to 1024 [ 279.485755][T12922] tipc: Enabling of bearer rejected, failed to enable media [ 279.497473][T12918] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.500453][T12919] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 279.538071][T12919] veth23: entered promiscuous mode [ 279.545487][T12919] bond0: (slave veth23): Enslaving as a backup interface with a down link [ 279.692980][T12918] lo speed is unknown, defaulting to 1000 [ 279.754778][T12939] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.3464: Allocating blocks 497-513 which overlap fs metadata [ 279.769456][T12939] EXT4-fs (loop6): pa ffff8881072a54d0: logic 256, phys. 385, len 8 [ 279.777521][T12939] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 279.788760][ T6950] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: iget: bad extended attribute block 5 [ 279.815150][ T6950] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: iget: bad extended attribute block 5 [ 279.845705][ T6950] syz_tun (unregistering): left allmulticast mode [ 279.858690][T12945] netlink: 'syz.1.3472': attribute type 1 has an invalid length. [ 279.890620][T12945] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.948841][ T6950] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.962710][T12948] bond4: (slave veth25): Enslaving as an active interface with a down link [ 279.978027][T12945] vlan1: entered allmulticast mode [ 279.983238][T12945] veth0_to_bond: entered allmulticast mode [ 280.005238][T12945] bond4: (slave vlan1): Opening slave failed [ 280.169272][T12957] netlink: 'syz.1.3486': attribute type 4 has an invalid length. [ 280.202946][T12964] netlink: 'syz.7.3478': attribute type 1 has an invalid length. [ 280.208709][T12957] dvmrp1: entered allmulticast mode [ 280.285327][T12964] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 280.349458][T12972] veth7: entered promiscuous mode [ 280.356794][T12972] bond0: (slave veth7): Enslaving as a backup interface with a down link [ 280.434167][ T3633] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 280.442615][ T3633] bond0 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 62:f6:44:ce:b9:9a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 280.552603][ T3633] tipc: Disabling bearer [ 280.842796][ T3633]  (unregistering): Released all slaves [ 280.850915][ T3633] bond1 (unregistering): Released all slaves [ 280.859962][ T3633] bond0 (unregistering): (slave veth5): Releasing backup interface [ 280.868790][ T3633] bond0 (unregistering): Released all slaves [ 280.877120][T12958] lo speed is unknown, defaulting to 1000 [ 280.920372][ T3633] tipc: Disabling bearer [ 280.925772][ T3633] tipc: Left network mode [ 281.079304][T12952] lo speed is unknown, defaulting to 1000 [ 281.977688][T12952] chnl_net:caif_netlink_parms(): no params data found [ 282.014831][T13014] netlink: 'syz.0.3492': attribute type 1 has an invalid length. [ 282.088346][T13014] bond0: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 282.122399][T12952] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.129616][T12952] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.136940][T12952] bridge_slave_0: entered allmulticast mode [ 282.143918][T12952] bridge_slave_0: entered promiscuous mode [ 282.169506][T13014] veth1: entered promiscuous mode [ 282.181639][T13014] bond0: (slave veth1): Enslaving as a backup interface with a down link [ 282.193276][T12952] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.200456][T12952] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.208260][T12952] bridge_slave_1: entered allmulticast mode [ 282.216115][T12952] bridge_slave_1: entered promiscuous mode [ 282.224211][ T3633] IPVS: stop unused estimator thread 0... [ 282.224912][ T29] kauditd_printk_skb: 708 callbacks suppressed [ 282.224928][ T29] audit: type=1326 audit(282.194:20179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13027 comm="syz.3.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 282.324876][ T29] audit: type=1326 audit(282.234:20180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13027 comm="syz.3.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 282.325379][T12952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.347995][ T29] audit: type=1326 audit(282.234:20181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13027 comm="syz.3.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 282.380233][ T29] audit: type=1326 audit(282.234:20182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13027 comm="syz.3.3495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 282.410536][T12952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.454029][T12952] team0: Port device team_slave_0 added [ 282.462847][T12952] team0: Port device team_slave_1 added [ 282.489078][T12952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.496265][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.522302][T12952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.537188][T13015] lo speed is unknown, defaulting to 1000 [ 282.537926][T12952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.543463][T13034] __nla_validate_parse: 17 callbacks suppressed [ 282.543475][T13034] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3498'. [ 282.549940][T12952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.591208][T12952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.605097][ T29] audit: type=1326 audit(282.334:20183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 282.628223][ T29] audit: type=1326 audit(282.334:20184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 282.651279][ T29] audit: type=1326 audit(282.334:20185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 282.674340][ T29] audit: type=1326 audit(282.334:20186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 282.697437][ T29] audit: type=1326 audit(282.334:20187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 282.720521][ T29] audit: type=1326 audit(282.334:20188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13031 comm="syz.0.3497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 282.873987][T13042] tipc: Enabling of bearer rejected, already enabled [ 282.888826][T12952] hsr_slave_0: entered promiscuous mode [ 282.898323][T12952] hsr_slave_1: entered promiscuous mode [ 282.923402][T12952] debugfs: 'hsr0' already exists in 'hsr' [ 282.929196][T12952] Cannot create hsr debugfs directory [ 283.221878][T12952] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 283.239219][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3507'. [ 283.250344][T12952] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 283.272315][T12952] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 283.291226][T13060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3507'. [ 283.292191][T12952] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 283.355153][T12952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.367182][T12952] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.397041][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.404245][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.430083][ T3618] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.437225][ T3618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.452666][T13072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3510'. [ 283.730843][T12952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.186707][T13101] loop3: detected capacity change from 0 to 512 [ 284.233656][T13101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.264862][T12952] veth0_vlan: entered promiscuous mode [ 284.325748][T12952] veth1_vlan: entered promiscuous mode [ 284.425845][T12952] veth0_macvtap: entered promiscuous mode [ 284.472407][T12952] veth1_macvtap: entered promiscuous mode [ 284.575577][T12952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.641086][T12952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.681981][ T51] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.744193][ T51] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.801097][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.095275][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3520'. [ 285.156003][T13114] lo speed is unknown, defaulting to 1000 [ 285.313217][T13135] netlink: 'syz.1.3524': attribute type 6 has an invalid length. [ 285.375971][T13139] tipc: Enabling of bearer rejected, already enabled [ 285.387944][T13143] netlink: 'syz.0.3527': attribute type 1 has an invalid length. [ 285.409184][T13143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.435104][T13143] bond4: (slave veth9): Enslaving as an active interface with a down link [ 285.454958][T13143] vlan1: entered allmulticast mode [ 285.460131][T13143] veth0_to_bond: entered allmulticast mode [ 285.466543][T13143] bond4: (slave vlan1): Opening slave failed [ 285.560413][T13146] lo speed is unknown, defaulting to 1000 [ 285.670326][T13157] macsec0: entered promiscuous mode [ 286.518868][T13116] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.536416][T13170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3535'. [ 287.101753][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.134504][T13182] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 287.163851][T13182] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 287.182704][T13182] veth5: entered promiscuous mode [ 287.189564][T13182] bond8: (slave veth5): Enslaving as a backup interface with a down link [ 287.286539][T13191] loop3: detected capacity change from 0 to 512 [ 287.323428][T13191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.348621][T13191] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3542: corrupted inode contents [ 287.365203][T13191] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz.3.3542: mark_inode_dirty error [ 287.379857][T13191] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #2: comm syz.3.3542: corrupted inode contents [ 287.400502][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 287.400519][ T29] audit: type=1400 audit(543.368:20527): avc: denied { listen } for pid=13201 comm="syz.1.3545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 287.401231][T13191] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3542: mark_inode_dirty error [ 287.455386][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3546'. [ 287.473464][ T29] audit: type=1400 audit(543.438:20528): avc: denied { rename } for pid=13190 comm="syz.3.3542" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 287.508661][ T29] audit: type=1400 audit(543.448:20529): avc: denied { create } for pid=13208 comm="syz.0.3550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 287.536201][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.552498][T13116] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.571995][ T29] audit: type=1326 audit(543.538:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 287.595226][ T29] audit: type=1326 audit(543.538:20531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 287.618293][ T29] audit: type=1326 audit(543.538:20532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 287.641327][ T29] audit: type=1326 audit(543.538:20533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 287.664337][ T29] audit: type=1326 audit(543.538:20534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 287.687439][ T29] audit: type=1326 audit(543.538:20535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 287.710474][ T29] audit: type=1326 audit(543.538:20536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13216 comm="syz.1.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 287.773699][T13116] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.833222][ T3682] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.849787][ T3682] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.875929][ T3682] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.896580][ T3682] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.928201][T13219] lo speed is unknown, defaulting to 1000 [ 288.145338][T13233] lo speed is unknown, defaulting to 1000 [ 288.503157][T13248] lo speed is unknown, defaulting to 1000 [ 288.615807][T13265] 9pnet_fd: Insufficient options for proto=fd [ 288.642759][T13269] netlink: 'syz.1.3566': attribute type 13 has an invalid length. [ 289.662020][T13303] loop3: detected capacity change from 0 to 512 [ 289.669622][T13303] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.688923][T13303] EXT4-fs (loop3): 1 truncate cleaned up [ 289.702238][T13303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.716070][T13303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.729473][T13307] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.773343][T13307] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.823311][T13307] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.873615][T13307] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.986973][ T3630] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.998328][ T3630] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.010425][ T3616] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.022074][ T3616] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.061770][T13312] loop8: detected capacity change from 0 to 512 [ 292.203940][T13312] EXT4-fs (loop8): orphan cleanup on readonly fs [ 292.219743][T13312] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3582: bg 0: block 248: padding at end of block bitmap is not set [ 292.239247][T13312] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3582: Failed to acquire dquot type 1 [ 292.252680][T13312] EXT4-fs (loop8): 1 truncate cleaned up [ 292.259715][T13312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.403917][T13312] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 292.469455][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 292.469472][ T29] audit: type=1326 audit(548.438:20604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.8.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816891ebe9 code=0x7ffc0000 [ 292.515607][T13326] netlink: 'syz.8.3582': attribute type 13 has an invalid length. [ 292.558598][T13312] EXT4-fs warning (device loop8): read_mmp_block:115: Error -117 while reading MMP block 0 [ 292.709926][ T29] audit: type=1326 audit(548.478:20605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.8.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f816891ebe9 code=0x7ffc0000 [ 292.732917][ T29] audit: type=1326 audit(548.478:20606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.8.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816891ebe9 code=0x7ffc0000 [ 292.755903][ T29] audit: type=1326 audit(548.478:20607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.8.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f816891ebe9 code=0x7ffc0000 [ 292.778869][ T29] audit: type=1326 audit(548.478:20608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.8.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f816891ebe9 code=0x7ffc0000 [ 292.802007][ T29] audit: type=1326 audit(548.488:20609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.8.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f816891ebe9 code=0x7ffc0000 [ 292.829222][ T29] audit: type=1400 audit(548.798:20610): avc: denied { mount } for pid=13314 comm="syz.1.3585" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 292.851571][T13327] netlink: 'syz.7.3586': attribute type 6 has an invalid length. [ 292.864276][T13326] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.871528][T13326] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.034984][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.062661][T13326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.134723][ T51] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.144978][ T51] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.154378][ T51] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.168003][T12952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.180574][ T29] audit: type=1400 audit(549.138:20611): avc: denied { unmount } for pid=12952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 293.202098][ T51] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.212345][ T29] audit: type=1400 audit(549.158:20612): avc: denied { create } for pid=13338 comm="syz.3.3589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 293.231538][ T29] audit: type=1400 audit(549.178:20613): avc: denied { create } for pid=13334 comm="syz.7.3590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.314714][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3590'. [ 293.562815][T13346] loop8: detected capacity change from 0 to 512 [ 293.602111][T13346] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.619775][T13346] EXT4-fs (loop8): mount failed [ 293.695161][T13357] loop3: detected capacity change from 0 to 8192 [ 293.742039][T13357] loop3: p1 p2 p3 p4 [ 293.756873][T13357] loop3: p2 start 151000334 is beyond EOD, truncated [ 293.763771][T13357] loop3: p3 start 331777 is beyond EOD, truncated [ 293.770232][T13357] loop3: p4 size 263168 extends beyond EOD, truncated [ 293.833062][T13373] loop8: detected capacity change from 0 to 164 [ 294.371526][T13373] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 294.398203][T13373] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3597'. [ 294.412049][T13384] loop7: detected capacity change from 0 to 16384 [ 294.432142][T13386] syzkaller0: entered promiscuous mode [ 294.437755][T13386] syzkaller0: entered allmulticast mode [ 294.460366][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3604'. [ 294.470261][T13388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3604'. [ 294.563114][T13393] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 294.591974][T13395] loop3: detected capacity change from 0 to 2048 [ 294.775632][T13395] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.852153][T13411] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3606: bg 0: block 120: padding at end of block bitmap is not set [ 295.036657][T13413] lo speed is unknown, defaulting to 1000 [ 295.435706][ T3316] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 296.679731][T13430] loop3: detected capacity change from 0 to 512 [ 296.704837][T13430] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 296.714019][T13430] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 296.746232][T13430] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 296.766552][T13430] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 296.798718][T13430] System zones: 0-2, 18-18, 34-35 [ 296.816986][T13430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.189323][T13442] 9pnet_fd: Insufficient options for proto=fd [ 297.340515][T13447] netlink: 'syz.0.3625': attribute type 29 has an invalid length. [ 297.376661][T13447] netlink: 'syz.0.3625': attribute type 29 has an invalid length. [ 297.499282][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 297.499301][ T29] audit: type=1400 audit(553.468:20770): avc: denied { unlink } for pid=7007 comm="syz-executor" name="file0" dev="tmpfs" ino=2405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 297.621548][T13456] netlink: 'syz.0.3627': attribute type 13 has an invalid length. [ 297.656142][ T29] audit: type=1326 audit(553.518:20771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 297.679316][ T29] audit: type=1326 audit(553.518:20772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 297.702340][ T29] audit: type=1326 audit(553.608:20773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 297.725378][ T29] audit: type=1326 audit(553.608:20774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 297.748640][ T29] audit: type=1326 audit(553.608:20775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.0.3627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 297.778184][T13454] : renamed from vlan0 [ 297.829373][T13460] macsec1: entered promiscuous mode [ 297.834964][T13460] bridge0: port 1(macsec1) entered blocking state [ 297.841443][T13460] bridge0: port 1(macsec1) entered disabled state [ 297.848041][T13460] macsec1: entered allmulticast mode [ 297.853368][T13460] bridge0: entered allmulticast mode [ 297.859153][T13460] macsec1: left allmulticast mode [ 297.864236][T13460] bridge0: left allmulticast mode [ 297.931645][ T29] audit: type=1400 audit(553.858:20776): avc: denied { create } for pid=13458 comm="syz.1.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 297.950908][ T29] audit: type=1400 audit(553.868:20777): avc: denied { write } for pid=13458 comm="syz.1.3630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 298.452646][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.479449][ T29] audit: type=1400 audit(554.448:20778): avc: denied { mounton } for pid=13471 comm="syz.7.3635" path="/449/file0" dev="tmpfs" ino=2416 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 298.521648][ T29] audit: type=1400 audit(554.458:20779): avc: denied { mount } for pid=13471 comm="syz.7.3635" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 298.757496][T13480] netlink: 'syz.3.3637': attribute type 4 has an invalid length. [ 298.769105][T13482] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3638'. [ 298.785769][T13480] netlink: 'syz.3.3637': attribute type 4 has an invalid length. [ 300.189477][T13533] loop8: detected capacity change from 0 to 2048 [ 300.191746][T13532] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3655'. [ 300.272567][T13533] EXT4-fs (loop8): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.374734][T13541] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3654: bg 0: block 120: padding at end of block bitmap is not set [ 300.422242][T13543] loop3: detected capacity change from 0 to 164 [ 300.440626][T13543] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 300.483608][T13543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3657'. [ 300.574408][T13548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3659'. [ 300.593269][T13548] IPVS: Unknown mcast interface: vcan0 [ 300.641602][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3661'. [ 300.817596][T13550] lo speed is unknown, defaulting to 1000 [ 300.990258][T12952] EXT4-fs (loop8): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 301.011173][T13571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3669'. [ 301.221368][T13575] lo speed is unknown, defaulting to 1000 [ 301.427245][T13577] loop8: detected capacity change from 0 to 512 [ 301.509260][T13577] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.577892][T13583] netlink: 'syz.0.3680': attribute type 4 has an invalid length. [ 301.591638][T13583] netlink: 'syz.0.3680': attribute type 4 has an invalid length. [ 301.602289][ T4263] lo speed is unknown, defaulting to 1000 [ 301.608077][ T4263] syz0: Port: 1 Link ACTIVE [ 301.683187][T13593] tipc: Enabling of bearer rejected, already enabled [ 301.768645][T13596] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.3673'. [ 302.175959][T13611] netlink: 'syz.7.3682': attribute type 1 has an invalid length. [ 302.195209][T13611] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 302.206767][T13611] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 302.245535][T13613] gretap1: entered promiscuous mode [ 302.252490][T13613] bond2: (slave gretap1): making interface the new active one [ 302.260319][T13613] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 302.278846][T13611] macvlan2: entered promiscuous mode [ 302.284230][T13611] macvlan2: entered allmulticast mode [ 302.290181][T13611] bond2: entered promiscuous mode [ 302.295707][T13611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 302.306197][T13611] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 302.318250][T13611] bond2: left promiscuous mode [ 302.403011][T13615] netlink: 'syz.7.3683': attribute type 4 has an invalid length. [ 302.418972][T13615] netlink: 'syz.7.3683': attribute type 4 has an invalid length. [ 303.942247][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 303.942261][ T29] audit: type=1326 audit(559.918:20960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 303.972196][ T29] audit: type=1326 audit(559.948:20961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 303.995338][ T29] audit: type=1326 audit(559.948:20962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.018425][ T29] audit: type=1326 audit(559.948:20963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.049620][ T29] audit: type=1326 audit(559.958:20964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.072653][ T29] audit: type=1326 audit(559.958:20965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.095858][ T29] audit: type=1326 audit(559.958:20966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.143347][T13645] loop3: detected capacity change from 0 to 2048 [ 304.160222][T12952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.163866][ T29] audit: type=1326 audit(560.078:20967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.192223][ T29] audit: type=1326 audit(560.078:20968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.215250][ T29] audit: type=1326 audit(560.078:20969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13641 comm="syz.0.3691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 304.244707][T13645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.286142][T13640] lo speed is unknown, defaulting to 1000 [ 304.683827][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.930124][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3705'. [ 305.021282][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3705'. [ 305.023829][T13681] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 305.081400][T13684] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3703'. [ 305.090619][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3703'. [ 307.063267][T13725] netlink: 'syz.7.3719': attribute type 5 has an invalid length. [ 307.486779][T13733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3721'. [ 307.515605][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3721'. [ 307.531377][T13739] pim6reg1: entered promiscuous mode [ 307.536728][T13739] pim6reg1: entered allmulticast mode [ 307.919026][T13757] syzkaller0: entered promiscuous mode [ 307.924715][T13757] syzkaller0: entered allmulticast mode [ 308.019292][T13761] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3735'. [ 308.038092][T13761] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13761 comm=syz.8.3735 [ 308.221405][T13764] lo speed is unknown, defaulting to 1000 [ 309.042862][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 309.049100][ T29] audit: type=1400 audit(565.018:21082): avc: denied { block_suspend } for pid=13767 comm="syz.8.3737" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 309.747602][T13766] lo speed is unknown, defaulting to 1000 [ 309.816527][T13773] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 309.912131][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'. [ 309.953923][T13780] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.967477][ T29] audit: type=1326 audit(565.788:21083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 309.990632][ T29] audit: type=1326 audit(565.788:21084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.013892][ T29] audit: type=1326 audit(565.788:21085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.037119][ T29] audit: type=1326 audit(565.788:21086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.060119][ T29] audit: type=1326 audit(565.788:21087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.083267][ T29] audit: type=1326 audit(565.788:21088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.106467][ T29] audit: type=1326 audit(565.788:21089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.129673][ T29] audit: type=1326 audit(565.788:21090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.152652][ T29] audit: type=1326 audit(565.788:21091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13772 comm="syz.0.3739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 310.177263][T13780] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 310.299548][T13795] netlink: 'syz.0.3758': attribute type 4 has an invalid length. [ 310.314328][ T4243] lo speed is unknown, defaulting to 1000 [ 310.320486][ T4243] syz0: Port: 1 Link DOWN [ 310.327584][T13795] netlink: 'syz.0.3758': attribute type 4 has an invalid length. [ 310.347441][ T4276] lo speed is unknown, defaulting to 1000 [ 310.353263][ T4276] syz0: Port: 1 Link ACTIVE [ 311.074740][T13816] netlink: 'syz.7.3756': attribute type 10 has an invalid length. [ 311.090766][T13816] dummy0: left promiscuous mode [ 311.288782][T13827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3755'. [ 311.312486][T13827] netem: change failed [ 311.581144][T13849] netlink: 'syz.3.3769': attribute type 4 has an invalid length. [ 311.604142][T13849] netlink: 'syz.3.3769': attribute type 4 has an invalid length. [ 311.985666][T13866] loop8: detected capacity change from 0 to 512 [ 311.993279][T13866] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 312.003496][T13866] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.3775: iget: bad i_size value: 360287970189639680 [ 312.020138][T13866] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3775: couldn't read orphan inode 15 (err -117) [ 312.044020][T13866] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.074367][T13866] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 312.095148][T13866] EXT4-fs error (device loop8): ext4_find_dest_de:2052: inode #2: block 3: comm syz.8.3775: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 312.148561][T13876] netlink: 'syz.0.3777': attribute type 10 has an invalid length. [ 312.240396][T12952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.448973][T13895] netlink: 'syz.7.3785': attribute type 1 has an invalid length. [ 312.505749][T13895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.643063][T13906] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3780'. [ 312.665909][T13895] veth9: entered promiscuous mode [ 312.700881][T13895] bond3: (slave veth9): Enslaving as an active interface with a down link [ 312.719907][T13900] erspan0: entered allmulticast mode [ 312.733002][T13900] bond3: (slave erspan0): making interface the new active one [ 312.752052][T13900] erspan0: entered promiscuous mode [ 312.760925][T13900] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 312.794874][T13908] tipc: Started in network mode [ 312.799892][T13908] tipc: Node identity ac14140f, cluster identity 4711 [ 312.807527][T13908] tipc: New replicast peer: 255.255.255.83 [ 312.813586][T13908] tipc: Enabled bearer , priority 10 [ 312.970019][T13913] xt_policy: too many policy elements [ 313.148660][T13921] netlink: 'syz.0.3793': attribute type 13 has an invalid length. [ 313.151809][T13918] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3792'. [ 313.181511][ T4263] lo speed is unknown, defaulting to 1000 [ 313.187335][ T4263] syz0: Port: 1 Link DOWN [ 313.416198][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3798'. [ 313.451376][T13933] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 313.474064][T13933] team0: entered promiscuous mode [ 313.479142][T13933] team0: entered allmulticast mode [ 313.941005][ T4240] tipc: Node number set to 2886997007 [ 314.254307][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 314.254326][ T29] audit: type=1400 audit(570.224:21210): avc: denied { create } for pid=13954 comm="syz.3.3806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 314.299780][ T29] audit: type=1400 audit(570.274:21211): avc: denied { name_bind } for pid=13956 comm="syz.0.3807" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 314.324057][ T29] audit: type=1400 audit(570.294:21212): avc: denied { bind } for pid=13958 comm="syz.3.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.343040][ T29] audit: type=1400 audit(570.294:21213): avc: denied { listen } for pid=13958 comm="syz.3.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.417988][ T29] audit: type=1400 audit(570.355:21214): avc: denied { accept } for pid=13958 comm="syz.3.3808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.437144][ T29] audit: type=1400 audit(570.385:21215): avc: denied { watch_reads } for pid=13960 comm="syz.8.3809" path="/34" dev="tmpfs" ino=197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 314.459397][ T29] audit: type=1326 audit(570.385:21216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 314.482563][ T29] audit: type=1326 audit(570.385:21217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 314.505564][ T29] audit: type=1326 audit(570.385:21218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 314.528745][ T29] audit: type=1326 audit(570.385:21219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13963 comm="syz.1.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 314.579086][T13971] netlink: zone id is out of range [ 314.589831][T13971] netlink: zone id is out of range [ 314.601661][T13971] netlink: zone id is out of range [ 314.606997][T13971] netlink: zone id is out of range [ 314.619339][T13971] netlink: zone id is out of range [ 314.630319][T13971] netlink: zone id is out of range [ 314.641062][T13971] netlink: zone id is out of range [ 314.655898][T13971] netlink: zone id is out of range [ 314.670706][T13971] netlink: zone id is out of range [ 314.709657][T13981] netlink: 'syz.7.3816': attribute type 1 has an invalid length. [ 314.736015][T13981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.748224][T13986] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3818'. [ 314.757348][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3816'. [ 314.789480][T13981] bond4 (unregistering): Released all slaves [ 316.334898][T14008] netlink: 5 bytes leftover after parsing attributes in process `syz.7.3826'. [ 316.345621][ T4240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=4240 comm=kworker/0:5 [ 316.358946][T14008] 0{X: renamed from gretap0 [ 316.364542][T14003] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 316.374720][T14008] 0{X: entered allmulticast mode [ 317.100254][T14008] net_ratelimit: 2 callbacks suppressed [ 317.100274][T14008] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 317.579227][T14021] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3832'. [ 317.605711][T14018] vhci_hcd: invalid port number 96 [ 317.610889][T14018] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 317.694713][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'. [ 318.090409][T14042] lo speed is unknown, defaulting to 1000 [ 318.336009][T14049] netlink: 'syz.7.3842': attribute type 4 has an invalid length. [ 318.364412][T14049] netlink: 'syz.7.3842': attribute type 4 has an invalid length. [ 318.389547][T14051] loop8: detected capacity change from 0 to 8192 [ 319.390669][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 319.390686][ T29] audit: type=1400 audit(575.392:21234): avc: denied { create } for pid=14068 comm="syz.8.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 319.475925][ T29] audit: type=1400 audit(575.473:21235): avc: denied { read write } for pid=14073 comm="syz.8.3861" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 319.496694][ T29] audit: type=1400 audit(575.473:21236): avc: denied { open } for pid=14073 comm="syz.8.3861" path="/46/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 319.545170][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 319.559552][T14077] dummy0: left allmulticast mode [ 319.564644][T14077] bridge0: port 4(dummy0) entered disabled state [ 319.590370][T14077] 0{X: left allmulticast mode [ 319.595793][T14077] bridge0: port 3(30{X) entered disabled state [ 319.608089][T14077] bridge_slave_1: left allmulticast mode [ 319.609315][ T29] audit: type=1400 audit(575.533:21237): avc: denied { unmount } for pid=12952 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 319.614115][T14077] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.665564][ T29] audit: type=1326 audit(575.674:21238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 319.688712][ T29] audit: type=1326 audit(575.674:21239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 319.711927][ T29] audit: type=1326 audit(575.674:21240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 319.734959][ T29] audit: type=1326 audit(575.674:21241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 319.739853][T14089] loop8: detected capacity change from 0 to 128 [ 319.758101][ T29] audit: type=1326 audit(575.674:21242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 319.787273][ T29] audit: type=1326 audit(575.674:21243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14086 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 319.828464][T14077] bridge_slave_0: left allmulticast mode [ 319.834366][T14077] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.887989][T14080] netlink: 'syz.3.3847': attribute type 3 has an invalid length. [ 319.895887][T14080] netlink: 'syz.3.3847': attribute type 3 has an invalid length. [ 319.926780][T14080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3847'. [ 319.958372][T14093] syz.8.3855: attempt to access beyond end of device [ 319.958372][T14093] loop8: rw=0, sector=121, nr_sectors = 120 limit=128 [ 320.105112][T14089] lo speed is unknown, defaulting to 1000 [ 320.274609][ T3630] kworker/u8:27: attempt to access beyond end of device [ 320.274609][ T3630] loop8: rw=1, sector=241, nr_sectors = 800 limit=128 [ 320.395302][T14105] loop8: detected capacity change from 0 to 2048 [ 320.442743][T14105] EXT4-fs (loop8): failed to initialize system zone (-117) [ 320.460446][T14105] EXT4-fs (loop8): mount failed [ 320.581251][T14111] infiniband syz2: set down [ 320.585924][T14111] infiniband syz2: added bond_slave_0 [ 320.616989][T14111] RDS/IB: syz2: added [ 320.631757][T14111] smc: adding ib device syz2 with port count 1 [ 320.638036][T14111] smc: ib device syz2 port 1 has pnetid [ 320.816925][T14121] loop8: detected capacity change from 0 to 512 [ 320.836282][T14121] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 320.859174][T14121] EXT4-fs (loop8): 1 truncate cleaned up [ 320.873242][T14121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.921187][T14121] netlink: 'syz.8.3875': attribute type 4 has an invalid length. [ 320.972672][T14127] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3866'. [ 321.004874][T12952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.104396][T14133] netlink: 'syz.3.3869': attribute type 1 has an invalid length. [ 321.155454][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3869'. [ 321.187284][T14133] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.213404][T14136] bond10 (unregistering): Released all slaves [ 322.164014][T14177] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3886'. [ 322.524115][T14194] loop8: detected capacity change from 0 to 1024 [ 322.531074][T14194] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 322.975544][T14198] netlink: 'syz.3.3892': attribute type 3 has an invalid length. [ 322.990856][T14202] netlink: 'syz.7.3893': attribute type 83 has an invalid length. [ 323.031830][T14206] netlink: 'syz.3.3895': attribute type 1 has an invalid length. [ 323.046849][T14206] 8021q: adding VLAN 0 to HW filter on device bond10 [ 323.066176][T14206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.075790][T14206] bond10: (slave batadv0): making interface the new active one [ 323.112693][T14206] bond10: (slave batadv0): Enslaving as an active interface with an up link [ 323.271360][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3898'. [ 323.831784][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3905'. [ 324.363891][T14249] netlink: 'syz.1.3911': attribute type 1 has an invalid length. [ 324.378389][T14249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.391949][T14249] 8021q: adding VLAN 0 to HW filter on device bond5 [ 324.399438][T14249] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 324.411349][T14249] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 324.442179][T14251] macvlan0: entered promiscuous mode [ 324.448092][T14251] bond5: entered promiscuous mode [ 324.453650][T14251] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 324.462058][T14251] bond5: left promiscuous mode [ 324.784836][T14260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3915'. [ 324.824694][T14260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3915'. [ 324.992934][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3918'. [ 325.081497][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 325.081513][ T29] audit: type=1400 audit(581.122:21313): avc: denied { setopt } for pid=14274 comm="syz.8.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.201915][ T29] audit: type=1400 audit(581.253:21314): avc: denied { map } for pid=14280 comm="syz.8.3923" path="socket:[51605]" dev="sockfs" ino=51605 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 325.849266][ T3602] erspan0: left promiscuous mode [ 325.962398][ T29] audit: type=1400 audit(582.018:21315): avc: denied { mounton } for pid=14290 comm="syz.7.3927" path="/511/file0" dev="tmpfs" ino=2738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 326.026984][ T29] audit: type=1400 audit(582.088:21316): avc: denied { setattr } for pid=14290 comm="syz.7.3927" name="file0" dev="tmpfs" ino=2738 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 326.086268][T14295] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3928'. [ 326.105918][ T29] audit: type=1400 audit(582.169:21317): avc: denied { connect } for pid=14285 comm="syz.3.3926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 326.343379][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3928'. [ 332.902198][T14316] SELinux: Context system_u:object_r:tun_tap_device_t:s0 is not valid (left unmapped). [ 332.902927][ T29] audit: type=1400 audit(588.990:21318): avc: denied { relabelfrom } for pid=14315 comm="syz.7.3935" name="NETLINK" dev="sockfs" ino=51641 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 332.936008][ T29] audit: type=1400 audit(588.990:21319): avc: denied { mac_admin } for pid=14315 comm="syz.7.3935" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 332.937126][T14316] netlink: 'syz.7.3935': attribute type 49 has an invalid length. [ 332.967596][ T29] audit: type=1400 audit(589.010:21320): avc: denied { relabelto } for pid=14315 comm="syz.7.3935" name="NETLINK" dev="sockfs" ino=51641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:tun_tap_device_t:s0" [ 333.103471][ T29] audit: type=1326 audit(589.131:21321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 333.126672][ T29] audit: type=1326 audit(589.131:21322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 333.149665][ T29] audit: type=1326 audit(589.131:21323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 333.172822][ T29] audit: type=1326 audit(589.131:21324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 333.195864][ T29] audit: type=1326 audit(589.131:21325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 333.218899][ T29] audit: type=1326 audit(589.131:21326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 333.241937][ T29] audit: type=1326 audit(589.131:21327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.0.3936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4106a4ebe9 code=0x7ffc0000 [ 333.256257][T14322] netlink: 'syz.8.3934': attribute type 21 has an invalid length. [ 333.282753][T14312] loop8: detected capacity change from 0 to 32768 [ 333.350615][T14312] loop8: p1 p3 < > [ 333.409534][T14340] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3942'. [ 333.439124][T14340] bond4: entered promiscuous mode [ 333.444411][T14340] bond4: entered allmulticast mode [ 333.454595][T14340] 8021q: adding VLAN 0 to HW filter on device bond4 [ 333.465133][T14340] bond4 (unregistering): Released all slaves [ 333.622525][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3946'. [ 333.739152][T14352] cgroup: cgroup_addrm_files: failed to add weight, err=-12 [ 333.791815][T14356] netlink: 'syz.8.3947': attribute type 4 has an invalid length. [ 333.848110][T14356] netlink: 'syz.8.3947': attribute type 4 has an invalid length. [ 333.873714][T14359] bond0: (slave ip6gretap1): Releasing backup interface [ 333.880804][T14359] bond0: (slave ip6gretap1): the permanent HWaddr of slave - 36:16:4c:cd:d2:57 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 333.921663][T14362] netlink: 'syz.1.3950': attribute type 10 has an invalid length. [ 333.929621][T14362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3950'. [ 333.945154][T14359] bond0: (slave veth23): Releasing backup interface [ 333.959368][T14359] bond4: (slave veth25): Releasing active interface [ 334.019517][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 334.046298][T14365] team0: entered promiscuous mode [ 334.051510][T14365] team0: entered allmulticast mode [ 334.202255][T14372] block device autoloading is deprecated and will be removed. [ 334.499863][T14381] netlink: 'syz.8.3959': attribute type 13 has an invalid length. [ 334.507870][T14381] netlink: 'syz.8.3959': attribute type 17 has an invalid length. [ 334.540477][T14386] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3961'. [ 334.562613][T14381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.584740][T14381] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.618854][T14381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.736098][T14399] netlink: 'syz.7.3964': attribute type 10 has an invalid length. [ 334.744118][T14399] netlink: 55 bytes leftover after parsing attributes in process `syz.7.3964'. [ 334.843679][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3969'. [ 334.852707][T14405] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3969'. [ 334.923696][T14411] bond3: (slave erspan0): Releasing active interface [ 334.946937][T14411] bond0: (slave ip6gretap1): Releasing backup interface [ 334.953994][T14411] bond0: (slave ip6gretap1): the permanent HWaddr of slave - 7a:09:04:e6:a4:ec - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 334.979786][T14411] bond0: (slave veth7): Releasing backup interface [ 334.998202][T14411] bond2: (slave gretap1): Releasing active interface [ 335.007895][T14411] bond3: (slave veth9): Releasing active interface [ 335.067313][T14423] serio: Serial port ptm0 [ 335.181404][T14427] raw_sendmsg: syz.8.3975 forgot to set AF_INET. Fix it! [ 335.423865][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3979'. [ 336.301596][T14448] loop3: detected capacity change from 0 to 512 [ 336.312730][T14449] macvlan1: entered promiscuous mode [ 336.320296][T14449] ipvlan0: entered promiscuous mode [ 336.329010][T14448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.342674][T14449] ipvlan0: left promiscuous mode [ 336.348888][T14449] macvlan1: left promiscuous mode [ 336.380754][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.108144][T14460] loop8: detected capacity change from 0 to 2048 [ 337.154402][T14460] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 337.179396][T14460] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 337.696522][T14496] tipc: Enabling of bearer rejected, already enabled [ 337.727216][T14501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3999'. [ 338.242744][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 338.242777][ T29] audit: type=1400 audit(594.340:21544): avc: denied { open } for pid=14509 comm="syz.7.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 338.267896][ T29] audit: type=1400 audit(594.340:21545): avc: denied { kernel } for pid=14509 comm="syz.7.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 338.287023][ T29] audit: type=1400 audit(594.340:21546): avc: denied { tracepoint } for pid=14509 comm="syz.7.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 338.680389][ T29] audit: type=1400 audit(594.793:21547): avc: denied { create } for pid=14513 comm="syz.7.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.699673][ T29] audit: type=1400 audit(594.803:21548): avc: denied { setopt } for pid=14513 comm="syz.7.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.719566][ T29] audit: type=1400 audit(594.803:21549): avc: denied { write } for pid=14513 comm="syz.7.4006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.880460][ T29] audit: type=1400 audit(595.014:21550): avc: denied { read } for pid=14520 comm="syz.8.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.991780][ T29] audit: type=1400 audit(595.124:21551): avc: denied { create } for pid=14520 comm="syz.8.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 339.058465][ T29] audit: type=1400 audit(595.124:21552): avc: denied { create } for pid=14520 comm="syz.8.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 339.078810][ T29] audit: type=1400 audit(595.124:21553): avc: denied { write } for pid=14520 comm="syz.8.4009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 340.428385][T14557] loop3: detected capacity change from 0 to 512 [ 340.454093][T14557] EXT4-fs (loop3): too many log groups per flexible block group [ 340.461962][T14557] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 340.469653][T14557] EXT4-fs (loop3): mount failed [ 340.608182][T14571] tipc: Enabling of bearer rejected, failed to enable media [ 340.712579][ T3630] syzkaller0: tun_net_xmit 76 [ 340.717413][ T3630] syzkaller0: tun_net_xmit 48 [ 340.739738][ T4243] syzkaller0: tun_net_xmit 76 [ 340.782963][T14578] syzkaller0: create flow: hash 133719953 index 2 [ 340.805480][T14578] syzkaller0: delete flow: hash 133719953 index 2 [ 341.305327][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4029'. [ 341.523930][T14588] lo speed is unknown, defaulting to 1000 [ 341.602081][T14600] netlink: zone id is out of range [ 341.608614][T14600] netlink: zone id is out of range [ 341.614588][T14600] netlink: zone id is out of range [ 341.619778][T14600] netlink: zone id is out of range [ 341.626416][T14600] netlink: zone id is out of range [ 341.631681][T14600] netlink: zone id is out of range [ 341.637120][T14600] netlink: zone id is out of range [ 341.642369][T14600] netlink: zone id is out of range [ 341.648273][T14600] netlink: zone id is out of range [ 341.653502][T14600] netlink: zone id is out of range [ 341.874843][T14612] xfrm0: left promiscuous mode [ 342.430632][T14623] tipc: New replicast peer: 10.1.1.2 [ 342.436263][T14623] tipc: Enabled bearer , priority 10 [ 342.484525][T14629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4039'. [ 342.572708][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4040'. [ 342.581707][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4040'. [ 342.632954][T14625] lo speed is unknown, defaulting to 1000 [ 342.742936][T14640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4044'. [ 342.906462][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4055'. [ 342.985519][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4066'. [ 342.994694][T14664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4066'. [ 343.003753][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4066'. [ 343.019115][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4066'. [ 343.057093][T14670] netlink: 'syz.3.4059': attribute type 13 has an invalid length. [ 343.085010][T14670] 8021q: adding VLAN 0 to HW filter on device  [ 343.158295][T14675] loop3: detected capacity change from 0 to 128 [ 343.166172][T14675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 343.174248][T14675] System zones: 1-3, 19-19, 35-36 [ 343.180115][T14675] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 343.197027][T14675] EXT4-fs (loop3): shut down requested (0) [ 343.224559][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 343.267229][T14682] loop3: detected capacity change from 0 to 2048 [ 343.274404][T14682] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 343.293634][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 343.293649][ T29] audit: type=1400 audit(599.446:21626): avc: denied { create } for pid=14681 comm="syz.3.4063" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 343.320792][T14682] SELinux: security_context_str_to_sid (=S|1rWiM!Oj4~1c3FfX50X2kcm?'wC) failed with errno=-22 [ 343.336135][ T29] audit: type=1400 audit(599.476:21627): avc: denied { mounton } for pid=14681 comm="syz.3.4063" path="/778/file0" dev="tmpfs" ino=4141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 343.422259][T14686] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 343.424160][ T29] audit: type=1326 audit(599.527:21628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.454982][ T29] audit: type=1326 audit(599.527:21629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.478055][ T29] audit: type=1326 audit(599.527:21630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.501241][ T29] audit: type=1326 audit(599.527:21631): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.524776][ T29] audit: type=1326 audit(599.527:21632): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.548270][ T29] audit: type=1326 audit(599.527:21633): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.571742][ T29] audit: type=1326 audit(599.527:21634): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.595358][ T29] audit: type=1326 audit(599.527:21635): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14681 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb12809ebe9 code=0x7ffc0000 [ 343.753407][T14694] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14694 comm=syz.0.4069 [ 344.147544][T14703] tipc: New replicast peer: 255.255.255.83 [ 344.153491][T14703] tipc: Enabled bearer , priority 10 [ 344.271420][T14709] netlink: 'syz.7.4074': attribute type 4 has an invalid length. [ 344.303076][T14709] netlink: 'syz.7.4074': attribute type 4 has an invalid length. [ 346.144293][T14767] SELinux: security_context_str_to_sid () failed with errno=-22 [ 346.234043][T14767] loop8: detected capacity change from 0 to 2048 [ 346.240729][T14767] EXT4-fs: Ignoring removed bh option [ 346.263712][T14767] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.295390][T14767] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 346.327086][T14767] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 346.339556][T14767] EXT4-fs (loop8): This should not happen!! Data will be lost [ 346.339556][T14767] [ 346.349244][T14767] EXT4-fs (loop8): Total free blocks count 0 [ 346.355366][T14767] EXT4-fs (loop8): Free/Dirty block details [ 346.361274][T14767] EXT4-fs (loop8): free_blocks=2415919104 [ 346.367047][T14767] EXT4-fs (loop8): dirty_blocks=64 [ 346.372251][T14767] EXT4-fs (loop8): Block reservation details [ 346.378238][T14767] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 346.502585][ T3611] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 346.604950][T14788] netlink: 'syz.0.4101': attribute type 4 has an invalid length. [ 346.624746][T14788] netlink: 'syz.0.4101': attribute type 4 has an invalid length. [ 346.652580][ T4243] lo speed is unknown, defaulting to 1000 [ 346.658390][ T4243] syz0: Port: 1 Link ACTIVE [ 346.766824][ T4240] lo speed is unknown, defaulting to 1000 [ 346.772641][ T4240] syz0: Port: 1 Link DOWN [ 346.818684][T14800] __nla_validate_parse: 4 callbacks suppressed [ 346.818724][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4103'. [ 346.968204][T14805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4104'. [ 346.995008][T14805] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14805 comm=syz.0.4104 [ 347.052370][T14809] veth0: entered promiscuous mode [ 347.057966][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'. [ 347.068279][T14809] veth0 (unregistering): left promiscuous mode [ 347.088257][T14809] bond0: (slave veth1): Releasing backup interface [ 347.309971][T14816] tipc: Enabling of bearer rejected, failed to enable media [ 347.652646][T14834] vlan0: entered promiscuous mode [ 347.657921][T14834] vlan0: entered allmulticast mode [ 347.663197][T14834] hsr_slave_1: entered allmulticast mode [ 347.696942][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4118'. [ 347.932646][T14839] loop3: detected capacity change from 0 to 2048 [ 347.945751][T14839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.981176][T14845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4122'. [ 347.992673][T14845] bridge0: entered promiscuous mode [ 347.998472][T14845] bridge0: port 1(macvlan0) entered blocking state [ 348.005072][T14845] bridge0: port 1(macvlan0) entered disabled state [ 348.011815][T14845] macvlan0: entered allmulticast mode [ 348.017230][T14845] bridge0: entered allmulticast mode [ 348.020879][T14846] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4120'. [ 348.031926][T14845] macvlan0: left allmulticast mode [ 348.037225][T14845] bridge0: left allmulticast mode [ 348.043557][T14845] bridge0: left promiscuous mode [ 348.104970][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4123'. [ 348.114437][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4123'. [ 348.286595][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 348.286634][ T29] audit: type=1326 audit(604.460:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.0.4125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4106a4ebe9 code=0x0 [ 348.442558][T14861] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4126'. [ 348.774795][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.822439][ T29] audit: type=1400 audit(605.003:21783): avc: denied { unmount } for pid=14868 comm="syz.3.4129" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 348.942843][ T29] audit: type=1400 audit(605.123:21784): avc: denied { read } for pid=14870 comm="syz.3.4130" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 348.966180][ T29] audit: type=1400 audit(605.123:21785): avc: denied { open } for pid=14870 comm="syz.3.4130" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 349.025590][ T29] audit: type=1400 audit(605.153:21786): avc: denied { ioctl } for pid=14870 comm="syz.3.4130" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 349.065473][T14874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4131'. [ 349.105518][ T29] audit: type=1400 audit(605.284:21787): avc: denied { bind } for pid=14875 comm="syz.3.4132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.135018][ T29] audit: type=1400 audit(605.284:21788): avc: denied { write } for pid=14875 comm="syz.3.4132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.154050][ T29] audit: type=1400 audit(605.314:21789): avc: denied { ioctl } for pid=14875 comm="syz.3.4132" path="socket:[53556]" dev="sockfs" ino=53556 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.208159][ T29] audit: type=1400 audit(605.384:21790): avc: denied { setopt } for pid=14875 comm="syz.3.4132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 349.241587][ T29] audit: type=1400 audit(605.424:21791): avc: denied { create } for pid=14883 comm="syz.0.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 349.283854][T14892] loop3: detected capacity change from 0 to 512 [ 349.296810][T14892] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.308223][T14892] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.319628][T14892] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 349.328411][T14892] System zones: 1-12 [ 349.333743][T14892] EXT4-fs (loop3): 1 truncate cleaned up [ 349.340449][T14892] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.497818][T14902] lo speed is unknown, defaulting to 1000 [ 349.784762][T14909] siw: device registration error -23 [ 350.256198][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.543789][T14933]  (unregistering): Released all slaves [ 350.884353][T14943] lo speed is unknown, defaulting to 1000 [ 350.975719][T14947] netlink: 'syz.7.4152': attribute type 3 has an invalid length. [ 350.983957][T14947] netlink: 'syz.7.4152': attribute type 3 has an invalid length. [ 351.933042][T14979] loop8: detected capacity change from 0 to 512 [ 351.938641][T14981] __nla_validate_parse: 15 callbacks suppressed [ 351.938664][T14981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4167'. [ 351.954626][T14981] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4167'. [ 351.955157][T14979] EXT4-fs: Ignoring removed oldalloc option [ 351.963638][T14981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4167'. [ 352.008452][T14981] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4167'. [ 352.018446][T14979] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4165: Parent and EA inode have the same ino 15 [ 352.032322][T14979] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.4165: Parent and EA inode have the same ino 15 [ 352.056915][T14979] EXT4-fs (loop8): 1 orphan inode deleted [ 352.068403][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4166'. [ 352.069037][T14979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.391941][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4173'. [ 352.428792][T15013] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4176'. [ 352.744407][T15025] lo speed is unknown, defaulting to 1000 [ 352.929532][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'. [ 352.938484][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'. [ 352.992177][T15032] loop3: detected capacity change from 0 to 2048 [ 353.025225][T15032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 353.052489][T12952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.074333][T15039] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4186'. [ 353.152067][T15046] tipc: Bearer : already 2 bearers with priority 10 [ 353.159346][T15046] tipc: Bearer : trying with adjusted priority [ 353.167251][T15046] tipc: New replicast peer: 255.255.255.255 [ 353.173691][T15046] tipc: Enabled bearer , priority 9 [ 353.186889][T15044] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 353.201971][T15044] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1226 with error 28 [ 353.215327][T15044] EXT4-fs (loop3): This should not happen!! Data will be lost [ 353.215327][T15044] [ 353.225046][T15044] EXT4-fs (loop3): Total free blocks count 0 [ 353.231247][T15044] EXT4-fs (loop3): Free/Dirty block details [ 353.237204][T15044] EXT4-fs (loop3): free_blocks=2415919104 [ 353.243745][T15044] EXT4-fs (loop3): dirty_blocks=1232 [ 353.249136][T15044] EXT4-fs (loop3): Block reservation details [ 353.255245][T15044] EXT4-fs (loop3): i_reserved_data_blocks=77 [ 353.273399][ T29] kauditd_printk_skb: 705 callbacks suppressed [ 353.273481][ T29] audit: type=1326 audit(609.472:22497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fdd3f5ba7 code=0x7ffc0000 [ 353.302661][ T29] audit: type=1326 audit(609.472:22498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fdd39adb9 code=0x7ffc0000 [ 353.326381][ T29] audit: type=1326 audit(609.472:22499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 353.428780][ T3665] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 353.435008][ T29] audit: type=1326 audit(609.552:22500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fdd3f5ba7 code=0x7ffc0000 [ 353.464832][ T29] audit: type=1326 audit(609.552:22501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fdd39adb9 code=0x7ffc0000 [ 353.487829][ T29] audit: type=1326 audit(609.552:22502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 353.511572][ T29] audit: type=1326 audit(609.583:22503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fdd3f5ba7 code=0x7ffc0000 [ 353.534511][ T29] audit: type=1326 audit(609.583:22504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4fdd39adb9 code=0x7ffc0000 [ 353.558150][ T29] audit: type=1326 audit(609.583:22505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4fdd3febe9 code=0x7ffc0000 [ 353.581808][ T29] audit: type=1326 audit(609.583:22506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.1.4179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4fdd3f5ba7 code=0x7ffc0000 [ 354.992591][T15085] loop8: detected capacity change from 0 to 2048 [ 355.006333][T15085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 355.024031][T15089] : renamed from vlan0 [ 355.977177][T12952] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 356.722818][T15163] SELinux: failed to load policy [ 356.746796][T15166] bridge0: left promiscuous mode [ 356.754543][T15166] netlink: 'syz.3.4229': attribute type 10 has an invalid length. [ 356.802742][T15169] loop3: detected capacity change from 0 to 512 [ 356.838569][T15169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.052519][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.163722][T15180] wg2: entered promiscuous mode [ 357.168668][T15180] wg2: entered allmulticast mode [ 357.276139][T15182] __nla_validate_parse: 6 callbacks suppressed [ 357.276158][T15182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4235'. [ 357.325950][T15191] vlan0: entered promiscuous mode [ 357.331228][T15191] vlan0: entered allmulticast mode [ 357.336514][T15191] hsr_slave_1: entered allmulticast mode [ 357.390056][T15191] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4236'. [ 357.632194][T15203] IPv6: sit3: Disabled Multicast RS [ 357.638599][T15203] sit3: entered allmulticast mode [ 358.433641][T15210] net_ratelimit: 2 callbacks suppressed [ 358.433659][T15210] Set syz1 is full, maxelem 65536 reached [ 358.579334][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 358.585579][ T29] audit: type=1400 audit(614.794:22625): avc: denied { write } for pid=15229 comm="syz.0.4251" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 358.716006][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4254'. [ 358.738700][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4254'. [ 358.770205][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4254'. [ 358.798895][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4254'. [ 358.868037][T15241] netlink: 'syz.3.4255': attribute type 7 has an invalid length. [ 358.876017][T15241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4255'. [ 358.964181][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4256'. [ 358.982420][T15244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4256'. [ 359.066319][T15246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4257'. [ 359.461157][ T29] audit: type=1400 audit(615.687:22626): avc: denied { create } for pid=15261 comm="syz.8.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 359.599948][T15246] Set syz1 is full, maxelem 65536 reached [ 359.626666][ T29] audit: type=1400 audit(615.858:22627): avc: denied { map } for pid=15261 comm="syz.8.4265" path="socket:[55140]" dev="sockfs" ino=55140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.649628][ T29] audit: type=1400 audit(615.858:22628): avc: denied { read } for pid=15261 comm="syz.8.4265" path="socket:[55140]" dev="sockfs" ino=55140 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 360.165731][T15281] ================================================================== [ 360.173963][T15281] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 360.180685][T15281] [ 360.183028][T15281] write to 0xffff88812fa9f310 of 8 bytes by task 15285 on cpu 0: [ 360.190766][T15281] __dentry_kill+0x142/0x4b0 [ 360.195394][T15281] dput+0x5e/0xd0 [ 360.199057][T15281] step_into+0x5b2/0x820 [ 360.203342][T15281] link_path_walk+0x571/0x900 [ 360.208061][T15281] path_openat+0x1de/0x2170 [ 360.212585][T15281] do_filp_open+0x109/0x230 [ 360.217123][T15281] io_openat2+0x272/0x390 [ 360.221478][T15281] io_openat+0x1b/0x30 [ 360.225761][T15281] __io_issue_sqe+0xfe/0x2e0 [ 360.230381][T15281] io_issue_sqe+0x53/0x970 [ 360.234824][T15281] io_wq_submit_work+0x3f7/0x5f0 [ 360.239797][T15281] io_worker_handle_work+0x44e/0x9b0 [ 360.245120][T15281] io_wq_worker+0x22e/0x870 [ 360.249669][T15281] ret_from_fork+0xda/0x150 [ 360.254202][T15281] ret_from_fork_asm+0x1a/0x30 [ 360.258995][T15281] [ 360.261331][T15281] read to 0xffff88812fa9f310 of 8 bytes by task 15281 on cpu 1: [ 360.268989][T15281] fast_dput+0x5f/0x2c0 [ 360.273271][T15281] dput+0x24/0xd0 [ 360.276935][T15281] step_into+0x5b2/0x820 [ 360.281211][T15281] link_path_walk+0x571/0x900 [ 360.285929][T15281] path_openat+0x1de/0x2170 [ 360.290458][T15281] do_filp_open+0x1f1/0x230 [ 360.294992][T15281] io_openat2+0x272/0x390 [ 360.299366][T15281] io_openat+0x1b/0x30 [ 360.303475][T15281] __io_issue_sqe+0xfe/0x2e0 [ 360.308088][T15281] io_issue_sqe+0x53/0x970 [ 360.312509][T15281] io_wq_submit_work+0x3f7/0x5f0 [ 360.317450][T15281] io_worker_handle_work+0x44e/0x9b0 [ 360.322745][T15281] io_wq_worker+0x22e/0x870 [ 360.327352][T15281] ret_from_fork+0xda/0x150 [ 360.331875][T15281] ret_from_fork_asm+0x1a/0x30 [ 360.336661][T15281] [ 360.338993][T15281] value changed: 0xffff888237a92998 -> 0x0000000000000000 [ 360.346107][T15281] [ 360.348553][T15281] Reported by Kernel Concurrency Sanitizer on: [ 360.354716][T15281] CPU: 1 UID: 0 PID: 15281 Comm: iou-wrk-15280 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 360.366360][T15281] Tainted: [W]=WARN [ 360.370170][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.380322][T15281] ==================================================================