last executing test programs: 3m7.08249581s ago: executing program 2 (id=8032): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000200014003500776730"], 0x34}}, 0x0) 3m7.0820983s ago: executing program 2 (id=8033): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x4668, 0x10100, 0xfffffffd, 0x187}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000005c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x4200}}) io_uring_enter(r0, 0x44fd, 0x0, 0x0, 0x0, 0x0) 3m6.904121289s ago: executing program 2 (id=8036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x8000000, @loopback, 0xffffffff}, 0x1c) 3m6.903965119s ago: executing program 2 (id=8037): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(0x0, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 3m6.893195929s ago: executing program 2 (id=8039): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x9a, &(0x7f0000000a00)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x3, "e42f75a2a1aee78b93d0a0f9c020ac5d5fe1045ffd17431d60acb730b045529a", "c56a41d87572bbe3b24cfb46a88c6dee", {"95b2226c8d23415835788cdee31bdbc5", "e822d5bfb0831d98e0ad3cc2455b8cac"}}}}}}}}, 0x0) 3m6.877602309s ago: executing program 2 (id=8040): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) shutdown(r0, 0x0) 2m50.803091765s ago: executing program 32 (id=8040): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) shutdown(r0, 0x0) 2m46.717038881s ago: executing program 5 (id=8974): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0xfffffffd}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000200)) 2m46.716420461s ago: executing program 5 (id=8976): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) 2m46.58594551s ago: executing program 5 (id=8978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 2m46.51414175s ago: executing program 5 (id=8979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 2m46.44407012s ago: executing program 5 (id=8981): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x1f0, 0xe8, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1000, 0xc0, 0x3}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0x10000}}}}, {{@arp={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 0x5, 0xd, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {}, 0xfffa, 0x6, 0x7, 0x0, 0xb2, 0x6, 'veth1_to_bond\x00', 'wg0\x00', {}, {0xff}, 0x0, 0x210}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @multicast1, @remote, 0xd, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x21085e, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nouid32}, {@acl}]}, 0x1, 0x51c, &(0x7f0000000780)="$eJzs3c9vI1cdAPCvvXHiZNMmLT0AgnZpCwtarZN426jqgZYTQqgSokeQtiHxRlHsOIqd0oSVmp65IlGJExz5Azhw6ok7FwQ3LuWAxI8I1CBxGDTjSdabtTcWSewo/nyk2Zk3bzLf74t33lu/bPwCGFu3IuIgIiYj4r2ImMvPF/It3u5s6XWfHT5cPTp8uFqIJHn3H4WsPj0XXV+TupnfsxwR3/92xI8KT8Zt7e1vrtTrtZ28vNBubC+09vbvbjRW1mvrta1qdXlpefGNe69XL6ytLzUm86Mvf/r7g2/8JE1rNj/T3Y6L1Gl66SROaiIivnsZwUbgRt6eyVEnwv+lGBHPR8TL2fM/FzeyVxMAuM6SZC6Sue4yAHDdFbM5sEKxks8FzEaxWKl05vBeiJlivdlq33nQ3N1a68yVzUep+GCjXlvM5wrno1RIy0vZ8aNy9VT5XkQ8FxE/m5rOypXVZn1tlP/wAYAxdvPU+P/vqc74HxHJh6NODgC4POVRJwAADJ3xHwDGj/EfAMaP8R8Axk9n/J8e4MKdy08GABgK7/8BYPwY/wFgrHzvnXfSLTnKP/967f293c3m+3fXaq3NSmN3tbLa3NmurDeb69ln9jTOul+92dxeei12P5j/5narvdDa27/faO5ute9nn+t9v1bKrjoYQssAgH6ee+mTPxXSEfnN6WyLrrUcSiPNDLhsxVEnAIzMjVEnAIyM1b5gfJ3jPb7pAbgmeizR+5hyr18QSpIkubyUgEt2+wvm/2Fcdc3/+1/AMGbM/8P4Mv8P4ytJCoOu+R+DXggAXG3m+IE+P/9/Pt//Ov/hwA/XHtX9Nvvz455fd5B3LxebJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwxx+v/VvK1wGejWKxUIp6JiPkoFR5s1GuLEfFsRPxxqjSVlpdGnDMAcF7Fvxby9b9uz706+1jVizdPDicj4se/ePfnH6y02zt/iJgs/HPq+Hz74/x8dfjZAwBnOx6ns33XG/nPDh+uHm/DzOdv34qIcif+0eFkHJ3En4iJbF+OUkTM/KuQlzsKXXMX53HwUUR8vlf7CzGbzYF0Vj49HT+N/cxQ4xcfi1/M6jr79HvxuQvIBcbNJ2n/83av568Yt7J97+e/nPVQ55f3f+mtVo+yPvBR/OP+70af/u/WoDFe+913OkfTT9Z9FPHFiYjj2Edd/c9x/EKf+K8OGP/PX3rx5X51yS8jbkfv+N2xFtqN7YXW3v7djcbKem29tlWtLi8tL75x7/XqQjZHvdB/NPj7m3ee7VeXtn+mT/zyGe3/6oDt/9V/3/vBV54S/+uv9IpfjBeeEj8dE782YPyVmd+U+9Wl8df6tP+s1//OgPE//cv+2oCXAgBD0Nrb31yp12s7Dp48SJLkw/SbdFXycZC+GlcgjZ4Hbw0r1mSfv5A/faXzTJ+qSpKn3/Ct3lX9eoyLmHUDroKThz4i/jPqZAAAAAAAAAAAAAAAgJ6G8RtLo24jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA19f/AgAA//99m9kb") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000007aab000020000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000191409"], 0x18}, 0x1, 0x0, 0x0, 0x800c4}, 0x850) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x0, 0x0, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x1c8, 0x0, 0x98, 0x0, 0x260, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'team_slave_0\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@loopback, @private=0xa010102, 0x0, 0xffffffff, 'macvtap0\x00', 'bridge_slave_0\x00', {}, {}, 0x11, 0x0, 0x44}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r8 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000c40)=ANY=[@ANYBLOB="710100c89d6d4e473c5083051156ed01102ed3b7ee5f687f6f6fbfcfdcb30b1a3aa37d1fde623c3c82b3", @ANYRES16, @ANYBLOB="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"], 0x210}}, 0x0) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fsync(0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) 2m46.21054193s ago: executing program 5 (id=8989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close_range(r1, r1, 0x0) 2m30.069030205s ago: executing program 33 (id=8989): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close_range(r1, r1, 0x0) 1m30.074567623s ago: executing program 0 (id=12554): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xe, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x6}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m30.073550723s ago: executing program 0 (id=12556): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r3, 0x0, 0x0) close_range(r2, r3, 0x0) 1m29.987334982s ago: executing program 0 (id=12558): mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu<-0\t||') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) 1m29.910645262s ago: executing program 0 (id=12563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) modify_ldt$write(0x1, 0x0, 0x0) 1m29.824095662s ago: executing program 0 (id=12565): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 1m29.797378892s ago: executing program 0 (id=12567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m27.386144984s ago: executing program 3 (id=12704): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m27.339697054s ago: executing program 3 (id=12706): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x8b008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x1, @perf_config_ext={0x5}, 0x1a, 0x40, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc7b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 1m27.307284453s ago: executing program 3 (id=12710): perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") 1m27.271467573s ago: executing program 3 (id=12711): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='M', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x10000000}, 0x1c) shutdown(r2, 0x1) 1m27.118612003s ago: executing program 3 (id=12723): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x100, 0x4) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 1m27.044097933s ago: executing program 3 (id=12727): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x8, &(0x7f0000001400)={0x0, 0x3938700}, 0x1, 0x8, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) 1m13.742787128s ago: executing program 34 (id=12567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m10.991394398s ago: executing program 35 (id=12727): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x8, &(0x7f0000001400)={0x0, 0x3938700}, 0x1, 0x8, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) 1m7.225102896s ago: executing program 6 (id=13229): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x7, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c1d15d2e7505a8696b50738ece15ee5000000000000000000000000003c1d2832b103826690ce8335d2db58ecedfce9d041c870b417443b109171a4f41e9c212a6451366de92e31182d286e72b80014d07e8e196a3ec1", 0xf8}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c", 0xca}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e769694382", 0x46}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000f00)="2ea5d94f90933978352c42a3dad24b4909f57c7dba08e38797ab936fc9c5158f38287dbf6242139b1abfd08aabc9d67efa71c608a29bc1636373ad0461338c453a5bae9e10b5713832e4a6b717d0", 0x4e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="711bf2379482b297d5d372428b6ccc69fa3c65e8ad9e54e99ae2f5caf227fce4d6e3d13c40e3f0b0f07ffcc4815f2d2667dfd788b902781813e972", 0x3b}, {&(0x7f0000000b40)="663e8bd09a787547a014d49473462201986292011a113ed4f6e150204f5e596a79dd774e4e0f79af711f4bc000a6907483309e6a3e2e1842baa5229299c3503ba04b8ab5ea7bb7f6300b1b8f5d0d388cfb6f47a7537feb1dae33a15f93e132d6f9704cee80fcf3e7bef8119c908d84a1e87b7bad9d2824627757988c798be0bb7ee3dba6eb0f3a3bd1e07f494513d7ab5b80d38216908602b81d8fe20f064bb13ecf8554bba711a2fabe458dcade00bf", 0xb0}, {&(0x7f00000016c0)="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", 0x512}], 0x3}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001600)="09268a927f1f6588b967481241ba7860fcfaf65ac635ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcec8044ab4ea6f7ae55d88fecf90b1a7511bf746b152124eb38d6c7a207112eb1bf554bc070626792d394df5adf7355fa5f8deb9db3da042d8803f5c0ca3642f22e4c896b5f1d4e16556e57cc2f36b50a00000063cf9528e90000000000581c7eeb130aac1cfd109c3e794fe91b5b473f244eeac47acbd8", 0xa5, 0x11, 0x0, 0x0) 1m7.172594016s ago: executing program 6 (id=13221): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 1m7.119588325s ago: executing program 6 (id=13222): openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000002680)) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"]) write$selinux_user(0xffffffffffffffff, 0x0, 0x27) 1m7.030625255s ago: executing program 6 (id=13227): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 1m6.991236125s ago: executing program 6 (id=13228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000005850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_pidfd_open(0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) 1m6.715852544s ago: executing program 6 (id=13241): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setgroups(0x2, &(0x7f0000000300)=[0xffffffffffffffff, r4]) socket$isdn_base(0x22, 0x3, 0x0) stat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000029c0)=0xe8) getegid() getpgrp(r3) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r11 = semget$private(0x0, 0x1, 0x202) semtimedop(r11, &(0x7f0000000080)=[{0x0, 0xac}], 0x1, 0x0) semtimedop(r11, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$GETZCNT(r11, 0x0, 0xf, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c7766647577253b29dac0acee010100", @ANYRESHEX=r9, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',\x00']) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000008c0)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@nullb, r12, &(0x7f0000000640)={0x9, 0xbd7, 0x0, 0x5, 0x641, 0x8, 0x858, 0x0, 0xe}) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000005740)) stat(&(0x7f0000005bc0)='./file0\x00', &(0x7f0000005c00)) fstat(r2, &(0x7f0000005c80)) 1m6.642519464s ago: executing program 36 (id=13241): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setgroups(0x2, &(0x7f0000000300)=[0xffffffffffffffff, r4]) socket$isdn_base(0x22, 0x3, 0x0) stat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@remote}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000029c0)=0xe8) getegid() getpgrp(r3) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r7) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r11 = semget$private(0x0, 0x1, 0x202) semtimedop(r11, &(0x7f0000000080)=[{0x0, 0xac}], 0x1, 0x0) semtimedop(r11, &(0x7f0000000040)=[{}, {}], 0x2, 0x0) semctl$GETZCNT(r11, 0x0, 0xf, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB="2c7766647577253b29dac0acee010100", @ANYRESHEX=r9, @ANYBLOB=',dfltgid=', @ANYRESHEX, @ANYBLOB=',\x00']) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000008c0)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000000)=0xe8) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@nullb, r12, &(0x7f0000000640)={0x9, 0xbd7, 0x0, 0x5, 0x641, 0x8, 0x858, 0x0, 0xe}) lstat(&(0x7f0000000180)='./file1\x00', &(0x7f0000005740)) stat(&(0x7f0000005bc0)='./file0\x00', &(0x7f0000005c00)) fstat(r2, &(0x7f0000005c80)) 4.190959783s ago: executing program 7 (id=14350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x8) 2.969337159s ago: executing program 7 (id=14368): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 2.419993077s ago: executing program 7 (id=14373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000300)='net/anycast6\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) readv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2410}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x4000) 2.323351257s ago: executing program 9 (id=14376): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x10, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000300)=ANY=[@ANYBLOB="fe2f00000100000081c6442138efae03d4a7b5c2619b459e7f7f040dfe2c3576d68515602bf2541c30d22b5b0cad2f1643f1ed33828bf2bc8ffa9a2c06420318e64a217889af8d1c32bc6ac3c8cff4a15040b0a717140d875eb6b098"]) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x81000000) inotify_rm_watch(0xffffffffffffffff, r4) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') 2.054003486s ago: executing program 7 (id=14379): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getresuid(&(0x7f0000000cc0), 0x0, &(0x7f0000000500)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000580), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x81) r3 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.374821584s ago: executing program 9 (id=14387): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1bdda16a150016000000000d0020c26f180c0f54ed75c4d893c42600f879ef232ab691ada1b78422861086779869dc2df33ca0e1816744eeac63a36218e1308a11"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000540)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) close_range(r1, 0xffffffffffffffff, 0x0) 1.307811963s ago: executing program 9 (id=14389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r1, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f00000003c0), 0x8, 0xd2, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYBLOB="dddb7e1d62d1dc934974fd35e8b7eb7bb6"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r6}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.307124384s ago: executing program 8 (id=14390): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.284256524s ago: executing program 8 (id=14391): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r2}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[], 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)='&\']:+{*\x00', 0x8, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) listen(r5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x11, @remote, 0x0, 0x0, 'lblc\x00', 0x0, 0x0, 0x6a}, 0x2c) 1.249496453s ago: executing program 9 (id=14392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106, 0xa}}, 0x20) perf_event_open(&(0x7f00000034c0)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x447}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x4}, {0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0xffffffffffffffff, 0x4}}, 0x48) r4 = socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x385, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd"], 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) listen(r5, 0x0) 1.248879903s ago: executing program 8 (id=14393): r0 = socket(0x11, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1, 0xf0ff}, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="15"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8505040000000000d5000000000000009d00000000220000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4600, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = io_uring_setup(0x758a, &(0x7f0000000140)) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) close_range(r4, 0xffffffffffffffff, 0x0) 1.197229593s ago: executing program 9 (id=14394): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000280)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e0500001e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba0", @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) eventfd(0x80000000) openat$cgroup_int(r0, &(0x7f0000000dc0)='memory.swap.max\x00', 0x2, 0x0) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}]) 1.111458933s ago: executing program 7 (id=14395): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3ff, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r1, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r2 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000024c0)=ANY=[@ANYBLOB="8de422d6ef214863b5de6cde6a3d116df26465fd4ef74c13b0a98a3fb2a4173610ab4f0c80b6c7400c64485f192109d4a3618b97ad4d06452e5908042a4dc88af9fad65fbaa3e6b0fdd45c32d5e84e985d3bba742788a7c948a4a94db1842be5151da3c77ad2340d2e8875efd2dccf6fde1adfff05df58bb55f52372baab38ba31bfc2c66fabdb4a43dadfb5d98f1296fcca82154db212376cf56d8fc34f71cd65c11cebefd1b33471ca4a98110fd32d18d8b8777e84d511bd6cdd8efa30fd34e93b4a9b3ba4b7882c6f25993bf81372258ed12350a752826fadc1469f0b82b709bcd01d8a22", @ANYRES16=0x0, @ANYBLOB="0100000000000000000006000009080004000a01010114000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000000000000000000000000001"], 0x54}, 0x2, 0x34005}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000002340), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002400)={&(0x7f0000002380)={0x6c, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6eb}, @NBD_ATTR_BACKEND_IDENTIFIER={0x8, 0xa, 'GPL\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000500"/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000020000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.098659213s ago: executing program 8 (id=14396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000a00)={'#! ', './file0', [{0x20, '['}, {0x20, '{'}, {0x20, '\xa8{^.]:$%(#{\'\xc8G9Q\xf8\x16wf\xb2\xf7J,\xec\x98\xfc*M\xf7gC\x10\x94!%@'}], 0xa, "4cce2c580dcd6cbc0dc8fdf4e88e508701845f0e6f7e1b63a1f617dbbd973363f97f965f5a83326ee2a4647081f7235691d74a7aca28b094af72a51c407b9e155357be6b48046b3bc94d3ff06524640542ddb9c49a022c54d6d283c4add8"}, 0x93) fallocate(r2, 0x0, 0x4, 0x2000402) sendmsg$nl_route(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="30000000180000002c20200cff02fd0624e0746b0c001680050008000000005a0006001500061000"/49], 0x30}, 0x1, 0x0, 0x0, 0x20040801}, 0x40000) r3 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) 845.682962ms ago: executing program 4 (id=14399): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000099000000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x69d6, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x4a) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x9, 0x0, r0, 0x7ff, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x1, 0x0, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 640.182572ms ago: executing program 1 (id=14400): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000003c0)={0x10000000}) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x183cc0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000100000000000018110000283e441cfa38d78dc0d3537b31e0ec1cfed2fdaa6f8b2daf443042a5ede4f3f0d0c05966930a2197b3e72ff1598a32fdd130d424b6b8", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) close(r4) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x9d, 0x1, 0x10}) bind$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000000865c90000000000000000070015080900010073797a300000000006000240000500000c00048008000140000000040500030001"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 639.837592ms ago: executing program 4 (id=14401): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000007}, 0x0, 0x5dd8, 0x3, 0x6, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x200000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@orlov}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_io_uring_setup(0x16c2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fef, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d80)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1, @ANYRES64=r2], 0x20) 611.550481ms ago: executing program 1 (id=14402): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)='\f7', 0x2}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) nanosleep(&(0x7f0000000300), 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0xf74, 0x1a) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c80), 0x0, 0x4004) shutdown(r0, 0x1) 505.179681ms ago: executing program 8 (id=14403): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=':\x00', 0xffdf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1e0000000500000005000000ef00000000000000", @ANYRES32=r0, @ANYBLOB="bd152337f868876b071c1b0d4dcd912ed6f9760bba215938a762ae9e41b6f3e4f86d40ea94599fc75c27bdc9ac5255a3ac3c731f54e40fa32a433f944756c2045caa24cc756913dda861badecbf6908079ee44ac2603a8d5b421b38d71ec12ffa4c1c8974407cc3a8bf097f67edb5008c4a4d7f40c5c6e219b276eedc4b85d7c3740bc39fffa15e93d7d8e456f1a57ae9b074da0f65059f3d8ab468f4b62e0618b4e5de129c232d3a3d52691d00b777174b86aee43f10ff22b2918b49749e835ff6cff45a74e882ca2b9012cccd781e34e9fd8", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000003000000010000000400"/28], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) timer_create(0x0, 0x0, &(0x7f0000000100)=0x0) timer_gettime(r5, &(0x7f0000000340)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='map=acorn,block=0x0000000000000400\x00unhide,nocoepress,map=normal,map=offAshowassoc,dont_hash,defcontext=unconfined_u,\x00'], 0x0, 0x633, &(0x7f0000000280)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x2110, 0xb2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 427.389521ms ago: executing program 4 (id=14404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)="50e2d0e8f7c79f56fe316075d1848c2846a50934836763ae403f35dbe8580de2c59113798cdc8a74dc21020f4e97e9ac22768c9b7d9aca64aa97212a1826646b4a19ebd05d3e7cbae0f91b621e6ac8e60d7d39df4febd1a8e2a737845dccfdbecde934165ded16e411da023b9fba7840a8e50b7f909cc9d51522dc4ac3075e975b35681f8d16915a3d248396f134273ff13a72f082839bd3021d4f0a5550671bb7d267d74dc8a800f3f7e8be6daea4379e76bc978e801fbd9d83544776580baa62d6156cc3aaec4b79a8ecc46317f48f62ff039722c87db0cd54d937de47619f530c29622e55176b5dfbbd084521a28e89488f57a6d3c19c2df39243d73425d52f0a42cc4a01e39f3c24ecd0e22d696d59320e4ee7d111d3abac17ebfc8aa6bb910c8d1d92efe391d372130bfccdec653e41694e86c79164f36b1ac9fc2812a7944f8b08f6780b102f71f4dc7232c83d20a4aa83db3e540a063f7f13360b6435b755f4af598016caf933a76bf2f2897b04a1efe5793b62c87532ba7fc740372ea2918a0dca9de22c336f6b4ab77b1047e00d693585263f938791e5bf228f297896d3a90f4e87c53e42589eba922b3770644a9a199bd95fca9d25416417924b7b594e88cb3e0b3d48014993d64636c82533a49c239a2305b4e9fe43f2ab23aa972ecfd7bd1eefb2d9f8117a8711e5f4c84704b761fdac68a8ae0e0e2d69bcd3ee3b3101a14459b9aac31b693130e809b72e9a8722029a6ee71faf89daa40d3a98476aeeb172b14d452a38475599d5f8243ff49bbc4fd4341ee82c77d0f7e3a93fb89d9c826697f86a7ed404d82fd358d919af26580bed09ce5f694c7fb2919b181ff08da24a7a95523b67b45098c233abdac18a7816bc2e56092f0f8fc300d44f0c181b7bc103b03fe978410816b1ec59a52f2d08a895028dc4559983701ce75a60ccdec67401e1208ca3f4032aeb7536f6cfb3f9fb1f2fa8e67adcfc8690e904599860f707b1be70a49f60e01e8fd3f46165cd186808e0536bde9356dea4ce245a9cc3293a2c7e42d96c95", 0x2eb}], 0x1}, 0x44080) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="bd2f6aa36cea0e62ac00a4539dd80281164750339fcc3cd1f7bb1b74e98dbbe81e997d4847ee5d06a72e6f1c6b8a873c7ea7760f102483b578526af9775e51b84818d03d", 0x44}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6feffffffffffffffe786", 0xce}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb", 0x14}], 0x3}}], 0x1, 0x20004050) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 426.779571ms ago: executing program 1 (id=14405): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@can_newroute={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_SRC_IF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r2 = perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu<00\t&&') r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000812000000000000", @ANYRES32, @ANYBLOB="7f00"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 426.305331ms ago: executing program 4 (id=14406): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = gettid() ptrace$pokeuser(0x6, r3, 0xfffffffffffffffb, 0x8000000000000000) r4 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ptrace$ARCH_GET_GS(0x1e, r4, 0x0, 0x1004) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0xd, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x1, 0x0, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {0x0, 0x3}, {0xfff3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008044}, 0x8000) 382.958191ms ago: executing program 1 (id=14407): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) rmdir(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@nombcache}, {@oldalloc}, {@data_err_ignore}, {@acl}, {@debug}, {@sysvgroups}, {@nomblk_io_submit}]}, 0x3, 0x585, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 280.11179ms ago: executing program 1 (id=14408): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[], 0x7c8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xc}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0xc2, 0xb, 0x423a8c6d2c21e29d, @private2, @loopback, 0x40, 0x1, 0x4, 0x3}}) r6 = socket(0xa, 0x801, 0x0) getsockopt(r6, 0x1, 0x29, &(0x7f0000000080)=""/106, &(0x7f0000001ffc)=0x6a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 228.10702ms ago: executing program 4 (id=14409): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x1000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 185.26798ms ago: executing program 9 (id=14410): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x806, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x20008844) bind$inet6(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, 0x0}, 0x0) listen(r1, 0x3) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) recvmmsg(r5, &(0x7f00000098c0), 0x0, 0x10002, 0x0) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97020fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) close_range(r0, 0xffffffffffffffff, 0x0) 166.60524ms ago: executing program 4 (id=14411): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040080) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x500, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 95.04766ms ago: executing program 7 (id=14412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file2\x00', 0x808d, &(0x7f00000000c0), 0xfe, 0x504, &(0x7f0000000a80)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000000301"], 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_pts(r2, 0x141601) write(r7, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0x7000000) 51.126749ms ago: executing program 1 (id=14413): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000001180)={0x6, {{0x2, 0x4e23, @multicast2}}}, 0x88) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 0s ago: executing program 8 (id=14414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0xe0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000300)=0x1140) write$cgroup_int(r7, &(0x7f0000000040)=0x900, 0x12) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f0000000780)={0x7, {{0x2, 0x4e20, @rand_addr=0x1}}, {{0x2, 0x4e23, @empty}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001c40)={'syztnl0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x10, 0x8, 0xfffffff8, 0x7, {{0x6, 0x4, 0x1, 0x12, 0x18, 0x68, 0x0, 0x93, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @empty, {[@generic={0x44, 0x4, "4501"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001c80)) recvfrom$phonet(r7, &(0x7f0000000240)=""/84, 0x54, 0x60, &(0x7f0000000080)={0x23, 0x8, 0xc8, 0x8}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a011e00000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001"], 0x104}}, 0x0) kernel console output (not intermixed with test programs): 672] xt_hashlimit: size too large, truncated to 1048576 [ 532.770172][T29635] lo speed is unknown, defaulting to 1000 [ 532.843970][T29635] ip6gretap0 speed is unknown, defaulting to 1000 [ 532.861670][T29635] lo speed is unknown, defaulting to 1000 [ 532.919772][T29760] loop6: detected capacity change from 0 to 1024 [ 533.074537][T29635] chnl_net:caif_netlink_parms(): no params data found [ 533.081501][T29779] loop6: detected capacity change from 0 to 128 [ 533.176463][T29635] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.183684][T29635] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.218713][T29635] bridge_slave_0: entered allmulticast mode [ 533.229477][T29635] bridge_slave_0: entered promiscuous mode [ 533.251846][T29635] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.259012][T29635] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.299212][T29635] bridge_slave_1: entered allmulticast mode [ 533.316623][T29635] bridge_slave_1: entered promiscuous mode [ 533.342355][T29635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.382977][T29635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.392157][T29794] pim6reg1: entered promiscuous mode [ 533.397533][T29794] pim6reg1: entered allmulticast mode [ 533.445573][T29635] team0: Port device team_slave_0 added [ 533.477974][T29635] team0: Port device team_slave_1 added [ 533.496203][T29804] pim6reg1: entered promiscuous mode [ 533.501649][T29804] pim6reg1: entered allmulticast mode [ 533.549951][T29809] loop6: detected capacity change from 0 to 1024 [ 533.571482][T29635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.578488][T29635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.604445][T29635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.697000][T29814] bond0: (slave bond_slave_0): Releasing backup interface [ 533.720405][T29814] bond0: (slave bond_slave_1): Releasing backup interface [ 533.748629][T29814] team0: Port device team_slave_0 removed [ 533.765828][T29814] team0: Port device team_slave_1 removed [ 533.786045][T29916] loop6: detected capacity change from 0 to 512 [ 533.803651][T29916] EXT4-fs: Ignoring removed orlov option [ 533.806721][T29814] team0: Port device geneve1 removed [ 533.817808][T29916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 533.842421][T29635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.849414][T29635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.875400][T29635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.927669][T29916] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 533.936036][T29916] EXT4-fs (loop6): write access unavailable, skipping orphan cleanup [ 533.950244][T29916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.968319][T29915] team0: Mode changed to "loadbalance" [ 533.994496][T29635] hsr_slave_0: entered promiscuous mode [ 534.000632][T29635] hsr_slave_1: entered promiscuous mode [ 534.024617][T29635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.034476][T29635] Cannot create hsr debugfs directory [ 534.070565][T30021] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=30021 comm=syz.1.13178 [ 534.193639][T22618] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.279907][T29635] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 534.304473][T29635] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 534.335832][T29635] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 534.369362][T29635] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 534.393457][T30127] loop6: detected capacity change from 0 to 1024 [ 534.403145][T30131] netlink: 'syz.4.13182': attribute type 4 has an invalid length. [ 534.411538][T30127] EXT4-fs: Ignoring removed bh option [ 534.436213][T30131] netlink: 'syz.4.13182': attribute type 4 has an invalid length. [ 534.481604][T30137] tipc: Enabling of bearer rejected, already enabled [ 534.489329][ T3860] lo speed is unknown, defaulting to 1000 [ 534.495638][ T3860] lo speed is unknown, defaulting to 1000 [ 534.503528][T29635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.544185][T29635] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.568052][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.575160][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.597441][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.604539][ T6831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.646549][T29635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.690724][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 534.690737][ T29] audit: type=1400 audit(2000045762.774:58890): avc: denied { setattr } for pid=30152 comm="syz.6.13192" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 534.772531][T30256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13193'. [ 534.800853][T29635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.815771][ T29] audit: type=1400 audit(2000045762.896:58891): avc: denied { write } for pid=30265 comm="syz.6.13195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 534.989523][ T29] audit: type=1400 audit(2000045763.055:58892): avc: denied { relabelfrom } for pid=30284 comm="syz.6.13202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 535.009807][ T29] audit: type=1400 audit(2000045763.055:58893): avc: denied { relabelto } for pid=30284 comm="syz.6.13202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 535.080263][T30275] lo speed is unknown, defaulting to 1000 [ 535.105864][T30494] bond0: (slave veth0_to_hsr): Device is not bonding slave [ 535.113095][T30494] bond0: option active_slave: invalid value (veth0_to_hsr) [ 535.165298][ T29] audit: type=1400 audit(2000045763.205:58894): avc: denied { ioctl } for pid=30499 comm="syz.1.13205" path="socket:[99682]" dev="sockfs" ino=99682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 535.175461][T29635] veth0_vlan: entered promiscuous mode [ 535.208806][T29635] veth1_vlan: entered promiscuous mode [ 535.225020][T30275] ip6gretap0 speed is unknown, defaulting to 1000 [ 535.233813][T30275] lo speed is unknown, defaulting to 1000 [ 535.281537][T29635] veth0_macvtap: entered promiscuous mode [ 535.297628][T29635] veth1_macvtap: entered promiscuous mode [ 535.312840][T29635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.323416][T29635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.336803][T29635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.348022][T29635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.358569][T29635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.371910][T29635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.414212][T29635] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.422950][T29635] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.431732][T29635] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.440536][T29635] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.608673][ T29] audit: type=1326 audit(2000045763.635:58895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.7.13212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 535.634591][ T29] audit: type=1326 audit(2000045763.654:58896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.7.13212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 535.658425][ T29] audit: type=1326 audit(2000045763.654:58897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.7.13212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 535.682167][ T29] audit: type=1326 audit(2000045763.654:58898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.7.13212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 535.706057][ T29] audit: type=1326 audit(2000045763.654:58899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30620 comm="syz.7.13212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 535.746276][T30626] loop6: detected capacity change from 0 to 512 [ 536.136886][T30753] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 536.156225][T30753] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 536.569283][T30899] loop8: detected capacity change from 0 to 128 [ 536.667389][T30994] loop7: detected capacity change from 0 to 2048 [ 536.711769][T30994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.797028][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.840311][T31123] Y­4`Ҙ: renamed from lo (while UP) [ 536.966660][T31020] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 537.030622][T31123] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 537.037207][T31020] ip6gretap0 speed is unknown, defaulting to 1000 [ 537.047489][T31020] lo speed is unknown, defaulting to 1000 [ 537.100332][T31123] ip6gretap0 speed is unknown, defaulting to 1000 [ 537.118558][T31123] lo speed is unknown, defaulting to 1000 [ 537.172124][T31020] chnl_net:caif_netlink_parms(): no params data found [ 537.290995][T31244] hsr_slave_0: left promiscuous mode [ 537.316091][T31244] hsr_slave_1: left promiscuous mode [ 537.347704][T31020] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.354873][T31020] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.391004][T31020] bridge_slave_0: entered allmulticast mode [ 537.408199][T31020] bridge_slave_0: entered promiscuous mode [ 537.426367][T31020] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.433479][T31020] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.455797][T31020] bridge_slave_1: entered allmulticast mode [ 537.462268][T31020] bridge_slave_1: entered promiscuous mode [ 537.505994][T31020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.530104][T31020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.570277][T31020] team0: Port device team_slave_0 added [ 537.582124][T31020] team0: Port device team_slave_1 added [ 537.612398][T31020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.619471][T31020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.645776][T31020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.672311][T31020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.679367][T31020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.705315][T31020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.732694][T31020] hsr_slave_0: entered promiscuous mode [ 537.751373][T31020] hsr_slave_1: entered promiscuous mode [ 537.764875][T31020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.795768][T31020] Cannot create hsr debugfs directory [ 537.982044][T31020] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 538.013390][T31020] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 538.044774][T31020] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 538.075135][T31020] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 538.195068][T31020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.211020][T31372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13269'. [ 538.235929][ T3860] page_pool_release_retry() stalled pool shutdown: id 120, 1 inflight 60 sec [ 538.245031][T31020] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.304298][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.311429][ T6826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.344155][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.351293][ T6826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.438734][T31493] IPv4: Oversized IP packet from 127.202.26.0 [ 538.457781][T31497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31497 comm=syz.4.13278 [ 538.528850][T31020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.577155][T31513] loop7: detected capacity change from 0 to 512 [ 538.621030][T31513] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 538.753391][T31020] veth0_vlan: entered promiscuous mode [ 538.790244][T31020] veth1_vlan: entered promiscuous mode [ 538.878809][T31020] veth0_macvtap: entered promiscuous mode [ 538.910353][T31020] veth1_macvtap: entered promiscuous mode [ 538.953234][T31020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.963738][T31020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.973630][T31020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.984101][T31020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.043089][T31020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.047066][T31734] loop7: detected capacity change from 0 to 2048 [ 539.062538][T31020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.073022][T31020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.082847][T31020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.093267][T31020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.127403][T31020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.159151][T31020] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.167967][T31020] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.176739][T31020] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.185472][T31020] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.190325][ T3372] page_pool_release_retry() stalled pool shutdown: id 123, 1 inflight 60 sec [ 539.194530][T31734] loop7: p1 < > p4 [ 539.216078][T31734] loop7: p4 size 8388608 extends beyond EOD, truncated [ 539.355421][T31748] loop9: detected capacity change from 0 to 256 [ 539.358426][T31745] hsr_slave_0: left promiscuous mode [ 539.389951][T31745] hsr_slave_1: left promiscuous mode [ 539.404505][T31748] FAT-fs (loop9): Directory bread(block 64) failed [ 539.432656][T31748] FAT-fs (loop9): Directory bread(block 65) failed [ 539.472472][T31748] FAT-fs (loop9): Directory bread(block 66) failed [ 539.484664][T31748] FAT-fs (loop9): Directory bread(block 67) failed [ 539.502159][T31748] FAT-fs (loop9): Directory bread(block 68) failed [ 539.518208][T31748] FAT-fs (loop9): Directory bread(block 69) failed [ 539.535886][T31748] FAT-fs (loop9): Directory bread(block 70) failed [ 539.553344][T31748] FAT-fs (loop9): Directory bread(block 71) failed [ 539.572271][T31748] FAT-fs (loop9): Directory bread(block 72) failed [ 539.578789][T31748] FAT-fs (loop9): Directory bread(block 73) failed [ 539.599466][T31760] loop7: detected capacity change from 0 to 2048 [ 539.652129][T31760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.790495][T31748] syz.9.13293: attempt to access beyond end of device [ 539.790495][T31748] loop9: rw=0, sector=1800, nr_sectors = 20 limit=256 [ 539.968108][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.141249][T31881] loop9: detected capacity change from 0 to 512 [ 540.166590][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 540.166681][ T29] audit: type=1400 audit(2000045767.891:59047): avc: denied { write } for pid=31884 comm="syz.7.13308" path="socket:[100586]" dev="sockfs" ino=100586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 540.204746][T31881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 540.239271][T31881] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.263832][T31881] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 540.274283][T31881] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 540.283746][T31881] EXT4-fs error (device loop9): ext4_acquire_dquot:6927: comm syz.9.13306: Failed to acquire dquot type 0 [ 540.340405][ T29] audit: type=1400 audit(2000045768.050:59048): avc: denied { bind } for pid=31948 comm="syz.8.13311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 540.373204][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.580124][T32009] loop8: detected capacity change from 0 to 512 [ 540.696691][ T29] audit: type=1400 audit(2000045768.396:59049): avc: denied { shutdown } for pid=32017 comm="syz.7.13323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 540.766167][T32024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13326'. [ 540.766294][T32022] netlink: 'syz.7.13325': attribute type 4 has an invalid length. [ 540.784660][ T29] audit: type=1400 audit(2000045768.415:59050): avc: denied { read } for pid=32019 comm="syz.8.13324" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 540.807980][ T29] audit: type=1400 audit(2000045768.415:59051): avc: denied { open } for pid=32019 comm="syz.8.13324" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 540.904752][ T29] audit: type=1400 audit(2000045768.471:59052): avc: denied { bind } for pid=32019 comm="syz.8.13324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.924309][ T29] audit: type=1400 audit(2000045768.471:59053): avc: denied { listen } for pid=32019 comm="syz.8.13324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 540.943964][ T29] audit: type=1400 audit(2000045768.471:59054): avc: denied { accept } for pid=32019 comm="syz.8.13324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 541.031934][T32029] loop9: detected capacity change from 0 to 2048 [ 541.083857][T32029] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.099740][T32029] EXT4-fs error (device loop9): ext4_find_extent:938: inode #2: comm syz.9.13328: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 541.118949][T32029] EXT4-fs (loop9): Remounting filesystem read-only [ 541.173231][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.260762][T32183] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 541.269395][T32183] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 541.653092][T32350] batman_adv: batadv0: Adding interface: dummy0 [ 541.659438][T32350] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.684889][T32350] batman_adv: batadv0: Interface activated: dummy0 [ 541.697149][T32350] batadv0: mtu less than device minimum [ 541.703227][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.714075][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.724775][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.735522][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.746399][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.757053][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.767886][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.778794][T32350] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 541.998676][T32481] loop8: detected capacity change from 0 to 512 [ 542.062404][T32481] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 542.084344][T32491] loop7: detected capacity change from 0 to 2048 [ 542.094610][T32481] EXT4-fs (loop8): orphan cleanup on readonly fs [ 542.103977][T32481] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 542.119243][T32481] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 542.129991][T32495] geneve0: entered allmulticast mode [ 542.135720][T32481] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13346: bg 0: block 40: padding at end of block bitmap is not set [ 542.166432][T32481] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 542.182921][T32481] EXT4-fs (loop8): 1 truncate cleaned up [ 542.200196][T32481] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.226127][T32491] syz.7.13350: attempt to access beyond end of device [ 542.226127][T32491] loop7: rw=0, sector=1552, nr_sectors = 512 limit=2048 [ 542.300117][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.321030][T32493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13353'. [ 542.338023][T32493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13353'. [ 542.444598][T32617] netlink: 'syz.7.13364': attribute type 4 has an invalid length. [ 542.468956][T32617] netlink: 'syz.7.13364': attribute type 4 has an invalid length. [ 542.955715][T32744] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13376'. [ 543.099762][T32760] loop9: detected capacity change from 0 to 1764 [ 543.108596][T32760] ISOFS: unable to read i-node block [ 543.114015][T32760] isofs_fill_super: get root inode failed [ 543.170038][T32766] loop8: detected capacity change from 0 to 1024 [ 543.191247][T32766] EXT4-fs: Ignoring removed nobh option [ 543.221276][T32766] EXT4-fs: Ignoring removed bh option [ 543.265717][T32766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.365703][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.451144][ T386] bridge0: port 1(30ŞXıĤD) entered blocking state [ 543.457796][ T386] bridge0: port 1(30ŞXıĤD) entered disabled state [ 543.482375][ T386] 0ŞXıĤD: entered promiscuous mode [ 543.506922][ T433] tipc: Enabling of bearer rejected, failed to enable media [ 543.839956][ T496] loop7: detected capacity change from 0 to 128 [ 543.912398][ T318] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 543.932297][ T496] syz.7.13410: attempt to access beyond end of device [ 543.932297][ T496] loop7: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 543.955728][ T582] netlink: 'syz.1.13412': attribute type 4 has an invalid length. [ 543.989562][ T584] bridge: RTM_NEWNEIGH with invalid ether address [ 544.026358][ T318] ip6gretap0 speed is unknown, defaulting to 1000 [ 544.042516][ T318] lo speed is unknown, defaulting to 1000 [ 544.090727][ T588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13415'. [ 544.456939][ T720] loop9: detected capacity change from 0 to 256 [ 544.470367][ T614] loop7: detected capacity change from 0 to 8192 [ 544.499242][ T720] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 544.548520][ T611] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 544.621315][ T611] ip6gretap0 speed is unknown, defaulting to 1000 [ 544.628263][ T611] lo speed is unknown, defaulting to 1000 [ 544.646361][ T729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13431'. [ 544.666900][ T729] bridge_slave_1: left allmulticast mode [ 544.672602][ T729] bridge_slave_1: left promiscuous mode [ 544.678236][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.686915][ T732] netlink: 'syz.8.13434': attribute type 27 has an invalid length. [ 544.695090][ T729] bridge_slave_0: left allmulticast mode [ 544.700734][ T729] bridge_slave_0: left promiscuous mode [ 544.706447][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.807213][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.814408][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.862554][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.874921][ T732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.906481][ T732] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.915506][ T732] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.924611][ T732] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.933691][ T732] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.965756][ T733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.974882][ T733] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.984018][ T733] net_ratelimit: 11 callbacks suppressed [ 544.984076][ T733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.244382][ T730] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 545.257619][ T739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 545.330270][ T730] ip6gretap0 speed is unknown, defaulting to 1000 [ 545.338158][ T730] lo speed is unknown, defaulting to 1000 [ 545.477809][ T750] loop9: detected capacity change from 0 to 512 [ 545.537778][ T750] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 545.547525][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 545.547539][ T29] audit: type=1326 audit(2000045772.923:59149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.578955][ T750] EXT4-fs (loop9): orphan cleanup on readonly fs [ 545.601829][ T750] Quota error (device loop9): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 545.615928][ T750] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 545.638975][ T29] audit: type=1326 audit(2000045772.942:59150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.662593][ T29] audit: type=1400 audit(2000045772.961:59151): avc: denied { write } for pid=746 comm="syz.7.13439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 545.682216][ T29] audit: type=1326 audit(2000045772.989:59152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.705735][ T29] audit: type=1326 audit(2000045772.989:59153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.729230][ T29] audit: type=1326 audit(2000045772.989:59154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.752792][ T29] audit: type=1326 audit(2000045772.989:59155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.776331][ T29] audit: type=1326 audit(2000045772.989:59156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.799913][ T29] audit: type=1326 audit(2000045772.989:59157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=751 comm="syz.4.13441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 545.826806][ T750] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 545.862276][ T750] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13438: bg 0: block 40: padding at end of block bitmap is not set [ 545.897038][ T750] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 545.916638][ T750] EXT4-fs (loop9): 1 truncate cleaned up [ 545.929723][ T750] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 546.116718][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.141801][ T1185] loop9: detected capacity change from 0 to 128 [ 546.188634][ T1185] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.219080][ T1192] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 546.249942][ T1185] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.329800][ T1200] netlink: 'syz.7.13459': attribute type 4 has an invalid length. [ 546.356674][T31020] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.468724][ T1323] loop9: detected capacity change from 0 to 1024 [ 546.519027][ T1323] EXT4-fs: Ignoring removed orlov option [ 546.547019][ T1323] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.613274][ T1323] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.687608][ T1447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.695130][ T1447] batadv0: mtu less than device minimum [ 546.701310][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.712084][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.722837][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.733513][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.744341][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.755061][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.765741][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.776529][ T1447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 546.793990][ T1447] batadv_slave_0: entered promiscuous mode [ 546.819088][ T1449] netlink: 'syz.7.13476': attribute type 4 has an invalid length. [ 546.891903][ T1569] tipc: Enabling of bearer rejected, already enabled [ 546.899545][ T1574] loop9: detected capacity change from 0 to 4096 [ 546.923898][ T1581] loop7: detected capacity change from 0 to 512 [ 546.938528][ T1574] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.963828][ T1581] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.002211][ T1581] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.134445][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.162238][ T1699] bond1: entered promiscuous mode [ 547.167368][ T1699] bond1: entered allmulticast mode [ 547.172815][ T1699] 8021q: adding VLAN 0 to HW filter on device bond1 [ 547.182547][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.193671][ T1699] bond1 (unregistering): Released all slaves [ 547.592212][ T1830] tipc: Started in network mode [ 547.597183][ T1830] tipc: Node identity 46247189d353, cluster identity 4711 [ 547.604424][ T1830] tipc: Enabled bearer , priority 0 [ 547.628858][ T1830] syzkaller0: entered promiscuous mode [ 547.634625][ T1830] syzkaller0: entered allmulticast mode [ 547.643114][ T1830] tipc: Resetting bearer [ 547.650393][ T6831] tipc: Resetting bearer [ 547.667942][ T1829] tipc: Resetting bearer [ 547.683924][ T1829] tipc: Disabling bearer [ 547.749654][ T1937] loop7: detected capacity change from 0 to 512 [ 547.756599][ T1937] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 547.768040][ T1937] EXT4-fs (loop7): 1 truncate cleaned up [ 547.774047][ T1937] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.823982][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.937424][ T1945] batadv_slave_0: entered promiscuous mode [ 547.973301][ T1947] syzkaller0: entered promiscuous mode [ 547.978952][ T1947] syzkaller0: entered allmulticast mode [ 547.993177][ T1949] SELinux: Context system_u:object_r:hald_log_t:s0 is not valid (left unmapped). [ 548.025155][ T1951] loop8: detected capacity change from 0 to 512 [ 548.053189][ T1951] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.067859][ T1951] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 548.144879][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.195019][ T1966] netlink: 'syz.9.13518': attribute type 27 has an invalid length. [ 548.233245][ T1968] loop7: detected capacity change from 0 to 128 [ 548.246888][ T1966] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.251384][ T1961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 548.254099][ T1966] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.318157][ T1966] batman_adv: batadv0: Interface deactivated: dummy0 [ 548.363354][ T1966] batadv_slave_0: left promiscuous mode [ 548.371589][ T1966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 548.429635][ T1966] geneve0: left allmulticast mode [ 548.436750][ T1966] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.445874][ T1966] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.454799][ T1966] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.463684][ T1966] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.491370][ T1970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.499497][ T1970] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.507584][ T1970] batman_adv: batadv0: Interface activated: dummy0 [ 548.545848][ T2080] netlink: 'syz.8.13522': attribute type 4 has an invalid length. [ 548.600668][ T2084] IPVS: Error connecting to the multicast addr [ 548.668534][ T2082] loop7: detected capacity change from 0 to 8192 [ 548.677898][ T2088] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13526'. [ 548.721140][ T2082] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 548.780808][ T2196] loop9: detected capacity change from 0 to 256 [ 548.791690][ T2201] netlink: 'syz.8.13526': attribute type 1 has an invalid length. [ 548.805583][ T2082] syzkaller1: entered promiscuous mode [ 548.811171][ T2082] syzkaller1: entered allmulticast mode [ 548.916833][ T2314] loop8: detected capacity change from 0 to 128 [ 548.938746][ T2314] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 549.050360][ T2324] loop7: detected capacity change from 0 to 512 [ 549.066777][ T2314] syz.8.13535: attempt to access beyond end of device [ 549.066777][ T2314] loop8: rw=2049, sector=148, nr_sectors = 89 limit=128 [ 549.087002][ T2324] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 549.120235][ T2324] EXT4-fs (loop7): 1 truncate cleaned up [ 549.133475][ T2324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.174055][ T2325] tipc: Started in network mode [ 549.178981][ T2325] tipc: Node identity 9e859ffb8b0d, cluster identity 4711 [ 549.186422][ T2325] tipc: Enabled bearer , priority 0 [ 549.202771][ T2363] loop8: detected capacity change from 0 to 2048 [ 549.223256][ T2322] tipc: Resetting bearer [ 549.263129][ T2322] tipc: Disabling bearer [ 549.275124][ T2363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.396875][ T2433] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 549.442861][ T2433] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 498 with error 28 [ 549.455268][ T2433] EXT4-fs (loop8): This should not happen!! Data will be lost [ 549.455268][ T2433] [ 549.465062][ T2433] EXT4-fs (loop8): Total free blocks count 0 [ 549.471042][ T2433] EXT4-fs (loop8): Free/Dirty block details [ 549.476958][ T2433] EXT4-fs (loop8): free_blocks=2415919504 [ 549.482695][ T2433] EXT4-fs (loop8): dirty_blocks=1392 [ 549.487985][ T2433] EXT4-fs (loop8): Block reservation details [ 549.494039][ T2433] EXT4-fs (loop8): i_reserved_data_blocks=103 [ 549.513124][ T2435] syzkaller0: entered promiscuous mode [ 549.518692][ T2435] syzkaller0: entered allmulticast mode [ 549.846686][ T2558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13560'. [ 549.851389][ T6858] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 498 with max blocks 2048 with error 28 [ 549.905388][ T2558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13560'. [ 550.042521][ T2564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13553'. [ 550.066271][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.106628][ T2572] loop7: detected capacity change from 0 to 2048 [ 550.109707][ T2569] macsec0: entered promiscuous mode [ 550.127942][ T2572] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.144754][ T2572] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.364236][T28696] EXT4-fs error (device loop7): ext4_readdir:261: inode #2: block 16: comm syz-executor: path /65/file0: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 550.404498][ T2778] program syz.8.13561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.418644][ T2778] netlink: 'syz.8.13561': attribute type 39 has an invalid length. [ 550.439988][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.578782][ T2894] loop8: detected capacity change from 0 to 512 [ 550.628304][ T2894] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.670536][ T2894] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.697323][ T2894] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.13567: corrupted inode contents [ 550.717990][ T2894] EXT4-fs error (device loop8): ext4_dirty_inode:6042: inode #2: comm syz.8.13567: mark_inode_dirty error [ 550.731752][ T2894] EXT4-fs error (device loop8): ext4_do_update_inode:5154: inode #2: comm syz.8.13567: corrupted inode contents [ 550.756602][ T2894] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #2: comm syz.8.13567: mark_inode_dirty error [ 550.795380][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.868593][ T3134] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13576'. [ 551.045026][ T3173] loop8: detected capacity change from 0 to 1024 [ 551.054278][ T3173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.241097][ T3382] netlink: 'syz.1.13581': attribute type 27 has an invalid length. [ 551.298033][ T3382] tipc: Resetting bearer [ 551.342723][ T3420] loop9: detected capacity change from 0 to 512 [ 551.350889][ T3420] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 551.374503][ T3420] EXT4-fs (loop9): invalid journal inode [ 551.380343][ T3420] EXT4-fs (loop9): can't get journal size [ 551.408517][ T3420] EXT4-fs (loop9): 1 truncate cleaned up [ 551.423651][ T3420] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.458756][ T3382] wg2: left promiscuous mode [ 551.463543][ T3382] wg2: left allmulticast mode [ 551.470262][ T3382] geneve0: left allmulticast mode [ 551.475426][ T3382] geneve1: left promiscuous mode [ 551.480936][ T3382] ip6gre1: left promiscuous mode [ 551.486018][ T3382] ip6gre1: left allmulticast mode [ 551.491394][ T3382] bond0: left promiscuous mode [ 551.509636][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 551.509647][ T29] audit: type=1400 audit(2000045778.498:59256): avc: denied { create } for pid=3419 comm="syz.9.13582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 551.536808][ T3420] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 551.543333][ T3420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 551.550811][ T3420] vhci_hcd vhci_hcd.0: Device attached [ 551.557084][ T29] audit: type=1400 audit(2000045778.555:59257): avc: denied { read } for pid=3490 comm="vhci_rx" scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 551.558044][ T3382] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.586245][ T3382] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.594655][ T3382] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.603124][ T3382] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.615892][ T3490] vhci_hcd: connection closed [ 551.616100][ T6831] vhci_hcd: stop threads [ 551.625129][ T6831] vhci_hcd: release socket [ 551.629544][ T6831] vhci_hcd: disconnect device [ 551.654887][ T3382] gtp0: left promiscuous mode [ 551.663112][ T3382] ip6gre3: left allmulticast mode [ 551.710093][ T3493] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 551.731979][ T29] audit: type=1400 audit(2000045778.714:59258): avc: denied { setopt } for pid=3492 comm="syz.1.13583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 551.866289][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.967170][ T3512] bond5: entered promiscuous mode [ 551.972256][ T3512] bond5: entered allmulticast mode [ 551.988691][ T3512] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.004946][ T3512] batman_adv: batadv1: Adding interface: bond5 [ 552.011202][ T3512] batman_adv: batadv1: The MTU of interface bond5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.016249][ T29] audit: type=1400 audit(2000045778.976:59259): avc: denied { bind } for pid=3518 comm="syz.1.13594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 552.036437][ T3512] batman_adv: batadv1: Interface activated: bond5 [ 552.055900][ T29] audit: type=1400 audit(2000045778.976:59260): avc: denied { name_bind } for pid=3518 comm="syz.1.13594" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 552.083375][ T29] audit: type=1400 audit(2000045778.976:59261): avc: denied { node_bind } for pid=3518 comm="syz.1.13594" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 552.183406][ T29] audit: type=1400 audit(2000045779.106:59262): avc: denied { read write } for pid=29635 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.207996][ T29] audit: type=1400 audit(2000045779.106:59263): avc: denied { open } for pid=29635 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.232530][ T29] audit: type=1400 audit(2000045779.106:59264): avc: denied { recv } for pid=24734 comm="syz.3.12727" saddr=10.128.0.163 src=30030 daddr=10.128.0.189 dest=34228 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 552.258226][ T29] audit: type=1400 audit(2000045779.106:59265): avc: denied { ioctl } for pid=29635 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 552.288608][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.741183][ T3758] loop7: detected capacity change from 0 to 128 [ 552.749246][ T3758] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 552.794841][ T3758] syz.7.13607: attempt to access beyond end of device [ 552.794841][ T3758] loop7: rw=2049, sector=148, nr_sectors = 89 limit=128 [ 552.823584][ T3758] syz.7.13607: attempt to access beyond end of device [ 552.823584][ T3758] loop7: rw=2049, sector=236, nr_sectors = 1 limit=128 [ 553.354482][ T4004] netlink: 'syz.9.13624': attribute type 9 has an invalid length. [ 553.420008][ T4009] serio: Serial port ptm0 [ 553.604449][ T4178] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13630'. [ 553.643334][ T4178] bridge0: entered promiscuous mode [ 553.654274][ T4178] macvtap1: entered promiscuous mode [ 553.659658][ T4178] macvtap1: entered allmulticast mode [ 553.665076][ T4178] bridge0: entered allmulticast mode [ 553.699929][ T4227] bridge0: left allmulticast mode [ 553.705157][ T4227] bridge0: left promiscuous mode [ 553.756550][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13634'. [ 553.821924][ T4337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13645'. [ 553.842673][ T4339] loop8: detected capacity change from 0 to 512 [ 553.870224][ T4339] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.888940][ T4339] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.911036][ T4345] 0ŞXıĤD: left allmulticast mode [ 553.916046][ T4345] 0ŞXıĤD: left promiscuous mode [ 553.921207][ T4345] bridge0: port 1(30ŞXıĤD) entered disabled state [ 554.117474][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.151102][ T4358] loop8: detected capacity change from 0 to 1024 [ 554.158418][ T4358] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 554.169472][ T4358] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 554.181678][ T4358] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 554.206763][ T4358] EXT4-fs (loop8): invalid journal inode [ 554.235444][ T4358] EXT4-fs (loop8): can't get journal size [ 554.260836][ T4358] EXT4-fs error (device loop8): ext4_protect_reserved_inode:182: inode #3: comm syz.8.13642: blocks 2-2 from inode overlap system zone [ 554.271203][ T4374] netlink: 24 bytes leftover after parsing attributes in process `syz.9.13648'. [ 554.305758][ T4358] EXT4-fs (loop8): failed to initialize system zone (-117) [ 554.313160][ T4358] EXT4-fs (loop8): mount failed [ 554.375238][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13648'. [ 554.425026][ T4385] loop7: detected capacity change from 0 to 512 [ 554.442714][ T4385] EXT4-fs: Ignoring removed orlov option [ 554.448536][ T4385] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.486220][ T4385] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 554.494211][ T4385] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e118, mo2=0002] [ 554.513080][ T4385] System zones: 0-1, 15-15, 18-18, 34-34 [ 554.523900][ T4385] EXT4-fs (loop7): orphan cleanup on readonly fs [ 554.539105][ T4385] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 554.553757][ T4385] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 554.586820][ T4424] loop8: detected capacity change from 0 to 512 [ 554.631552][ T4385] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13651: bg 0: block 40: padding at end of block bitmap is not set [ 554.635419][ T4424] EXT4-fs (loop8): failed to initialize system zone (-117) [ 554.653365][ T4424] EXT4-fs (loop8): mount failed [ 554.669900][ T4385] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 554.698301][ T4501] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.707137][ T4501] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.715958][ T4501] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.724676][ T4501] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 554.735954][ T4385] EXT4-fs (loop7): 1 truncate cleaned up [ 554.742008][ T4385] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 554.765979][ T4501] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 554.788044][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.840866][ T4508] loop8: detected capacity change from 0 to 8192 [ 554.885625][ T4518] loop7: detected capacity change from 0 to 1024 [ 554.894161][ T4508] loop8: p1 p2 p3 [ 554.897985][ T4508] loop8: p1 start 51379968 is beyond EOD, truncated [ 554.916290][ T4508] loop8: p3 size 100663552 extends beyond EOD, truncated [ 554.924441][ T4518] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 554.964965][ T4518] veth1_macvtap: left promiscuous mode [ 554.975398][ T4518] macsec0: entered promiscuous mode [ 555.047989][ T4728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13670'. [ 555.557930][ T4951] netlink: 'syz.8.13680': attribute type 13 has an invalid length. [ 555.683516][ T4953] netlink: 'syz.4.13681': attribute type 4 has an invalid length. [ 555.731011][T30147] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 555.742139][ T4957] netlink: 'syz.4.13683': attribute type 1 has an invalid length. [ 555.754815][T30147] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 555.794562][ T4957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 555.815523][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13694'. [ 556.207942][ T5189] loop7: detected capacity change from 0 to 2048 [ 556.350700][ T5189] loop7: p1 < > p4 [ 556.356953][ T5189] loop7: p4 size 8388608 extends beyond EOD, truncated [ 556.447491][ T5301] loop7: detected capacity change from 0 to 2048 [ 556.477042][ T5301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.682426][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.695399][ T5518] xt_hashlimit: max too large, truncated to 1048576 [ 556.709900][ T5518] Cannot find set identified by id 0 to match [ 556.728616][ T5520] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13710'. [ 556.768331][ T5522] netlink: 'syz.7.13709': attribute type 9 has an invalid length. [ 556.828110][ T5528] serio: Serial port ptm0 [ 556.863911][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 556.863925][ T29] audit: type=1326 audit(2000045783.512:59845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72b41f3d67 code=0x7ffc0000 [ 556.893720][ T29] audit: type=1326 audit(2000045783.512:59846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72b4198fa9 code=0x7ffc0000 [ 556.917307][ T29] audit: type=1326 audit(2000045783.512:59847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5069 comm="syz.9.13688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 557.017033][ T5525] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 557.141565][ T29] audit: type=1326 audit(2000045783.774:59848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.8.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fbd2cda9 code=0x7ffc0000 [ 557.239656][ T29] audit: type=1326 audit(2000045783.793:59849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.8.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5fbd2cda9 code=0x7ffc0000 [ 557.263412][ T29] audit: type=1326 audit(2000045783.793:59850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.8.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fbd2cda9 code=0x7ffc0000 [ 557.287091][ T29] audit: type=1326 audit(2000045783.793:59851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.8.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5fbd2cda9 code=0x7ffc0000 [ 557.310739][ T29] audit: type=1326 audit(2000045783.812:59852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5634 comm="syz.8.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd5fbd2cda9 code=0x7ffc0000 [ 557.334240][ T29] audit: type=1326 audit(2000045783.821:59853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.8.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd5fbd5f665 code=0x7ffc0000 [ 557.508797][ T5635] : renamed from bond0 [ 557.550862][ T5525] ip6gretap0 speed is unknown, defaulting to 1000 [ 557.557691][ T5525] lo speed is unknown, defaulting to 1000 [ 557.575465][ T5643] loop8: detected capacity change from 0 to 164 [ 557.588340][ T29] audit: type=1326 audit(2000045783.980:59854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5637 comm="syz.8.13715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd5fbd2cda9 code=0x7ffc0000 [ 557.638201][ T5646] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13718'. [ 557.647331][ T5646] netlink: 80 bytes leftover after parsing attributes in process `syz.7.13718'. [ 557.954782][ T5762] netlink: 'syz.1.13735': attribute type 4 has an invalid length. [ 558.062961][ T5777] blktrace: Concurrent blktraces are not allowed on loop3 [ 558.071201][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13727'. [ 558.178590][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13734'. [ 558.205598][ T5785] loop9: detected capacity change from 0 to 512 [ 558.230277][ T5785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.261172][ T5785] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.287677][ T5790] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 558.315748][ T5797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5797 comm=syz.1.13748 [ 558.336999][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.374646][ T5790] ip6gretap0 speed is unknown, defaulting to 1000 [ 558.397211][ T5790] lo speed is unknown, defaulting to 1000 [ 558.573927][ T5914] netlink: 63 bytes leftover after parsing attributes in process `syz.8.13745'. [ 558.849154][ T5937] netlink: 'syz.1.13756': attribute type 4 has an invalid length. [ 558.851422][ T5938] IPVS: Unknown mcast interface: vcan0 [ 558.865986][ T5937] netlink: 'syz.1.13756': attribute type 4 has an invalid length. [ 559.157217][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13758'. [ 559.293530][ T5949] SELinux: security_context_str_to_sid ({˙) failed with errno=-22 [ 559.352053][ T5954] netlink: 'syz.1.13761': attribute type 10 has an invalid length. [ 559.360171][ T5954] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13761'. [ 559.373646][ T5954] net_ratelimit: 32 callbacks suppressed [ 559.373673][ T5954] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 560.381259][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13774'. [ 560.391515][ T6184] loop9: detected capacity change from 0 to 512 [ 560.430122][ T6184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.449425][ T6184] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 560.649178][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.690877][ T6302] loop7: detected capacity change from 0 to 512 [ 560.705937][ T6302] EXT4-fs: Ignoring removed oldalloc option [ 560.721763][ T6302] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.13779: Parent and EA inode have the same ino 15 [ 560.750599][ T6302] EXT4-fs (loop7): Remounting filesystem read-only [ 560.757352][ T6302] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 560.786830][ T6302] EXT4-fs (loop7): 1 orphan inode deleted [ 560.787146][ T6306] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 560.810801][ T6302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.829761][ T6306] ip6gretap0 speed is unknown, defaulting to 1000 [ 560.836738][ T6306] lo speed is unknown, defaulting to 1000 [ 560.844653][ T6302] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 560.859866][ T6302] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.937551][ T6415] loop7: detected capacity change from 0 to 512 [ 560.955047][ T6415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 560.961688][ T6415] EXT4-fs: Ignoring removed oldalloc option [ 560.967632][ T6415] EXT4-fs: Ignoring removed mblk_io_submit option [ 561.021355][ T6415] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 561.387260][ T6634] : renamed from bond0 [ 561.441215][ T6645] __nla_validate_parse: 2 callbacks suppressed [ 561.441239][ T6645] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13788'. [ 561.483029][ T6647] loop8: detected capacity change from 0 to 512 [ 561.513832][ T6647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.553589][ T6647] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.582700][ T6647] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 561.787401][ T6661] netlink: 36 bytes leftover after parsing attributes in process `syz.9.13797'. [ 562.090166][ T6663] loop7: detected capacity change from 0 to 512 [ 562.115501][ T6663] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 562.177154][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.282706][ T29] kauditd_printk_skb: 383 callbacks suppressed [ 562.282720][ T29] audit: type=1326 audit(2000045788.582:60238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.346442][ T29] audit: type=1326 audit(2000045788.620:60239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.370111][ T29] audit: type=1326 audit(2000045788.620:60240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.393725][ T29] audit: type=1326 audit(2000045788.620:60241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.417354][ T29] audit: type=1326 audit(2000045788.620:60242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.440864][ T29] audit: type=1326 audit(2000045788.620:60243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.464448][ T29] audit: type=1326 audit(2000045788.620:60244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.488067][ T29] audit: type=1326 audit(2000045788.629:60245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.511547][ T29] audit: type=1326 audit(2000045788.629:60246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.535120][ T29] audit: type=1326 audit(2000045788.629:60247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6669 comm="syz.4.13802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 562.743327][ T6682] netlink: 'syz.9.13808': attribute type 3 has an invalid length. [ 562.767586][ T6682] loop9: detected capacity change from 0 to 512 [ 562.796053][ T6682] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 562.838759][ T6682] EXT4-fs (loop9): mount failed [ 563.154452][ T7026] ip6gretap0: entered promiscuous mode [ 563.173098][ T7026] batadv_slave_0: entered promiscuous mode [ 563.440118][ T7146] loop9: detected capacity change from 0 to 512 [ 563.468767][ T7150] IPv4: Oversized IP packet from 127.202.26.0 [ 563.470169][ T7146] EXT4-fs: Ignoring removed nobh option [ 563.480488][ T7146] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.496967][ T7146] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.591169][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13833'. [ 563.600302][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13833'. [ 563.682146][ T7165] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 563.769816][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.868254][ T7169] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 563.930881][ T7169] ip6gretap0 speed is unknown, defaulting to 1000 [ 563.957750][ T7169] lo speed is unknown, defaulting to 1000 [ 564.198070][ T7273] netlink: 'syz.8.13842': attribute type 4 has an invalid length. [ 564.219245][ T7273] netlink: 'syz.8.13842': attribute type 4 has an invalid length. [ 564.271825][ T7394] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 564.368131][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13850'. [ 564.409188][ T7507] loop8: detected capacity change from 0 to 512 [ 564.419362][ T7507] EXT4-fs: Ignoring removed nobh option [ 564.424949][ T7507] EXT4-fs: Ignoring removed mblk_io_submit option [ 564.453099][ T7507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.466008][ T7503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.690646][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.603034][ T7846] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19971 - 0 [ 565.611416][ T7846] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19971 - 0 [ 565.619707][ T7846] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19971 - 0 [ 565.628127][ T7846] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19971 - 0 [ 565.740896][ T7850] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 565.764851][ T7952] loop8: detected capacity change from 0 to 128 [ 565.787924][ T7952] FAT-fs (loop8): bogus logical sector size 0 [ 565.789910][ T7850] ip6gretap0 speed is unknown, defaulting to 1000 [ 565.794065][ T7952] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 565.794080][ T7952] FAT-fs (loop8): Can't find a valid FAT filesystem [ 565.801095][ T7850] lo speed is unknown, defaulting to 1000 [ 566.098924][ T8066] netlink: 'syz.8.13873': attribute type 21 has an invalid length. [ 566.106901][ T8066] netlink: 'syz.8.13873': attribute type 20 has an invalid length. [ 566.114865][ T8066] IPv6: NLM_F_CREATE should be specified when creating new route [ 566.225744][ T8066] loop8: detected capacity change from 0 to 512 [ 566.249646][ T8066] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.255223][ T8072] loop9: detected capacity change from 0 to 8192 [ 566.272270][ T8066] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.290646][ T8072] vfat: Unknown parameter '' [ 566.330002][ T8067] Process accounting resumed [ 566.382168][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.470786][ T8190] loop8: detected capacity change from 0 to 128 [ 566.524451][ T8194] loop9: detected capacity change from 0 to 512 [ 566.572679][ T8194] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.642533][ T8194] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.878325][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.048202][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13891'. [ 567.099626][ T8434] loop7: detected capacity change from 0 to 512 [ 567.121044][ T8321] batman_adv: batadv0: Interface deactivated: dummy0 [ 567.121196][ T8434] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.148745][ T8321] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.157845][ T8321] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.166796][ T8321] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.175683][ T8321] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.209759][ T8434] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.13899: corrupted in-inode xattr: invalid ea_ino [ 567.272772][ T8434] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.13899: couldn't read orphan inode 15 (err -117) [ 567.334016][ T8434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.410428][ T8549] loop8: detected capacity change from 0 to 128 [ 567.431667][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.634758][ T8660] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 567.658526][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 567.658542][ T29] audit: type=1326 audit(2000308193.600:60451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8636 comm="syz.7.13907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 567.745474][ T8660] ip6gretap0 speed is unknown, defaulting to 1000 [ 567.763573][ T8660] lo speed is unknown, defaulting to 1000 [ 567.828651][ T8680] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.13917'. [ 567.846564][ T8680] netlink: zone id is out of range [ 567.851755][ T8680] netlink: zone id is out of range [ 567.866501][ T8680] netlink: zone id is out of range [ 567.877553][ T8680] netlink: zone id is out of range [ 567.907133][ T8680] netlink: set zone limit has 8 unknown bytes [ 567.998839][ T8695] netlink: 'syz.8.13922': attribute type 4 has an invalid length. [ 568.021062][ T8695] netlink: 'syz.8.13922': attribute type 4 has an invalid length. [ 568.047507][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13924'. [ 568.235655][ T29] audit: type=1326 audit(2000308194.152:60452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.279071][ T8906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 568.314309][ T29] audit: type=1326 audit(2000308194.170:60453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.335356][ T8908] loop9: detected capacity change from 0 to 2048 [ 568.345994][ T29] audit: type=1326 audit(2000308194.170:60454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.346027][ T29] audit: type=1326 audit(2000308194.170:60455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.346048][ T29] audit: type=1326 audit(2000308194.180:60456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.423201][ T29] audit: type=1326 audit(2000308194.180:60457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.446895][ T29] audit: type=1326 audit(2000308194.180:60458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.470546][ T29] audit: type=1326 audit(2000308194.180:60459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.494032][ T29] audit: type=1326 audit(2000308194.180:60460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8901 comm="syz.4.13925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 568.600742][ T8908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.629388][ T8908] netlink: 76 bytes leftover after parsing attributes in process `syz.9.13928'. [ 568.695337][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.720078][ T8916] loop7: detected capacity change from 0 to 512 [ 568.748614][ T8916] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.767316][ T8916] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.899188][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13935'. [ 568.908402][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13935'. [ 568.949306][ T8928] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13935'. [ 569.015618][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13936'. [ 569.040327][ T8932] netlink: 'syz.9.13937': attribute type 10 has an invalid length. [ 569.048469][ T8932] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13937'. [ 569.082192][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.101380][ T8932] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.109601][ T8932] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.117900][ T8932] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.126098][ T8932] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.165546][ T8932] team0: Port device geneve1 added [ 569.274558][ T8937] netlink: 96 bytes leftover after parsing attributes in process `syz.4.13939'. [ 569.553488][ T8946] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 569.845925][ T8952] loop8: detected capacity change from 0 to 512 [ 569.873534][ T8952] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 570.066183][ T8954] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.139794][ T8954] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.205790][ T8954] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.258591][ T8954] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.320763][ T8954] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.358197][ T8954] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.395591][ T8954] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.427645][ T8954] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.428855][ T9064] xt_hashlimit: max too large, truncated to 1048576 [ 570.525801][ T9062] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 570.627382][ T9062] ip6gretap0 speed is unknown, defaulting to 1000 [ 570.654142][ T9062] lo speed is unknown, defaulting to 1000 [ 571.648240][ T9295] loop7: detected capacity change from 0 to 512 [ 571.662263][ T9184] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 571.730412][ T9295] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 571.783288][ T9295] EXT4-fs (loop7): 1 truncate cleaned up [ 571.790143][ T9184] ip6gretap0 speed is unknown, defaulting to 1000 [ 571.792719][ T9295] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.809336][ T9184] lo speed is unknown, defaulting to 1000 [ 572.007180][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.034788][ T9310] loop9: detected capacity change from 0 to 164 [ 572.048706][ T9310] Unable to read rock-ridge attributes [ 572.065453][ T9310] Unable to read rock-ridge attributes [ 572.539495][ T9536] tipc: Enabling of bearer rejected, already enabled [ 572.593203][ T9540] __nla_validate_parse: 1 callbacks suppressed [ 572.593218][ T9540] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13979'. [ 572.746227][ T9542] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 572.753659][ T9561] loop8: detected capacity change from 0 to 512 [ 572.769584][ T9561] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 572.792710][ T9561] EXT4-fs (loop8): 1 truncate cleaned up [ 572.803780][ T9561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.807625][ T9542] ip6gretap0 speed is unknown, defaulting to 1000 [ 572.824932][ T9542] lo speed is unknown, defaulting to 1000 [ 572.915624][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.106095][ T9787] netlink: 'syz.4.13986': attribute type 10 has an invalid length. [ 573.114126][ T9787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13986'. [ 573.155619][ T9787] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 573.195645][ T9864] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13984'. [ 573.334530][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 573.334543][ T29] audit: type=1400 audit(2000308198.922:60745): avc: denied { wake_alarm } for pid=9866 comm="syz.4.13989" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 573.362696][ T9972] loop7: detected capacity change from 0 to 256 [ 573.395234][ T9971] loop9: detected capacity change from 0 to 512 [ 573.419797][ T9971] EXT4-fs: Ignoring removed mblk_io_submit option [ 573.443050][ T9971] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.13991: corrupted in-inode xattr: invalid ea_ino [ 573.462631][ T29] audit: type=1326 audit(2000308199.006:60746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.486419][ T29] audit: type=1326 audit(2000308199.006:60747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.510179][ T29] audit: type=1326 audit(2000308199.006:60748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.533844][ T29] audit: type=1326 audit(2000308199.006:60749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.546533][ T9971] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.13991: couldn't read orphan inode 15 (err -117) [ 573.557650][ T29] audit: type=1326 audit(2000308199.006:60750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.593078][ T29] audit: type=1326 audit(2000308199.006:60751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.616661][ T29] audit: type=1326 audit(2000308199.006:60752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.629265][T10059] netlink: 'syz.4.13996': attribute type 4 has an invalid length. [ 573.640268][ T29] audit: type=1326 audit(2000308199.006:60753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.640298][ T29] audit: type=1326 audit(2000308199.006:60754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9899 comm="syz.7.13990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f0093d3cda9 code=0x7ffc0000 [ 573.708881][ T9971] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.822589][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.824277][T10197] netlink: 'syz.1.14000': attribute type 10 has an invalid length. [ 573.839521][T10197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14000'. [ 573.866123][T10197] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 574.057960][ T35] IPVS: starting estimator thread 0... [ 574.127538][T10265] xt_connbytes: Forcing CT accounting to be enabled [ 574.145768][T10265] Cannot find set identified by id 0 to match [ 574.179683][T10216] IPVS: using max 3024 ests per chain, 151200 per kthread [ 574.190920][T10265] loop9: detected capacity change from 0 to 164 [ 574.225305][T10265] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 574.262674][T10265] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 574.293088][T10265] rock: directory entry would overflow storage [ 574.299389][T10265] rock: sig=0x4f50, size=4, remaining=3 [ 574.305020][T10265] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 574.337240][T10322] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 574.441016][T10322] ip6gretap0 speed is unknown, defaulting to 1000 [ 574.460155][T10322] lo speed is unknown, defaulting to 1000 [ 575.301138][T10863] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 575.412704][T10863] ip6gretap0 speed is unknown, defaulting to 1000 [ 575.440246][T10863] lo speed is unknown, defaulting to 1000 [ 575.533219][T10973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14031'. [ 575.614944][T10975] netlink: 'syz.4.14032': attribute type 3 has an invalid length. [ 575.740889][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14036'. [ 575.824132][T11085] loop7: detected capacity change from 0 to 512 [ 575.856984][T11085] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 575.866132][T11085] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 576.844319][T11554] hub 1-0:1.0: USB hub found [ 576.853819][T11560] Cannot find add_set index 0 as target [ 576.861316][T11554] hub 1-0:1.0: 8 ports detected [ 576.885696][T11554] loop8: detected capacity change from 0 to 1024 [ 576.904072][T11554] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 576.915031][T11554] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 576.942983][T11554] JBD2: no valid journal superblock found [ 576.948818][T11554] EXT4-fs (loop8): Could not load journal inode [ 577.406623][T11855] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14066'. [ 577.421048][T11855] team0: entered promiscuous mode [ 577.426113][T11855] team_slave_0: entered promiscuous mode [ 577.431915][T11855] team_slave_1: entered promiscuous mode [ 577.438936][T11855] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 577.447624][T11855] team0: left promiscuous mode [ 577.452453][T11855] team_slave_0: left promiscuous mode [ 577.457948][T11855] team_slave_1: left promiscuous mode [ 577.478686][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14067'. [ 577.524222][T11957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14067'. [ 578.259907][T11995] loop9: detected capacity change from 0 to 512 [ 578.301697][T11995] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.346739][T11995] ext4 filesystem being mounted at /116/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 578.699970][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 578.699983][ T29] audit: type=1326 audit(2000308203.945:61301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6e5f13d67 code=0x7ffc0000 [ 578.783986][ T29] audit: type=1326 audit(2000308203.945:61302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6e5eb8fa9 code=0x7ffc0000 [ 578.807721][ T29] audit: type=1326 audit(2000308203.945:61303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 578.831807][ T29] audit: type=1326 audit(2000308203.945:61304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6e5f13d67 code=0x7ffc0000 [ 578.855401][ T29] audit: type=1326 audit(2000308203.945:61305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6e5eb8fa9 code=0x7ffc0000 [ 578.879055][ T29] audit: type=1326 audit(2000308203.945:61306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 578.902709][ T29] audit: type=1326 audit(2000308203.945:61307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6e5f13d67 code=0x7ffc0000 [ 578.926470][ T29] audit: type=1326 audit(2000308203.945:61308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff6e5eb8fa9 code=0x7ffc0000 [ 578.950041][ T29] audit: type=1326 audit(2000308203.945:61309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 578.973688][ T29] audit: type=1326 audit(2000308203.945:61310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11982 comm="syz.1.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff6e5f13d67 code=0x7ffc0000 [ 579.189568][T12010] loop8: detected capacity change from 0 to 512 [ 579.210311][T12010] EXT4-fs: Ignoring removed oldalloc option [ 579.235276][T12010] EXT4-fs error (device loop8): ext4_orphan_get:1389: inode #15: comm syz.8.14085: iget: bad extended attribute block 1 [ 579.271680][T12010] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.14085: couldn't read orphan inode 15 (err -117) [ 579.307278][T12010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.342001][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14085'. [ 579.351037][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14085'. [ 579.383591][T12010] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14085'. [ 579.586745][T12125] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 579.652493][T12125] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 579.706413][T12125] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 579.769964][T12125] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19971 - 0 [ 579.819945][T12125] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19971 - 0 [ 579.845859][T12125] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19971 - 0 [ 579.878300][T12125] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19971 - 0 [ 579.900469][T12125] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19971 - 0 [ 580.081493][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.231346][T12337] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14095'. [ 580.245856][T12339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14096'. [ 580.345667][T12349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14100'. [ 580.661989][T12359] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 580.711425][T12359] ip6gretap0 speed is unknown, defaulting to 1000 [ 580.718451][T12359] lo speed is unknown, defaulting to 1000 [ 580.923008][T12346] loop7: detected capacity change from 0 to 8192 [ 581.327319][T12469] loop8: detected capacity change from 0 to 512 [ 581.363805][T12469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.411580][T12469] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 581.517754][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.651914][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.678592][T12582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14113'. [ 581.687762][T12582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.14113'. [ 581.815957][T12596] netlink: 4 bytes leftover after parsing attributes in process `+|[@'. [ 581.837746][T12596] netlink: 4 bytes leftover after parsing attributes in process `+|[@'. [ 582.081085][T12715] netlink: 'syz.4.14123': attribute type 1 has an invalid length. [ 582.090433][T12719] 9pnet_fd: Insufficient options for proto=fd [ 582.103516][T12715] netlink: 'syz.4.14123': attribute type 10 has an invalid length. [ 583.059762][T13060] tipc: New replicast peer: 255.255.255.255 [ 583.065933][T13060] tipc: Enabled bearer , priority 10 [ 583.201089][T13062] loop7: detected capacity change from 0 to 2048 [ 583.225676][T13062] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 583.376287][T13057] delete_channel: no stack [ 583.696780][T13182] loop8: detected capacity change from 0 to 512 [ 583.734277][T13182] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 583.753276][T13182] EXT4-fs (loop8): orphan cleanup on readonly fs [ 583.768130][T13184] loop9: detected capacity change from 0 to 4096 [ 583.777627][T13182] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1 [ 583.812415][T13182] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 583.863994][T13182] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 583.875466][T13182] EXT4-fs (loop8): 1 truncate cleaned up [ 583.883495][T13184] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.915832][T13182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 583.960118][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.123347][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.168558][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 584.168571][ T29] audit: type=1400 audit(2000308209.052:61793): avc: denied { map } for pid=13307 comm="syz.9.14158" path="socket:[108404]" dev="sockfs" ino=108404 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 584.280373][ T3372] tipc: Node number set to 2507633033 [ 584.927187][T13314] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 584.984868][T13314] ip6gretap0 speed is unknown, defaulting to 1000 [ 584.991679][T13314] lo speed is unknown, defaulting to 1000 [ 585.272438][T13418] xt_hashlimit: max too large, truncated to 1048576 [ 585.336874][T13418] Cannot find set identified by id 0 to match [ 585.383692][T13425] loop9: detected capacity change from 0 to 512 [ 585.403062][T13425] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 585.581506][T13541] __nla_validate_parse: 6 callbacks suppressed [ 585.581520][T13541] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.14167'. [ 585.692232][T13433] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.14167'. [ 585.799045][ T29] audit: type=1326 audit(2000308210.577:61794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 585.822823][ T29] audit: type=1326 audit(2000308210.577:61795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 585.846648][ T29] audit: type=1326 audit(2000308210.577:61796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 585.870365][ T29] audit: type=1326 audit(2000308210.577:61797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 585.893953][ T29] audit: type=1326 audit(2000308210.587:61798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 585.917676][ T29] audit: type=1326 audit(2000308210.587:61799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 585.944835][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14172'. [ 585.974674][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14172'. [ 586.009168][T13759] bridge0: entered allmulticast mode [ 586.014579][ T29] audit: type=1326 audit(2000308210.624:61800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 586.038386][ T29] audit: type=1326 audit(2000308210.624:61801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 586.062152][ T29] audit: type=1326 audit(2000308210.717:61802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13746 comm="syz.1.14170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ff6e5f1cda9 code=0x7ffc0000 [ 586.151698][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14176'. [ 586.252582][T13873] pim6reg: entered allmulticast mode [ 586.306706][T13873] pim6reg: left allmulticast mode [ 586.333836][T13878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14182'. [ 586.466373][T14086] loop8: detected capacity change from 0 to 512 [ 586.487298][T14086] EXT4-fs (loop8): too many log groups per flexible block group [ 586.495008][T14086] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 586.501985][T14086] EXT4-fs (loop8): mount failed [ 586.756563][T14302] tipc: Enabling of bearer rejected, already enabled [ 586.974778][T14314] loop8: detected capacity change from 0 to 2048 [ 587.803153][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14207'. [ 588.026975][T14683] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 588.073500][T14683] ip6gretap0 speed is unknown, defaulting to 1000 [ 588.080406][T14683] lo speed is unknown, defaulting to 1000 [ 588.181934][T14746] x_tables: duplicate underflow at hook 2 [ 588.283024][T14750] netlink: 'syz.4.14210': attribute type 10 has an invalid length. [ 588.674488][T14959] wg2: entered promiscuous mode [ 588.679395][T14959] wg2: entered allmulticast mode [ 588.727006][T14957] loop7: detected capacity change from 0 to 2048 [ 588.807935][T14957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.821582][T14957] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.162969][ T6846] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:37: bg 0: block 345: padding at end of block bitmap is not set [ 589.229569][ T6846] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 755 with error 117 [ 589.242422][ T6846] EXT4-fs (loop7): This should not happen!! Data will be lost [ 589.242422][ T6846] [ 589.428578][T15279] 9pnet_fd: Insufficient options for proto=fd [ 589.535724][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 589.535761][ T29] audit: type=1326 audit(2000308214.076:61843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.583980][ T29] audit: type=1326 audit(2000308214.104:61844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.607684][ T29] audit: type=1326 audit(2000308214.104:61845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.631602][ T29] audit: type=1326 audit(2000308214.104:61846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.655417][ T29] audit: type=1326 audit(2000308214.113:61847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.679422][ T29] audit: type=1326 audit(2000308214.113:61848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.703143][ T29] audit: type=1326 audit(2000308214.113:61849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.726933][ T29] audit: type=1326 audit(2000308214.113:61850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.750655][ T29] audit: type=1326 audit(2000308214.113:61851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 589.774436][ T29] audit: type=1326 audit(2000308214.113:61852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15281 comm="syz.4.14221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a1a86cda9 code=0x7ffc0000 [ 590.120239][T15396] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 590.153692][T15396] ip6gretap0 speed is unknown, defaulting to 1000 [ 590.162244][T15396] lo speed is unknown, defaulting to 1000 [ 591.002406][T15401] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14226'. [ 591.388217][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14227'. [ 591.405826][T15560] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 591.549603][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.564653][T15623] tipc: Started in network mode [ 591.569573][T15623] tipc: Node identity ac14140f, cluster identity 4711 [ 591.577582][T15623] tipc: New replicast peer: 255.255.255.255 [ 591.583863][T15623] tipc: Enabled bearer , priority 10 [ 591.626727][T15630] loop7: detected capacity change from 0 to 164 [ 591.634806][T15630] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 591.678096][T15634] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 591.697515][T15636] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14241'. [ 591.743313][T15638] loop8: detected capacity change from 0 to 1024 [ 591.750445][T15638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 591.773655][T15638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.798613][T15638] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 591.822418][T15638] program syz.8.14242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.875400][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.886167][T15644] netlink: 'syz.1.14244': attribute type 4 has an invalid length. [ 591.903186][T15644] netlink: 'syz.1.14244': attribute type 4 has an invalid length. [ 591.924557][T15646] loop8: detected capacity change from 0 to 128 [ 591.943061][T15646] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 591.959797][T15646] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 591.991561][ T6826] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 592.136732][T15655] loop9: detected capacity change from 0 to 1024 [ 592.145617][T15655] EXT4-fs: Ignoring removed nobh option [ 592.151249][T15655] EXT4-fs: Ignoring removed bh option [ 592.307365][T15685] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 592.354833][T15685] ip6gretap0 speed is unknown, defaulting to 1000 [ 592.361772][T15685] lo speed is unknown, defaulting to 1000 [ 592.494109][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14250'. [ 592.664288][T15655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.679870][T15864] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14251'. [ 592.689052][T15864] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14251'. [ 592.712507][T15655] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.14249: Allocating blocks 497-513 which overlap fs metadata [ 592.743034][T15864] team0: entered promiscuous mode [ 592.748216][T15864] team_slave_0: entered promiscuous mode [ 592.753991][T15864] team_slave_1: entered promiscuous mode [ 592.772769][T15864] bond0: entered promiscuous mode [ 592.777869][T15864] bond_slave_0: entered promiscuous mode [ 592.783643][T15864] bond_slave_1: entered promiscuous mode [ 592.791213][ T3378] tipc: Node number set to 2886997007 [ 592.798724][T15864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.807038][T15864] Cannot create hsr debugfs directory [ 592.814995][T15864] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 592.830933][T15655] tipc: Enabled bearer , priority 0 [ 592.832295][T15869] netlink: 244 bytes leftover after parsing attributes in process `syz.4.14253'. [ 592.861387][T15655] +: renamed from syzkaller0 [ 592.874272][T15655] tipc: Disabling bearer [ 592.876201][T15871] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14254'. [ 592.983963][T15654] EXT4-fs (loop9): pa ffff8881048155b0: logic 128, phys. 273, len 15 [ 592.992072][T15654] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 593.027884][T15882] program syz.8.14256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.040019][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.803943][T15901] netlink: 44 bytes leftover after parsing attributes in process `syz.7.14263'. [ 593.957437][T15875] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 594.258234][T16020] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 594.318142][T15875] ip6gretap0 speed is unknown, defaulting to 1000 [ 594.344536][T15875] lo speed is unknown, defaulting to 1000 [ 594.648718][T16222] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 594.722082][T16222] ip6gretap0 speed is unknown, defaulting to 1000 [ 594.745502][T16222] lo speed is unknown, defaulting to 1000 [ 594.829290][T16336] IPVS: Error connecting to the multicast addr [ 594.894582][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 594.894594][ T29] audit: type=1326 audit(2000308219.080:62245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72b41f3d67 code=0x7ffc0000 [ 595.028253][ T29] audit: type=1326 audit(2000308219.099:62246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72b4198fa9 code=0x7ffc0000 [ 595.051922][ T29] audit: type=1326 audit(2000308219.099:62247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 595.075656][ T29] audit: type=1326 audit(2000308219.117:62248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72b41f3d67 code=0x7ffc0000 [ 595.099264][ T29] audit: type=1326 audit(2000308219.117:62249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72b4198fa9 code=0x7ffc0000 [ 595.122956][ T29] audit: type=1326 audit(2000308219.117:62250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 595.146733][ T29] audit: type=1326 audit(2000308219.117:62251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72b41f3d67 code=0x7ffc0000 [ 595.170425][ T29] audit: type=1326 audit(2000308219.117:62252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f72b4198fa9 code=0x7ffc0000 [ 595.194123][ T29] audit: type=1326 audit(2000308219.117:62253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 595.217852][ T29] audit: type=1326 audit(2000308219.127:62254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16006 comm="syz.9.14267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f72b41f3d67 code=0x7ffc0000 [ 595.273715][T16556] loop8: detected capacity change from 0 to 512 [ 595.292395][T16556] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 595.339976][T16556] EXT4-fs (loop8): mount failed [ 595.363211][T16556] xt_CT: You must specify a L4 protocol and not use inversions on it [ 595.400657][T16556] loop8: detected capacity change from 0 to 512 [ 595.410673][T16564] loop9: detected capacity change from 0 to 512 [ 595.459455][T16556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.474795][T16564] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.501905][T16556] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 595.513562][T16564] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.616490][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.638657][T16676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 595.669718][T16564] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #19: comm syz.9.14285: corrupted inode contents [ 595.689445][T16564] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #19: comm syz.9.14285: mark_inode_dirty error [ 595.723284][T16564] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #19: comm syz.9.14285: corrupted inode contents [ 595.753165][T16564] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3006: inode #19: comm syz.9.14285: mark_inode_dirty error [ 595.779684][T16564] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3009: inode #19: comm syz.9.14285: mark inode dirty (error -117) [ 595.809788][T16564] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -117) [ 595.857325][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.391026][T16888] loop7: detected capacity change from 0 to 512 [ 596.404241][T16888] EXT4-fs: Ignoring removed bh option [ 596.419524][T16890] bridge0: entered allmulticast mode [ 596.427123][T16888] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 596.448515][T16888] EXT4-fs (loop7): 1 orphan inode deleted [ 596.449129][T16890] bridge_slave_1: left allmulticast mode [ 596.454328][T16888] EXT4-fs (loop7): 1 truncate cleaned up [ 596.466209][T16890] bridge_slave_1: left promiscuous mode [ 596.468049][T16888] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.472797][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.509486][T16890] bridge_slave_0: left allmulticast mode [ 596.515517][T16890] bridge_slave_0: left promiscuous mode [ 596.522121][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.868767][T17110] loop9: detected capacity change from 0 to 512 [ 596.889290][T17110] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.14302: corrupted in-inode xattr: invalid ea_ino [ 596.905339][T17110] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.14302: couldn't read orphan inode 15 (err -117) [ 596.919871][T17110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.195381][T17530] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.203665][T17530] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.212047][T17530] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.220436][T17530] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.284331][T17532] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 597.297543][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.368351][T17536] loop7: detected capacity change from 0 to 1024 [ 597.378343][T17536] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 597.436056][T17643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 597.447395][T17536] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 597.550253][T17536] EXT4-fs (loop7): orphan cleanup on readonly fs [ 597.562090][T17536] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 597.572052][T17536] EXT4-fs (loop7): Remounting filesystem read-only [ 597.582189][T17536] EXT4-fs (loop7): 1 orphan inode deleted [ 597.600495][T17536] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 597.612748][T17536] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 597.620209][T17536] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.819877][T31020] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.261650][T18306] tipc: Enabled bearer , priority 10 [ 598.339232][T18333] __nla_validate_parse: 3 callbacks suppressed [ 598.339280][T18333] netlink: 11226 bytes leftover after parsing attributes in process `syz.1.14335'. [ 598.416176][T18416] loop7: detected capacity change from 0 to 512 [ 598.438260][T18416] EXT4-fs: Ignoring removed oldalloc option [ 598.467153][T18416] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.14337: Parent and EA inode have the same ino 15 [ 598.609179][T18528] netlink: 'syz.8.14341': attribute type 4 has an invalid length. [ 598.631534][T18527] xt_CT: You must specify a L4 protocol and not use inversions on it [ 598.633839][T18416] EXT4-fs (loop7): Remounting filesystem read-only [ 598.648797][T18416] EXT4-fs warning (device loop7): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 598.650233][T18528] netlink: 'syz.8.14341': attribute type 4 has an invalid length. [ 598.669908][T18416] EXT4-fs (loop7): 1 orphan inode deleted [ 598.675900][T18416] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 598.782203][T18416] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 598.792747][T18416] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.848969][T18416] loop7: detected capacity change from 0 to 512 [ 598.935892][T18416] EXT4-fs (loop7): too many log groups per flexible block group [ 598.943635][T18416] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 598.979450][T18416] EXT4-fs (loop7): mount failed [ 598.994799][T18416] loop7: detected capacity change from 0 to 128 [ 599.064993][T18749] loop7: detected capacity change from 0 to 2048 [ 599.106153][T18749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.267348][T18763] netlink: 'syz.9.14355': attribute type 4 has an invalid length. [ 599.450391][ T7067] tipc: Node number set to 361275387 [ 599.575144][T18767] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 599.621016][T18767] ip6gretap0 speed is unknown, defaulting to 1000 [ 599.627821][T18767] lo speed is unknown, defaulting to 1000 [ 599.834395][T18759] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 599.852893][T18759] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 599.865378][T18759] EXT4-fs (loop7): This should not happen!! Data will be lost [ 599.865378][T18759] [ 599.875108][T18759] EXT4-fs (loop7): Total free blocks count 0 [ 599.881108][T18759] EXT4-fs (loop7): Free/Dirty block details [ 599.886997][T18759] EXT4-fs (loop7): free_blocks=2415919104 [ 599.892752][T18759] EXT4-fs (loop7): dirty_blocks=8192 [ 599.898070][T18759] EXT4-fs (loop7): Block reservation details [ 599.904251][T18759] EXT4-fs (loop7): i_reserved_data_blocks=512 [ 599.958339][T18749] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 600.180028][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14366'. [ 600.189094][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14366'. [ 600.285926][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 600.285939][ T29] audit: type=1400 audit(2000308224.131:62697): avc: denied { bind } for pid=18893 comm="syz.1.14369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 600.376217][ T29] audit: type=1326 audit(2000308224.206:62698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.399991][ T29] audit: type=1326 audit(2000308224.206:62699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.423691][ T29] audit: type=1326 audit(2000308224.215:62700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.447420][ T29] audit: type=1326 audit(2000308224.215:62701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.471347][ T29] audit: type=1326 audit(2000308224.215:62702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.501136][ T29] audit: type=1326 audit(2000308224.225:62703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.524860][ T29] audit: type=1326 audit(2000308224.225:62704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.548527][ T29] audit: type=1326 audit(2000308224.225:62705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.572253][ T29] audit: type=1326 audit(2000308224.225:62706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18895 comm="syz.9.14367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72b41fcda9 code=0x7ffc0000 [ 600.643176][T18906] veth0_vlan: entered allmulticast mode [ 600.679151][T18898] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 600.687791][T18906] ŞŞŞŞŞŞ: renamed from vlan0 [ 600.768084][T18892] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 600.774831][T18898] ip6gretap0 speed is unknown, defaulting to 1000 [ 600.785582][T18898] lo speed is unknown, defaulting to 1000 [ 600.813331][T19006] netlink: 'syz.7.14373': attribute type 1 has an invalid length. [ 600.849390][T19006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.862554][T18892] ip6gretap0 speed is unknown, defaulting to 1000 [ 600.882999][T18892] lo speed is unknown, defaulting to 1000 [ 600.913937][T19006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.936649][T19006] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 600.950874][T19014] usb usb6: usbfs: process 19014 (syz.9.14376) did not claim interface 0 before use [ 600.977412][T19006] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 600.993403][T19016] loop8: detected capacity change from 0 to 2048 [ 601.040628][T19016] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.283483][T19016] netlink: 5 bytes leftover after parsing attributes in process `syz.8.14377'. [ 601.336485][T19016] 0ŞXıĤDöğ: renamed from gretap0 [ 601.348776][T19016] 0ŞXıĤDöğ: entered allmulticast mode [ 601.360763][T19024] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 601.390914][T29635] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.392505][T19024] ip6gretap0 speed is unknown, defaulting to 1000 [ 601.407476][T19024] lo speed is unknown, defaulting to 1000 [ 601.782784][T19035] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 601.828853][T19035] ip6gretap0 speed is unknown, defaulting to 1000 [ 601.837361][T19035] lo speed is unknown, defaulting to 1000 [ 601.896823][T19146] delete_channel: no stack [ 601.949151][T19153] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 601.989902][T19143] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 602.116357][T19143] ip6gretap0 speed is unknown, defaulting to 1000 [ 602.144592][T19143] lo speed is unknown, defaulting to 1000 [ 602.174714][T19159] loop9: detected capacity change from 0 to 8192 [ 602.277598][T19169] netlink: 2 bytes leftover after parsing attributes in process `syz.4.14397'. [ 602.314318][T19169] batadv_slave_1: entered promiscuous mode [ 602.742390][T19485] loop8: detected capacity change from 0 to 164 [ 602.891725][T19485] Y­4`Ҙ speed is unknown, defaulting to 1000 [ 602.908501][T19491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14406'. [ 602.993165][T19485] ip6gretap0 speed is unknown, defaulting to 1000 [ 603.019292][T19498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 603.035663][T19485] lo speed is unknown, defaulting to 1000 [ 603.063872][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.088888][T19504] pim6reg: entered allmulticast mode [ 603.133434][ T3378] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.143702][ T6826] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 603.145171][T19603] loop7: detected capacity change from 0 to 512 [ 603.188576][T19603] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 603.202911][T19603] EXT4-fs (loop7): orphan cleanup on readonly fs [ 603.207227][T19504] pim6reg: left allmulticast mode [ 603.223486][T19603] EXT4-fs warning (device loop7): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 603.244440][T19603] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 603.251525][T19603] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #16: comm syz.7.14412: casefold flag without casefold feature [ 603.266259][T19603] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.14412: couldn't read orphan inode 16 (err -117) [ 603.281022][T19603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 603.312284][T19615] ================================================================== [ 603.320386][T19615] BUG: KCSAN: data-race in __process_echoes / n_tty_write [ 603.327509][T19615] [ 603.329820][T19615] write to 0xffffc90001776280 of 8 bytes by task 6826 on cpu 0: [ 603.337432][T19615] __process_echoes+0x688/0x6b0 [ 603.342269][T19615] n_tty_receive_buf_common+0x8f9/0xbe0 [ 603.347799][T19615] n_tty_receive_buf2+0x33/0x40 [ 603.352636][T19615] tty_ldisc_receive_buf+0x63/0x100 [ 603.357825][T19615] tty_port_default_receive_buf+0x59/0x90 [ 603.363536][T19615] flush_to_ldisc+0x1ce/0x410 [ 603.368200][T19615] process_scheduled_works+0x483/0x9a0 [ 603.373646][T19615] worker_thread+0x51d/0x6f0 [ 603.378223][T19615] kthread+0x4ae/0x520 [ 603.382283][T19615] ret_from_fork+0x4b/0x60 [ 603.386689][T19615] ret_from_fork_asm+0x1a/0x30 [ 603.391443][T19615] [ 603.393754][T19615] read to 0xffffc90001776280 of 8 bytes by task 19615 on cpu 1: [ 603.401369][T19615] n_tty_write+0x16c/0xb80 [ 603.405779][T19615] file_tty_write+0x37a/0x680 [ 603.410450][T19615] tty_write+0x28/0x30 [ 603.414506][T19615] vfs_write+0x77b/0x920 [ 603.418735][T19615] ksys_write+0xe8/0x1b0 [ 603.422960][T19615] __x64_sys_write+0x42/0x50 [ 603.427537][T19615] x64_sys_call+0x287e/0x2dc0 [ 603.432205][T19615] do_syscall_64+0xc9/0x1c0 [ 603.436696][T19615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.442576][T19615] [ 603.444884][T19615] value changed: 0x0000000000000000 -> 0x0000000000000007 [ 603.451970][T19615] [ 603.454276][T19615] Reported by Kernel Concurrency Sanitizer on: [ 603.460406][T19615] CPU: 1 UID: 0 PID: 19615 Comm: syz.8.14414 Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 603.471239][T19615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 603.481278][T19615] ================================================================== [ 603.522019][T19617] block device autoloading is deprecated and will be removed. [ 603.581650][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14414'. [ 603.590773][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14414'. [ 603.599878][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14414'. [ 603.625899][T19617] syz.8.14414: attempt to access beyond end of device [ 603.625899][T19617] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 603.672713][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14414'. [ 603.699388][T19615] __nla_validate_parse: 2 callbacks suppressed [ 603.699404][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14414'. [ 603.714701][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14414'. [ 603.723839][T19615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.14414'. [ 603.735727][T28696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.261537][ T6858] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.269339][ T6858] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 604.453576][ T7067] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 608.195270][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!