last executing test programs: 4m8.519144021s ago: executing program 32 (id=3726): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b7050000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x44800) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcsu(0xffffff9c, 0x0, 0x88080, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8, 0x0, 0x6}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000200)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x44}}, 0x0) 3m8.761498305s ago: executing program 33 (id=6003): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r2, 0x4b67, &(0x7f0000000180)) 2m56.255293222s ago: executing program 34 (id=6377): setresgid(0xee01, 0xee01, 0x0) r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000004c0)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x6) 2m44.453816856s ago: executing program 35 (id=6751): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd23, 0x25dfdbfd, {0x2, 0x20, 0x28, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m26.665960923s ago: executing program 36 (id=7319): epoll_create1(0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 2m16.270956241s ago: executing program 7 (id=7586): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r3, @ANYBLOB="c50f000000000000000011000000", @ANYBLOB="0c00990008000000370000000e012a"], 0x138}}, 0x0) 2m16.228650061s ago: executing program 7 (id=7590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1fffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r4, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0201}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m16.128893653s ago: executing program 7 (id=7597): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "3ea9f3", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd00011100"], 0xfdef) 2m15.921827137s ago: executing program 7 (id=7604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) 2m15.891612677s ago: executing program 7 (id=7606): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d84bd8191f589ecd2f50cc9b8e07f76ea782d8cecdf9ec"}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 2m15.77637631s ago: executing program 7 (id=7614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0) syz_emit_ethernet(0xf82, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xf74, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x0, 0x0, 0xf5c, 0x0, @opaque="edf1df4edc119cb3d0b8ad66bf21898f56dea225ccb2d8ed7e491f7a300b0b38fe69e2910f6158f4cf4d2bf792d3758d8173e85e1bf7fa7eeba490c2cf30bb231e806bfabcabdc0213d969b0b9434fa01623fc23c249a85e8258d584625788fafd9c12f510d09598f6dd6fabf6ac7a2dfe649fa04122d102e69784c8d78a65b1b9bf29114e5c2d5f1e7ae1e4338cfa45917f69e5ceac119ad400a552d4c840f0d3c4f7e64b2b88abb9c9c351dd84a30149d52caf718c64395eecb782880e012c6aeb368f429df66a611d773911057c7c0f854721c9c6eb45f1dd169791ee6e69c774608cb5b27a72fe02901efeec8f0533af0d040309cc15790df5450f1436129bf90da1eaa17fb268321a420daf37de6de4b9427b5c23b4c6464d994b8d624270403962219c427a1f6cad10ac4324c476f2d7cbb40a3a2152f3eba910733d56125a30ea13f5d62a7137764f4aabc3d3bf2ed6ae9372cff490b2bf06514e090df8cb651baaec0e333a5119b73034858016ae4607cf108127907094bb483de4d4a067e79f3761516e7c6c052b3abb947d3ac60ae14087b868a41bed15f4b396fdf92406fde018bd5aacc53fdc8d567889d7e2d04369a10f9654d01c5f63dad861216ad3fddccfb55ec1af75d200f528ee898dc09352b9dea259e05a1b235de5cccf0f946b5e6381ca8c548252cd3c571d389b216fea6cdff7d94c71355bc40eafaa7c087b72f6c916d62e8928ddfd8f1e1c7fcf5710de10a191c87238111de6cdf92c9263f7e30a735e0a36a32d4313ba1aa4e307fc9c83931cf87f2d824c247e7b049518ce986a8508551f5f1a56b38ec9cd97db9b1a1aee6b17d3167f58f7b1c59f7db3bf2f25a0ac3d187e28dade5feb9af131ce82da8d7c59cc49c33c6d83eaf940556828055075bb67268fbdca664789c5039732e03d120d2ed45bf6deb3fda5c1c78c1c8acc420dcba6584354ad20f648c94688773fb28249a13316507625e9d7e013fe3a0673c37c130cde07d7c5c10b141faed29bf646774d5d66a7e2adb39e0ff08019fd1c3ac48ea81da2764c38f5621870fd56cb32a6561a0e2c2be22f826c9b721799c19c9e4ebafec55785d62b7a08d72f27028eb11137de29f90a520e11f5064972bf0901833d8d9af653414e5c2ae329fb5075a1c7929badda2f7a3099b9760e8196ac177d191151572e890898219bade493fe9a2f7450694f88d66f827d1acd8221855ae1c6b73665957ee2f90fe3e4ece6fad6630c8a1d4ea025fd12ce10fdf9f92a6a798de701e376c1c4f460a24957446065789acd14ddc07773d9f96d5c5174895c79801fc99ee2d454543a5c101a7e02141cf562514d788511f3b654bcb291cc397ad6b89666246bf1a7f19525ca77077fc450f0b2a83fac614276711d4e08fb71b209f1e3e1a9b894df97a8e9bd180a50b9423f1b9c9b5335d57bd5caaa1b0a0f33ac9397030db272eb0eab096c69defc0229925fe7c259d30849bd36f1d67860b20760cdb387cbe661cbd3a9a352192425e1235a6905e7acacbfacaeb54fd2c76e03e9b9e57650ea1a06996ee8ce07e2724128c1fcd436047b8eeab184121c27772c036f85cf572e7f618ebc5e4b93be6bfead852f9128e2dadc195742f61d9e03a71f4437f2832df9ae52a419f27957edc6b1667ce80bda928dca2851ac64c080ce4e5bddaa58530ff4135cc86948a0dcd177d18e3e5f87148460fcbd5897813cf7d3c13ce769b7e07590e1390c5d15fdb6443c806065c15acff6e59a85df2e0f821b56f93105b0f87556ae2f5b37cfcda8e8a4e1876a8021fc21752bcbe4b0a9fd97ec3b93e41c7b5ef2157d2c65ac4249fc09bdede59386e948b17c30e5f108e0306a25a9cd6ef3b71c592c374ec5bd18ae427b6626dad6e1e4d0c6de16a8cd43849aa6a2fa4ac51cbd027ae8f628e27d30149b15f8bd858c1e322f856d569c70077f46d200b10c53be11b413c42e5e5656fd7ad8dd682386ab007b674c17fcf999a3d870e0840dbd0515a8b798e5309f54fa73b2231ce770bdd43ac609f771fe18099405f1a4fc2e3baebb4f479335d0379ee4b419dbd02ac1957d4dc429669308dd660d205897f8694ce3b82efb8dc715226161e47c85f0738adb6376d7a3e4b827b242245921fd184e2afbeb57c9dc96f91771a5dea966d1a823b9b8b150ed728687b6dcbfba7d0d3cf32ddf00a50b4ee465c1a4d8d2d01aa4a74966df83fbe0632e29df8c841b0f122984b0aa42f992d8a9d20a10e465d46a6127a900ceaffc90eb33fb05717fcaa2e8d02ed0ea0c5e2136f9d8d0c59be7671e85f72ad5751534224d88e4cb30958a9c0d816f7f2fd0ef42a0a508faca89afe82c737636be23098545be3f34f62f4e52958c72f91f5303a8c01d8c44ba6cbb657a7f07e919593a71c49c3e2280dfa5a242a97b3999c014ddcb0a6c33e6dfc0c0d876bec03940bc6d3be2993c5ee620e1110b2f281319376f8ff0fa35b14fab43005632a3ad0b4d15e58fde2ad7958d7d55bb649d554b3510be1cb7e7eb256afb8ebc6b25173874a470c4b4d3bcc299116c599583c8be01c4e63df0441a7aca948baf1cf878cc8bcccf78854e63b253b0055f6396c73860c393ea395b7a01aa9808b3bf2d5d508b0aaf8203853a1404c699f777a9b654de1855b31c0293f4f66dcd80d7cd82f89ab41b16542eb8b0649483323a74d27fd22207e00fcd13e212bb82ff8a4faf9af5980f0e99c01623b5e736f2318fe4019e70ab20952119c7f62c693e59b57ebafaa5a30ae2a901bde6a45ba36184192ef44f6a8221cb40b30f2a0f9845ec401907e6dd7c17bff1f894d38507d5151637ba944ba4051fe85e62882e290828c1b6f1a84f13feb83ac6f763dbe586d2f8a87fff3801764ee8abd053874c2c62b55ee03b016218e5229ae1b94221f13c5db51c28be4b95de955240e7d596c0288ba5250fe53fd4e9ad665d83c3863ce30d9b2eedb14bfd76c1ee8eb727dc02484eefeaa2e8ed0c3674c82ba583607c9bc35768fdaf8e2b6957e337bd7f4a48641b3ddb94f4156e9a0fcfe8244dcd26e31b665e5b59f3e924485d57aefb62b5365435adfc0194652bdc260b976b2d4184e18844c7a320f2fe948185dd9037c0e08c75edd26bb19114ecbbb0c75b392865139ff1f37d73d07d9069db6b9c8679d7994d5042d84e4d5261cb4f1dac7f1775bd2f5ba78ce677e249a0e1c046fb3e94391fbc00538ad8fc4f36b1f814a023287cc55fb2c6dc57b924f62c72e3e2cea02c3219449c7624f62d8d4e12fc0385c523c93cab456e95ffc5e25bba3001e12b7c1a22580a5788f4c5b53352f305bed341c314b400e075853859a95dd9f629eaee5ab0137c8f76d50b4e6be3728b79579483ffa8bf9fd4f85cdec3ba62ee8594d438fbd8c16361e82cf1f5a41714cd10231d02c2d2e5598814da6473d369c69eb0a6322dd3de414cd79c0e5c0e5ff87c6eb4f941e73aefdf2c87be134a2a5a9fd46d92f34aa7a52d1299481fd507e077346a8d438688b32509e2297d483306aa5ead530d0ad2a2892ef5fe5f9ed7fa4b566c6f5823e71b61347386d21c36cec70fb3c86bb525a68e06ff8717b3788b2295d8906820e8abf2c345631a366e55a1e2766b03bca88559760b9a88164567e8cf208283c6bd4165aa3db85eab42f0c5df2aaf1a285d2e87f859b6e0c10616f76237af6dfc10767052273d617bfb2e808a336b64c7ff98b04c30bd854360c822936e5ae915f2de5e81dca1f32f9eee2eb674be010bd884f7923d9806db542ae349f161b9245741f63a6cd9cb3ad73d58b6482de702a6ce06ef725d27fa104cd33ade94e379d154033b6553363910a8476b5957e22ef37164a8582c4173c7c61ef63d6a41817511fd114a57c7691e6cfcb410ff8258f422c3f5f207764b6e162211bd09ad00f3f6ebe686a3fac2530d4e81046971ec8812f8873f0bf1ff5dbab04f547b6c8ba8243b108bdd184e7358179882abfb19b2fd97ad740cbf535fd46941d46ae9778d2616c35277360e8f1c013520635ad1140fa330f95a64ddc2b8adf53ad13b00a03f7727d91afddcff9a50171f3802f8d50cc6a7042052019e23aa46eae532401fb8bda678a2a0681101f454adb3f6603ae90cebcfee9ef6b46411f8f320046fa1d74adaedf7c907bd7fa7fd6c496b11ac4b07ab6ebeccd0f9ab7f1bcbfc2dc7772c075f98d0371d24fb3b2eeaf21073efa76051a748c6c2b2683cca6b02178103eccd436c128f2ff95b9a56f1152ca5e35d3def06ef6edc372e8f19b6d2d167b17d379d5965dbe0110cc6c944eadc8b4240cd87f5e3b159bbcf7c037b4550abdc683f7f4553561c59fc8f1de247c51331d636d458abb2202feb8d8125c63184cdd8077ad7f154f25a0a331695e174bb1916540bc1b1150d08da736da5788742ed754316b7cc769bab8ac860bea58761a72e4577aff0cd7567223028a88759eba3c7d00b0b1e56c057400621b1eda2dbc6792ec84100b8e5cffad015d73179b4a29f9349a42d9ae1e67a443ba70d49619d28cfa390ceb9cf1eb5e2dfacda467c871d9d2fe9d03ac8ff7a36b2872fc42c602778371c1e1397e6468eaa88d40803524d283cf39a7865b0e11fb0886c0eef06fb7f0bdc73eee35adca58bb7ab3983e7d998a9c8d12a451990e5d8479ed57736b86ca9fa8160eb2ce547a55d2863aee0457b32db2b1cc202023bd65a5d73441d411198ac86c61de278f2cc8824c93a242ee7812c2014d18c2b9f9e81a71e26a790cdf9814e3cc2097d1bf01f42e268b104fddaafbc74681b565b77d616650f54e6fc8322a8cbd4555cd91cdb2a302f85e23fd154c83f41ce7ebab2d3a4a10ce93b754418ca72b694c081db8b9a642f01dc3c803f770f4802d02ff07932038dc345d08da3080b5c9994707e0de30ee9a11550a8be8eaab9696ecd0117afd21b894ec4a24f3bd1d9eca9c02098ba6fe4e41dcef1dabd862598db9b3b5d7f3442ec5e39f72b92912ccac2d912d18cdbafc650d56c03a57aab6301da11d523bce6ceee85076894a223f098acb0d574654ca43e170579329e84e7671432986d9b53554096227ba1eecf2b3ecca7d972de7730eb847eab3bb6c0797dcfe4e2b5c9ac98611ded719afc4c001c455671520fd0a4de2e275f5c2e4ecfd0465fdbfcce24a87f8cf3be61162f389859d7bc27c24178946542d678c425d0e57abc64a03e6105bcb7977c07e86e2c5cffe07905286ee4f1b54c366dbdccc0c7d716bc00557e4656e8fe3254851722753ed5690074f003075c875919a3b6e762f42e249444b518e78cff998b0311db99977588709b76e35959d0c0a6fb2919f2cb720e3a95365e13e50ff293a2561f69f1726cd733d7e180a7dd25c57378a70efe811f1aee79d796f4663bbc74986045e086ec1ba044046c1d6ed7a25da19e264a33df9aa1c6741c7634238dca85cb75129d06a071eda07d7c8abdf3069eb04aef5513e761e572aff660f1991f109d1e08868f1c39b185310be6bf9be015dce5f58cf446ca46881088"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2m15.75953942s ago: executing program 37 (id=7614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0) syz_emit_ethernet(0xf82, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0xf74, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty, {[@end]}}, {0x0, 0x0, 0xf5c, 0x0, @opaque="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"}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffd}, 0x67) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) 2m4.803525698s ago: executing program 8 (id=7939): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2m4.782197258s ago: executing program 8 (id=7940): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 2m4.756733109s ago: executing program 8 (id=7941): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0xfffffe51) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 2m4.428170785s ago: executing program 8 (id=7946): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9b301a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000500)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m4.428014085s ago: executing program 8 (id=7947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 2m4.296339068s ago: executing program 8 (id=7950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 2m4.270654938s ago: executing program 38 (id=7950): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/53, 0x35, 0x40010102, 0x0, 0x0) 1m23.160726088s ago: executing program 3 (id=9168): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1m22.934525872s ago: executing program 3 (id=9173): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff8001}}, @call={0x85, 0x0, 0x0, 0xb4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffab1}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f0000000180), &(0x7f0000000440)=0x8) 1m22.864417613s ago: executing program 3 (id=9176): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1m22.749628826s ago: executing program 3 (id=9179): syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0x2, 0x838, &(0x7f0000000cc0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m22.644413008s ago: executing program 3 (id=9182): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4M\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) close(r0) 1m22.471398301s ago: executing program 3 (id=9186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1m22.416306562s ago: executing program 39 (id=9186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1m10.347313801s ago: executing program 4 (id=9472): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xffffffff, 0x0, 0xfffffffe, 0x160}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x2000000, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) 1m10.162799714s ago: executing program 4 (id=9474): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 1m9.86497871s ago: executing program 4 (id=9480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1m9.742976552s ago: executing program 4 (id=9482): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 1m9.720480713s ago: executing program 4 (id=9484): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) open(&(0x7f0000000700)='./file1\x00', 0x64842, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x1, 0x550, &(0x7f0000001780)="$eJzs3c9vHFcdAPDvTHYTJ3G6LnCASi2FFiUVZDeuaWtxKEVCcKqEKJyDsTeWlbU3yq7b2KrA+QuQEAIkTnDhgsQfgFRF4sKxQqoEZ5CKQIimIMEBOmh3Z9dhM2uvy/pH1p+PNJ733uzM971dz483M5oJ4NR6OiJeiYgPsix7LiIqeXmaD7HTGzqfe//+m8udIYkse+1vSSR52fAyL+azzUTE178a8e3k4bitre2bS41GqZ+vtddv1Vpb21fX1pdW66v1jYWF+RcXX1p8YfFaxFv/fzsvRcTLX/7TD7/386+8/Nbn3vjj9b9c+U6nWrP59KJ2jKm018Re08vnZoZmuP0hg51EnfaU+5nz481z9xDrAwDAaJ1j/I9ExKcj4rmoxJm9D2cBAACAR1D2xdn4dxKRFTs7ohwAAAB4hKTde2CTtJrfCzAbaVqt9u7h/VhcSBvNVvuzN5qbGyu9e2XnopzeWGvUr+X3Cs9FOenk57vp3fzzQ/mFiHg8In5QOd/NV5ebjZXjPvkBAAAAp8TFof7/Pyq9/j8AAAAwZeb2nlw5qnoAAAAAh2ef/j8AAAAwBfT/AQAAYKp97dVXO0PWf//1yutbmzebr19dqbduVtc3l6vLzdu3qqvN5mr3mX3r+y2v0Wze+nxsbN6pteutdq21tX19vbm50b6+FjNH0iAAAADgIY9/8t7vk4jY+cL57tBx9rgrBRyJ0iCV5OOCtf8Pj/XG7x5RpYAjcWbklHSQevdc8SccJ8CjrTRcMGJdB6ZP+bgrABy7ZJ/pQzfvXBik3s7Hn5p8nQAAgMm6/Ini6/+jrwv07aRHUD3gEFmJ4fQa2s9n3vUDp0f3+v+4N/I4WICpUh6jpw9MtwNe/9/19rgRsuxAFQIAACZutjskaTU/vTcbaVqtRlzqvhagnNxYa9SvRcRjEfG7SvlcJz/fnTPZt88AAAAAAAAAAAAAAAAAAAAAAAAAAPRkWRIZAAAAMNUi0j8nv+49y/9y5dnZ4fMDZ5N/dV8JfDYi3vjJaz+6s9Ru357vlL83KG//OC9//jjOYAAAAADD+v307vifx10bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKbN+/ffXO4PY3z8/KTi/vVLETFXFL8UM93xTJQj4sLfkyg9MF8SEWcmEH/nbkR8vCh+0qnWIGRR/El8CfvEj7n8WyiKf3EC8eE0u9fZ/rxStP6l8XR3XLz+lSL+J/9hjd7+xWD7d2bE+n9pzBhPvPPL2sj4dyOeKBVvf/rxkxHxnxkz/re+sb09alr204jL/f1Pd4s3iDDzYKxae/1WrbW1fXVtfWm1vlrfWFiYf3HxpcUXFq/Vbqw16vnfwhjff/JXH+zV/guF+78kr83o9j9bsLyifdJ/3rlz/6P9zM7D8a88UxD/Nz/LP5HHT3bnSfM4n8nTSSSD8mSn930+6Klf/Papvdq/stv+8kF+/yujFjrsoRXlyXH/dQCAQ9Da2r651GjUb09totNLPwHVOPREVun9oielPkOJb753Av/ZvjvRBWZZlnV+gYJJ9yJinOUkMeGWpsX12U2M/FGOecMEAABM3O5B/2SupwMAAAAAAAAAAAAAAAAAAAAHdxRPWRuOufsI5GQSj9AGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiI/wYAAP//in3QFg==") fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0xc000, 0x0, 0x0, 0xfffffffffdffffff}) 1m9.417040709s ago: executing program 4 (id=9487): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r1, 0x0, 0x0) 1m9.416923889s ago: executing program 40 (id=9487): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) socket$kcm(0x2, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) read$ptp(r1, 0x0, 0x0) 46.602955481s ago: executing program 6 (id=10100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1008}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x20, 0x1, 0x0, 0x0, {{0xfffa, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x8, 0x0, 0xe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) 46.536714563s ago: executing program 6 (id=10104): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000007c0)='%', 0x1, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 46.530349093s ago: executing program 6 (id=10105): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011", 0x5}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], &(0x7f0000000100)=""/141, 0x46, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 46.354138326s ago: executing program 6 (id=10108): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 46.062802172s ago: executing program 6 (id=10116): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xb}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x11}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 45.873880135s ago: executing program 6 (id=10122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 45.829822796s ago: executing program 41 (id=10122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 3.036753661s ago: executing program 9 (id=10877): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2.379486424s ago: executing program 2 (id=10880): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b1808d17e7dffff5377c495fdf065b435ffb579e8e3e96b31c509530400c4af", @ANYBLOB], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) getsockname$packet(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 2.270407996s ago: executing program 5 (id=10884): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x15, 0x1, 0x800000, 0x300, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x7, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffc, 0x5}, {0x81}}}, 0xb8}}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.001616741s ago: executing program 9 (id=10886): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) 1.714193647s ago: executing program 9 (id=10887): ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x4) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_VERSION={0x8, 0x2, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_NET_NS_FD={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x400c001) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r6) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0xc0bc5310, &(0x7f0000000900)={{0x80}, {0x40}, 0x3, 0x5, 0x6}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000006911d4000000000018"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r4, 0x40049366, &(0x7f0000000240)) 1.601200619s ago: executing program 9 (id=10888): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = inotify_init() creat(0x0, 0xd931d3864d39dcca) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600000000fc020000000000000000000000000000ff02000000000000000000000000000154ec74d1d2301d996adfb89306a78871f398c04cfe5b51a096ca4e7cb63cf22095d450fc4d866a37d00ab1223e"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) socket$nl_route(0x10, 0x3, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) 1.592535649s ago: executing program 1 (id=10889): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.57581416s ago: executing program 1 (id=10890): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@ifindex=r4, 0xffffffffffffffff, 0x2a, 0x0, 0x0, @void, @value=r0}, 0x20) 1.502317391s ago: executing program 0 (id=10892): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xc5bf) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, 0x0) write$binfmt_aout(r1, 0x0, 0xff2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r2 = syz_open_pts(r1, 0x101000) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) 1.426940012s ago: executing program 1 (id=10893): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da", 0x3}], 0x1) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 1.425359512s ago: executing program 5 (id=10894): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfc9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r4, 0x30, r0}, 0x10) 1.361676734s ago: executing program 5 (id=10895): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20000c4, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xe01, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x9, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r2, 0x711, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x207}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) syz_clone3(&(0x7f00000004c0)={0x48080000, 0x0, 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1.278326925s ago: executing program 0 (id=10896): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfc, 0x0, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x10498a, 0xc8, 0x3, 0x0, 0x1}, 0x0, 0x8000000000, 0xffffffffffffffff, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102036c00fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.208209846s ago: executing program 0 (id=10897): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bc21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffff, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8008}, 0x20004804) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x5e3171053baea80f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x10}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 1.080148359s ago: executing program 5 (id=10899): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x20008852) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) flock(0xffffffffffffffff, 0x2) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r1, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0xce27, 0x81, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(r1, 0x0, 0x0) 1.043904439s ago: executing program 0 (id=10900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 1.00479236s ago: executing program 2 (id=10901): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 961.959541ms ago: executing program 0 (id=10902): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = gettid() process_vm_writev(r1, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0xee01, 0xee01, 0x0) 880.563163ms ago: executing program 2 (id=10903): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x2}, {0x9, 0x8}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[], 0x0) sendto$inet6(r0, 0x0, 0xffffffffffffff37, 0x20000000, &(0x7f0000000300)={0xa, 0x4e1e, 0x2000000, @mcast1, 0x5c5d}, 0x1c) 768.915445ms ago: executing program 2 (id=10904): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 604.964868ms ago: executing program 1 (id=10905): r0 = getpid() socket(0x1e, 0x4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r2, 0x0, 0x100000000}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = gettid() rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) tkill(r3, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_pidfd_open(r0, 0x0) 604.484208ms ago: executing program 9 (id=10906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 600.463168ms ago: executing program 1 (id=10907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x800, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) 527.07348ms ago: executing program 1 (id=10908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f00008a0000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f00006f1000/0x3000)=nil, &(0x7f00005da000/0x3000)=nil, &(0x7f0000b43000/0x4000)=nil, &(0x7f0000581000/0x2000)=nil, &(0x7f00001d1000/0x4000)=nil, &(0x7f00007e6000/0x3000)=nil, &(0x7f00006a0000/0x4000)=nil, &(0x7f00006bd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r4}, 0x68) 356.958373ms ago: executing program 9 (id=10909): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b1808d17e7dffff5377c495fdf065b435ffb579e8e3e96b31c509530400c4af", @ANYBLOB], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) getsockname$packet(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 356.010363ms ago: executing program 0 (id=10919): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='sched_switch\x00', r4}, 0x18) 195.189006ms ago: executing program 2 (id=10910): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000005e44f954c6b311a854a7ce673b46342911d1f0619eb513229688763fe15f0d4aa096c02e25cced2fcbf03a1058b204cd4e661b715479c92805e4805e1a6a5d8a1eef6226761d487dae961904dfa2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 48.053219ms ago: executing program 5 (id=10911): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 0s ago: executing program 5 (id=10912): io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba00000000f73809630400"}) r3 = syz_open_pts(r2, 0x900) r4 = dup3(r3, r2, 0x80000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x2, 0x3, 0xa9, 0xfffffff9, 0x1b, "e66f1c2fb1fe7bec5e3c1e88502acd53612978"}) read(r4, &(0x7f00000000c0)=""/226, 0xe2) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29804 comm="syz.0.9432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66044eba9 code=0x7ffc0000 [ 335.893632][T29835] loop9: detected capacity change from 0 to 1024 [ 335.894619][T29834] netlink: 'syz.1.9441': attribute type 1 has an invalid length. [ 335.900947][T29835] EXT4-fs: Ignoring removed bh option [ 335.920330][T29834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.940149][T29834] macvlan2: entered promiscuous mode [ 335.945487][T29834] macvlan2: entered allmulticast mode [ 335.952660][T29834] bond1: entered promiscuous mode [ 335.958138][T29834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 335.975119][T29834] bond1: left promiscuous mode [ 335.994497][T29876] vhci_hcd: invalid port number 96 [ 335.999674][T29876] vhci_hcd: default hub control req: 0300 vfbfa i0060 l0 [ 336.031614][T29881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9444'. [ 336.115387][T29896] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9448'. [ 336.152768][T29907] netlink: 'syz.5.9452': attribute type 21 has an invalid length. [ 336.233214][T29923] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9454'. [ 336.393466][T29932] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 336.407482][T29932] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 336.466013][T29961] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9463'. [ 336.807701][T29987] syzkaller0: entered promiscuous mode [ 336.813257][T29987] syzkaller0: entered allmulticast mode [ 336.854130][ T3868] syzkaller0: tun_net_xmit 48 [ 336.862446][T29987] syzkaller0: tun_net_xmit 1280 [ 336.867411][T29987] syzkaller0: create flow: hash 2294565965 index 1 [ 336.911125][T29986] syzkaller0: delete flow: hash 2294565965 index 1 [ 337.006640][T29981] Falling back ldisc for ptm0. [ 337.214200][T30046] pim6reg1: entered promiscuous mode [ 337.219564][T30046] pim6reg1: entered allmulticast mode [ 337.425659][ T3846] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.490420][ T3846] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.528762][ T3846] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.576612][ T3846] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.703501][ T3846] bridge_slave_1: left allmulticast mode [ 337.709242][ T3846] bridge_slave_1: left promiscuous mode [ 337.715053][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.723587][ T3846] bridge_slave_0: left allmulticast mode [ 337.729345][ T3846] bridge_slave_0: left promiscuous mode [ 337.735030][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.854688][T30106] loop9: detected capacity change from 0 to 2048 [ 337.863803][ T3846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.879617][ T3846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.899580][ T3846] bond0 (unregistering): Released all slaves [ 338.085127][T30129] loop1: detected capacity change from 0 to 512 [ 338.118421][T30129] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 338.129676][ T3846] veth1_vlan: left promiscuous mode [ 338.135113][ T3846] veth0_vlan: left promiscuous mode [ 338.147228][T30133] netlink: 'syz.5.9495': attribute type 1 has an invalid length. [ 338.267008][ T3846] team0 (unregistering): Port device team_slave_1 removed [ 338.294350][ T3846] team0 (unregistering): Port device team_slave_0 removed [ 338.378848][T30133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.417353][T30137] macvlan0: entered promiscuous mode [ 338.422762][T30137] macvlan0: entered allmulticast mode [ 338.439048][T30137] bond1: entered promiscuous mode [ 338.447539][T30137] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 338.456199][T30137] bond1: left promiscuous mode [ 338.561724][T30091] chnl_net:caif_netlink_parms(): no params data found [ 338.624861][T30299] loop1: detected capacity change from 0 to 512 [ 338.648554][T30091] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.655690][T30091] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.662900][T30091] bridge_slave_0: entered allmulticast mode [ 338.669540][T30091] bridge_slave_0: entered promiscuous mode [ 338.677092][T30091] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.682445][T30299] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 338.684374][T30091] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.700534][T30091] bridge_slave_1: entered allmulticast mode [ 338.707246][T30091] bridge_slave_1: entered promiscuous mode [ 338.729078][T30091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.745071][T30091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.755873][T30299] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.9501: Failed to acquire dquot type 1 [ 338.780885][T30299] EXT4-fs (loop1): 1 truncate cleaned up [ 338.797594][T30091] team0: Port device team_slave_0 added [ 338.803856][T30299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.818828][T30091] team0: Port device team_slave_1 added [ 338.839737][T30091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.846790][T30091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.872743][T30091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.898071][T30091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.905273][T30091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.931324][T30091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.966328][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.018407][T30459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.027612][T30091] hsr_slave_0: entered promiscuous mode [ 339.035770][T30091] hsr_slave_1: entered promiscuous mode [ 339.042530][T30459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.050746][T30091] debugfs: 'hsr0' already exists in 'hsr' [ 339.056601][T30091] Cannot create hsr debugfs directory [ 339.254109][T30530] netlink: 64 bytes leftover after parsing attributes in process `syz.9.9505'. [ 339.301259][T30544] loop9: detected capacity change from 0 to 512 [ 339.364409][T30091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 339.376711][T30091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 339.407802][T30091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 339.425021][T30091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 339.448814][T30091] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.455946][T30091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.463301][T30091] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.470402][T30091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.520321][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.532337][ T3863] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.539030][T30578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30578 comm=syz.5.9512 [ 339.567528][T30578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9512'. [ 339.645894][T30091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.684838][T30091] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.720285][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.727574][ T3846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.766415][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.773528][ T3817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.893807][T30630] loop9: detected capacity change from 0 to 736 [ 339.927814][T30630] rock: directory entry would overflow storage [ 339.934039][T30630] rock: sig=0x3b10, size=4, remaining=3 [ 339.973601][T30091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.005599][T30625] tipc: Enabled bearer , priority 0 [ 340.025019][T30624] tipc: Resetting bearer [ 340.033989][T30647] loop9: detected capacity change from 0 to 512 [ 340.045574][T30647] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 340.057857][T30624] tipc: Disabling bearer [ 340.228633][T30671] loop1: detected capacity change from 0 to 512 [ 340.246634][T30671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 340.266345][T30671] EXT4-fs (loop1): orphan cleanup on readonly fs [ 340.291948][T30091] veth0_vlan: entered promiscuous mode [ 340.301534][T30091] veth1_vlan: entered promiscuous mode [ 340.302574][T30671] __quota_error: 91 callbacks suppressed [ 340.302594][T30671] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 340.317124][T30091] veth0_macvtap: entered promiscuous mode [ 340.322195][T30671] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 340.330550][T30091] veth1_macvtap: entered promiscuous mode [ 340.337359][T30671] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.9526: Failed to acquire dquot type 1 [ 340.367956][T30091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.380207][T30671] EXT4-fs (loop1): 1 truncate cleaned up [ 340.388091][T30091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.408155][ T3857] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.418452][ T3857] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.431542][T30671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.446371][ T3857] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.466587][ T3857] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.492901][T30671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9526'. [ 340.533613][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.284172][T30725] loop9: detected capacity change from 0 to 512 [ 341.291099][T30725] EXT4-fs: test_dummy_encryption option not supported [ 341.593102][T30774] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 341.593102][T30774] program syz.5.9548 not setting count and/or reply_len properly [ 342.028223][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9553'. [ 342.037223][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9553'. [ 342.143055][T30799] loop1: detected capacity change from 0 to 2048 [ 342.193126][T30799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.233241][T22484] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 342.255870][T22484] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 342.304863][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.453648][T30820] loop6: detected capacity change from 0 to 512 [ 342.504880][T30820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.530131][T30820] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.577454][T30832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9561'. [ 342.617809][T30091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.688379][T30848] smc: net device bond0 applied user defined pnetid SYZ0 [ 342.701642][T30853] loop6: detected capacity change from 0 to 512 [ 342.713204][T30848] smc: net device bond0 erased user defined pnetid SYZ0 [ 342.722705][T30853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.741959][T30853] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.754816][T30859] loop1: detected capacity change from 0 to 128 [ 342.773304][T30859] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 342.794106][T30859] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.820761][T30091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.879923][T30871] loop6: detected capacity change from 0 to 1024 [ 342.889429][T30871] EXT4-fs: Ignoring removed bh option [ 342.917675][T30871] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 342.947584][T22484] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.991787][T30871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.013200][T30871] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 343.049994][ T29] audit: type=1400 audit(1757892606.064:14815): avc: denied { cmd } for pid=30906 comm="syz.1.9575" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=io_uring permissive=1 [ 343.109261][ T29] audit: type=1400 audit(1757892606.138:14816): avc: denied { create } for pid=30914 comm="syz.9.9577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 343.132026][T30917] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9577'. [ 343.164214][T30924] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 343.258455][T30943] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9584'. [ 343.268276][T30943] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9584'. [ 343.313037][ T29] audit: type=1326 audit(1757892606.348:14817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30944 comm="syz.5.9586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 343.335969][T30946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9586'. [ 343.346271][ T29] audit: type=1326 audit(1757892606.348:14818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30944 comm="syz.5.9586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 343.369993][ T29] audit: type=1326 audit(1757892606.348:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30944 comm="syz.5.9586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 343.393620][ T29] audit: type=1326 audit(1757892606.348:14820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30944 comm="syz.5.9586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 343.417422][ T29] audit: type=1326 audit(1757892606.348:14821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30944 comm="syz.5.9586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 343.440997][ T29] audit: type=1326 audit(1757892606.379:14822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30944 comm="syz.5.9586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 343.469031][T30951] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 343.574899][T30955] tipc: Enabled bearer , priority 0 [ 343.598316][T30954] tipc: Resetting bearer [ 343.626064][T30954] tipc: Disabling bearer [ 343.682475][T30091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.098896][T31032] sg_write: data in/out 95/14 bytes for SCSI command 0x0-- guessing data in; [ 344.098896][T31032] program syz.1.9604 not setting count and/or reply_len properly [ 344.175773][T31042] tipc: Enabled bearer , priority 0 [ 344.183837][T31042] tipc: Disabling bearer [ 344.601694][T31069] pim6reg1: entered promiscuous mode [ 344.607205][T31069] pim6reg1: entered allmulticast mode [ 344.625197][T31072] __nla_validate_parse: 3 callbacks suppressed [ 344.625233][T31072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9616'. [ 344.696816][T31083] loop1: detected capacity change from 0 to 1024 [ 344.704332][T31083] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 344.715409][T31083] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 344.728200][T31083] JBD2: no valid journal superblock found [ 344.734009][T31083] EXT4-fs (loop1): Could not load journal inode [ 345.337248][T31165] SELinux: failed to load policy [ 345.414506][T31171] loop9: detected capacity change from 0 to 128 [ 345.467090][T31177] loop1: detected capacity change from 0 to 128 [ 345.487833][T31179] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9645'. [ 345.506933][T31177] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.543620][T31177] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 345.574254][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 345.574272][ T29] audit: type=1400 audit(1757892608.721:14832): avc: denied { mount } for pid=31193 comm="syz.5.9646" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 345.682587][ T3857] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 345.789172][T31218] loop6: detected capacity change from 0 to 512 [ 345.799124][T31218] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 345.825918][T31218] EXT4-fs (loop6): 1 truncate cleaned up [ 345.833439][T31218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.914384][T31240] loop1: detected capacity change from 0 to 512 [ 345.922754][T31240] EXT4-fs: Ignoring removed bh option [ 345.928683][T31240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.957887][T30091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.984864][T31240] EXT4-fs (loop1): 1 truncate cleaned up [ 345.991392][T31240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.044144][T31250] loop9: detected capacity change from 0 to 256 [ 346.062152][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.178142][T31272] tipc: Started in network mode [ 346.183089][T31272] tipc: Node identity 26ba62963acf, cluster identity 4711 [ 346.190388][T31272] tipc: Enabled bearer , priority 0 [ 346.204270][T31272] tipc: Disabling bearer [ 346.221387][ T29] audit: type=1400 audit(1757892609.393:14833): avc: denied { write } for pid=31279 comm="syz.1.9669" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 346.273406][ T29] audit: type=1400 audit(1757892609.435:14834): avc: denied { ioctl } for pid=31279 comm="syz.1.9669" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 346.354466][T31287] -1: renamed from syzkaller0 [ 346.370161][T31284] SELinux: failed to load policy [ 346.538800][T31323] loop1: detected capacity change from 0 to 128 [ 346.565689][T31324] tipc: Enabled bearer , priority 0 [ 346.573594][T31323] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.591697][T31323] ext4 filesystem being mounted at /435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 346.629993][ T29] audit: type=1400 audit(1757892609.823:14835): avc: denied { setattr } for pid=31321 comm="syz.1.9678" path="/435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 346.700668][T31324] tipc: Disabling bearer [ 346.706558][ T29] audit: type=1400 audit(1757892609.907:14836): avc: denied { ioctl } for pid=31321 comm="syz.1.9678" path="/435/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop1" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 346.765160][T22484] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.904068][T31355] dummy0: entered promiscuous mode [ 346.921255][T31355] macsec1: entered allmulticast mode [ 346.926614][T31355] dummy0: entered allmulticast mode [ 346.949593][T31355] dummy0: left allmulticast mode [ 346.954606][T31355] dummy0: left promiscuous mode [ 347.337752][T31403] SELinux: failed to load policy [ 347.581786][T31420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9710'. [ 347.590766][T31420] netlink: 'syz.6.9710': attribute type 30 has an invalid length. [ 347.636403][ T3854] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.645918][ T3854] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.657278][ T3854] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.666424][ T3854] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.935718][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 347.943499][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 347.951253][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 347.958938][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 347.966714][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 347.974387][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 347.982223][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 347.990093][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 347.997460][T31462] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 347.997850][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 348.009612][T31462] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.016160][ T3393] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 348.031878][ T3393] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 348.152600][ T29] audit: type=1400 audit(1757892611.429:14837): avc: denied { accept } for pid=31480 comm="syz.5.9731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 348.336208][T31502] ref_ctr increment failed for inode: 0x284 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff888116873f40 [ 348.347864][T31501] uprobe: syz.5.9736:31501 failed to unregister, leaking uprobe [ 348.370286][T31506] sctp: [Deprecated]: syz.1.9738 (pid 31506) Use of struct sctp_assoc_value in delayed_ack socket option. [ 348.370286][T31506] Use struct sctp_sack_info instead [ 348.387967][T31506] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9738'. [ 348.430959][T31509] loop1: detected capacity change from 0 to 512 [ 348.478100][T31509] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.524930][T31522] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9743'. [ 348.536699][T31509] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.593336][T31525] netlink: 184 bytes leftover after parsing attributes in process `syz.5.9744'. [ 348.631810][T31525] xt_socket: unknown flags 0xd0 [ 348.682765][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.774644][T21793] IPVS: starting estimator thread 0... [ 348.780767][T31559] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 348.880409][T31561] IPVS: using max 2256 ests per chain, 112800 per kthread [ 348.978409][T31584] syzkaller1: entered promiscuous mode [ 348.983981][T31584] syzkaller1: entered allmulticast mode [ 348.996342][T31590] pim6reg1: entered promiscuous mode [ 349.001750][T31590] pim6reg1: entered allmulticast mode [ 349.096731][T31604] vlan0: entered allmulticast mode [ 349.137198][T31609] loop9: detected capacity change from 0 to 128 [ 349.203406][T31626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.210832][T31626] IPv6: NLM_F_CREATE should be set when creating new route [ 349.271941][T31636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9774'. [ 349.313567][T31642] pim6reg1: entered promiscuous mode [ 349.318962][T31642] pim6reg1: entered allmulticast mode [ 349.419699][T31659] loop6: detected capacity change from 0 to 512 [ 349.438902][T31656] loop1: detected capacity change from 0 to 8192 [ 349.455665][T31659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.474868][T31659] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.533793][T30091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.552825][ T29] audit: type=1326 audit(1757892612.899:14838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31674 comm="syz.1.9786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 349.576580][ T29] audit: type=1326 audit(1757892612.899:14839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31674 comm="syz.1.9786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 349.600533][ T29] audit: type=1326 audit(1757892612.899:14840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31674 comm="syz.1.9786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 349.624279][ T29] audit: type=1326 audit(1757892612.899:14841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31674 comm="syz.1.9786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 349.683463][T31685] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 349.728379][T31688] loop9: detected capacity change from 0 to 2048 [ 349.781131][T31690] loop1: detected capacity change from 0 to 512 [ 349.795375][T31690] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.9792: error while reading EA inode 32 err=-116 [ 349.824851][T31690] EXT4-fs (loop1): Remounting filesystem read-only [ 349.831438][T31690] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 349.881270][T31690] EXT4-fs (loop1): 1 orphan inode deleted [ 349.887670][T31690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.901989][T31690] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.999639][T31727] batman_adv: batadv0: Adding interface: dummy0 [ 350.006000][T31727] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.031683][T31727] batman_adv: batadv0: Interface activated: dummy0 [ 350.060746][T31733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31733 comm=syz.9.9805 [ 350.074079][T31733] netlink: 'syz.9.9805': attribute type 1 has an invalid length. [ 350.101157][T31733] bond2: (slave bridge4): making interface the new active one [ 350.109300][T31733] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 350.186002][T31775] loop1: detected capacity change from 0 to 8192 [ 350.206627][T31780] loop9: detected capacity change from 0 to 2048 [ 350.217654][T31783] syzkaller0: entered allmulticast mode [ 350.227675][T31783] syzkaller0: entered promiscuous mode [ 350.248222][T31783] syzkaller0 (unregistering): left allmulticast mode [ 350.255138][T31783] syzkaller0 (unregistering): left promiscuous mode [ 350.303541][T31796] sd 0:0:1:0: device reset [ 350.370981][T31806] loop1: detected capacity change from 0 to 1024 [ 350.378913][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 350.378929][ T29] audit: type=1326 audit(1757892613.771:14893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31801 comm="syz.0.9818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66044eba9 code=0x7fc00000 [ 350.418584][ T29] audit: type=1326 audit(1757892613.802:14894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31801 comm="syz.0.9818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff66044eba9 code=0x7fc00000 [ 350.419032][T31806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.442480][ T29] audit: type=1326 audit(1757892613.802:14895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31801 comm="syz.0.9818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff66044eba9 code=0x7fc00000 [ 350.475917][T31806] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.496797][T31814] ref_ctr increment failed for inode: 0x2153 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810005f300 [ 350.508796][T31814] ref_ctr increment failed for inode: 0x2153 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005f300 [ 350.521684][ T29] audit: type=1400 audit(1757892613.918:14896): avc: denied { mounton } for pid=31805 comm="syz.1.9820" path="/474/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.522782][T31812] uprobe: syz.0.9821:31812 failed to unregister, leaking uprobe [ 350.604194][T31812] uprobe: syz.0.9821:31812 failed to unregister, leaking uprobe [ 350.616396][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.636727][ T29] audit: type=1326 audit(1757892614.033:14897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.1.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 350.660609][ T29] audit: type=1326 audit(1757892614.033:14898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.1.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 350.684277][ T29] audit: type=1326 audit(1757892614.033:14899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.1.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 350.707924][ T29] audit: type=1326 audit(1757892614.033:14900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.1.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 350.731602][ T29] audit: type=1326 audit(1757892614.033:14901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.1.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 350.755291][ T29] audit: type=1326 audit(1757892614.033:14902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31827 comm="syz.1.9826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 350.954373][T31865] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9839'. [ 351.726253][T31900] loop6: detected capacity change from 0 to 8192 [ 351.897238][T31907] bridge0: port 3(batadv1) entered blocking state [ 351.904113][T31907] bridge0: port 3(batadv1) entered disabled state [ 351.947706][T31907] batadv1: entered allmulticast mode [ 351.963656][T31907] batadv1: entered promiscuous mode [ 352.036304][T31922] bridge0: port 3(ip6gretap0) entered blocking state [ 352.043156][T31922] bridge0: port 3(ip6gretap0) entered disabled state [ 352.056339][T31922] ip6gretap0: entered allmulticast mode [ 352.084977][T31922] ip6gretap0: entered promiscuous mode [ 352.094585][T31922] bridge0: port 3(ip6gretap0) entered blocking state [ 352.101463][T31922] bridge0: port 3(ip6gretap0) entered forwarding state [ 352.157149][T31917] tipc: Enabled bearer , priority 0 [ 352.164621][T31916] tipc: Resetting bearer [ 352.198034][T31916] tipc: Disabling bearer [ 352.232678][T31943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9863'. [ 352.256504][T31943] netlink: 236 bytes leftover after parsing attributes in process `syz.6.9863'. [ 352.376625][ T3846] batman_adv: batadv1: IGMP Querier appeared [ 352.382683][ T3846] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 352.441311][T31978] loop1: detected capacity change from 0 to 512 [ 352.453842][T31978] EXT4-fs: Ignoring removed nobh option [ 352.485277][T31978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.575836][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.726055][T32009] siw: device registration error -23 [ 352.769726][T32011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9888'. [ 352.824056][T32013] loop1: detected capacity change from 0 to 2048 [ 352.902184][T32013] loop1: unable to read partition table [ 352.913492][T32013] loop1: partition table beyond EOD, truncated [ 352.919766][T32013] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 353.073335][T32034] pim6reg: entered allmulticast mode [ 353.092235][T32034] pim6reg: left allmulticast mode [ 353.393061][T32063] loop1: detected capacity change from 0 to 1024 [ 353.444057][T32069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9906'. [ 353.466576][T32063] EXT4-fs: Ignoring removed bh option [ 353.481477][T32069] netlink: 236 bytes leftover after parsing attributes in process `syz.5.9906'. [ 353.492408][T32063] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 353.577630][T32063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.828418][T32118] bond_slave_1: mtu less than device minimum [ 354.013402][T32148] netlink: 332 bytes leftover after parsing attributes in process `syz.9.9930'. [ 354.105649][T32159] bridge0: port 3(ip6gretap0) entered blocking state [ 354.112447][T32159] bridge0: port 3(ip6gretap0) entered disabled state [ 354.119471][T32159] ip6gretap0: entered allmulticast mode [ 354.125713][T32159] ip6gretap0: entered promiscuous mode [ 354.199605][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.260559][T32171] : renamed from vlan1 (while UP) [ 354.343188][T32176] netlink: 'syz.0.9942': attribute type 7 has an invalid length. [ 354.351087][T32176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9942'. [ 354.423023][T32182] loop1: detected capacity change from 0 to 512 [ 354.485197][T32182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.498837][T32182] ext4 filesystem being mounted at /495/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.531686][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.562309][T32200] loop1: detected capacity change from 0 to 164 [ 354.572589][T32200] bio_check_eod: 18336 callbacks suppressed [ 354.572606][T32200] syz.1.9949: attempt to access beyond end of device [ 354.572606][T32200] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 354.600753][T32200] syz.1.9949: attempt to access beyond end of device [ 354.600753][T32200] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 354.789634][T32211] loop1: detected capacity change from 0 to 512 [ 354.807895][T32211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.822727][T32216] loop6: detected capacity change from 0 to 164 [ 354.829902][T32211] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.842750][T32216] syz.6.9955: attempt to access beyond end of device [ 354.842750][T32216] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 354.858136][T32216] syz.6.9955: attempt to access beyond end of device [ 354.858136][T32216] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 354.907180][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.919110][T32220] loop9: detected capacity change from 0 to 512 [ 355.131864][T32257] loop1: detected capacity change from 0 to 512 [ 355.139176][T32257] EXT4-fs: Ignoring removed oldalloc option [ 355.146972][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 355.146990][ T29] audit: type=1326 audit(1757892618.768:14974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32258 comm="syz.6.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b5e9eba9 code=0x7ffc0000 [ 355.176780][T32257] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.9967: Parent and EA inode have the same ino 15 [ 355.189185][ T29] audit: type=1326 audit(1757892618.779:14975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32258 comm="syz.6.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0b5e9eba9 code=0x7ffc0000 [ 355.212888][ T29] audit: type=1326 audit(1757892618.779:14976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32258 comm="syz.6.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b5e9eba9 code=0x7ffc0000 [ 355.235016][T32257] EXT4-fs (loop1): Remounting filesystem read-only [ 355.236538][ T29] audit: type=1326 audit(1757892618.779:14977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32258 comm="syz.6.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb0b5e9eba9 code=0x7ffc0000 [ 355.243360][T32257] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 355.266582][ T29] audit: type=1326 audit(1757892618.779:14978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32258 comm="syz.6.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b5e9eba9 code=0x7ffc0000 [ 355.266622][ T29] audit: type=1326 audit(1757892618.779:14979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32258 comm="syz.6.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b5e9eba9 code=0x7ffc0000 [ 355.277586][T32257] EXT4-fs (loop1): 1 orphan inode deleted [ 355.329473][T32257] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.348096][T32257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9967'. [ 355.361405][T32266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.371129][T22484] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.371374][T32266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.450792][T32275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9972'. [ 355.506930][T32281] netlink: 'syz.1.9974': attribute type 6 has an invalid length. [ 355.609642][ T29] audit: type=1326 audit(1757892619.251:14980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.9977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 355.633481][ T29] audit: type=1326 audit(1757892619.251:14981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.9977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 355.659099][ T29] audit: type=1326 audit(1757892619.304:14982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.9977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4229b4d510 code=0x7ffc0000 [ 355.682740][ T29] audit: type=1326 audit(1757892619.304:14983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32287 comm="syz.1.9977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4229b503d7 code=0x7ffc0000 [ 356.188294][T32311] syz_tun: entered promiscuous mode [ 356.193687][T32311] vlan2: entered promiscuous mode [ 356.692823][T32374] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 356.735554][T32386] loop6: detected capacity change from 0 to 512 [ 356.766566][T32394] SELinux: security_context_str_to_sid (仲VW廤) failed with errno=-22 [ 356.781012][T32386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.798841][T32400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=32400 comm=syz.0.10013 [ 356.811588][T32400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=32400 comm=syz.0.10013 [ 356.826441][T32386] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 356.837361][T32400] netlink: 'syz.0.10013': attribute type 27 has an invalid length. [ 356.845354][T32400] netlink: 'syz.0.10013': attribute type 4 has an invalid length. [ 356.853219][T32400] __nla_validate_parse: 1 callbacks suppressed [ 356.853247][T32400] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10013'. [ 356.873610][T32386] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10008: corrupted inode contents [ 356.894191][T32386] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10008: mark_inode_dirty error [ 356.907320][T32386] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10008: corrupted inode contents [ 356.922306][T32386] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10008: corrupted inode contents [ 356.937660][T32386] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.10008: mark_inode_dirty error [ 356.952004][T32386] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.10008: corrupted inode contents [ 356.968285][T32405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10015'. [ 356.997019][T32405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32405 comm=syz.1.10015 [ 357.001392][T30091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.040469][T32426] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.050403][T32426] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.092026][T32426] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.101866][T32426] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.151913][T32426] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.161761][T32426] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.206761][T32426] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.216716][T32426] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.233749][ T3386] hid_parser_main: 6 callbacks suppressed [ 357.233772][ T3386] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 357.247995][ T3386] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.276895][T32455] loop9: detected capacity change from 0 to 1024 [ 357.281436][ T3844] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.284264][T32455] EXT4-fs: Ignoring removed nomblk_io_submit option [ 357.291559][ T3844] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.334041][ T3844] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.342517][ T3844] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.351278][ T3844] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.359568][ T3844] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.368225][ T3844] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 357.376489][ T3844] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.522602][T32498] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 357.667403][T32505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10031'. [ 357.696143][T32505] syz_tun (unregistering): left allmulticast mode [ 357.853699][T32518] netlink: 'syz.6.10036': attribute type 2 has an invalid length. [ 357.947223][T32527] IPv4: Oversized IP packet from 127.202.26.0 [ 357.999755][T32531] loop6: detected capacity change from 0 to 1024 [ 358.006842][T32531] EXT4-fs: Ignoring removed bh option [ 358.040526][T32531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.061466][T32531] EXT4-fs error (device loop6): ext4_xattr_set_entry:1660: inode #15: comm syz.6.10040: corrupted xattr entries [ 358.075489][T32531] EXT4-fs (loop6): Remounting filesystem read-only [ 358.082286][T32531] EXT4-fs warning (device loop6): ext4_xattr_block_set:2190: inode #19: comm syz.6.10040: dec ref error=-30 [ 358.109818][T30091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.180303][T32541] team0 (unregistering): Port device team_slave_0 removed [ 358.204985][T32541] team0 (unregistering): Port device team_slave_1 removed [ 358.362916][T32597] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.372881][T32597] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.454699][T32597] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.464600][T32597] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.559101][T32597] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.568952][T32597] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.655368][T32597] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.665324][T32597] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.670619][T32612] netlink: 'syz.9.10054': attribute type 11 has an invalid length. [ 358.729950][T32618] netlink: 'syz.9.10056': attribute type 10 has an invalid length. [ 358.738026][T32618] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10056'. [ 358.756007][ T3854] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.764271][ T3854] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.781556][ T3854] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.789846][ T3854] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.814228][ T3854] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.822479][ T3854] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.842492][ T3854] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.850819][ T3854] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.934454][T32641] SELinux: security policydb version 17 (MLS) not backwards compatible [ 358.943714][T32641] SELinux: failed to load policy [ 359.149587][T32668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10072'. [ 359.282233][T32674] TC_ACT_REPEAT abuse ? [ 359.290342][T32674] TC_ACT_REPEAT abuse ? [ 359.299376][T32676] pim6reg1: entered promiscuous mode [ 359.304919][T32676] pim6reg1: entered allmulticast mode [ 359.311562][T32673] TC_ACT_REPEAT abuse ? [ 359.315960][T32673] TC_ACT_REPEAT abuse ? [ 359.413767][T32685] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10078'. [ 359.487100][T32694] veth0_to_team: entered promiscuous mode [ 359.557057][T32700] loop6: detected capacity change from 0 to 8192 [ 359.600869][T32713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=32713 comm=syz.5.10090 [ 359.613615][T32713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=32713 comm=syz.5.10090 [ 359.731262][T32721] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 360.671561][ T303] vxcan1: entered allmulticast mode [ 360.757164][ T314] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10111'. [ 360.758924][ T309] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10110'. [ 360.766564][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.782728][ T314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.796669][ T314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.804176][ T314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.973444][ T348] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10115'. [ 361.534576][ T430] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10135'. [ 361.644323][ T460] pim6reg1: entered promiscuous mode [ 361.649687][ T460] pim6reg1: entered allmulticast mode [ 361.711356][ T398] chnl_net:caif_netlink_parms(): no params data found [ 361.805770][ T398] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.813049][ T398] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.829741][ T398] bridge_slave_0: entered allmulticast mode [ 361.838358][ T398] bridge_slave_0: entered promiscuous mode [ 361.844429][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 361.844484][ T29] audit: type=1400 audit(1757892625.803:15357): avc: denied { create } for pid=613 comm="syz.0.10144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 361.871679][ T29] audit: type=1400 audit(1757892625.803:15358): avc: denied { read write } for pid=613 comm="syz.0.10144" dev="sockfs" ino=91680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 361.894959][ T29] audit: type=1400 audit(1757892625.803:15359): avc: denied { name_bind } for pid=613 comm="syz.0.10144" path="socket:[91680]" dev="sockfs" ino=91680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 361.931044][ T615] syzkaller0: entered promiscuous mode [ 361.936603][ T615] syzkaller0: entered allmulticast mode [ 361.944609][ T398] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.951845][ T398] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.959286][ T398] bridge_slave_1: entered allmulticast mode [ 361.965919][ T398] bridge_slave_1: entered promiscuous mode [ 362.028444][ T398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.050757][ T398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.080097][ T29] audit: type=1326 audit(1757892626.034:15360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.10149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 362.103807][ T29] audit: type=1326 audit(1757892626.034:15361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.10149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 362.127567][ T29] audit: type=1326 audit(1757892626.034:15362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.10149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 362.151222][ T29] audit: type=1326 audit(1757892626.034:15363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.10149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 362.175010][ T29] audit: type=1326 audit(1757892626.034:15364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.10149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 362.198648][ T29] audit: type=1326 audit(1757892626.034:15365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.10149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 362.222411][ T29] audit: type=1326 audit(1757892626.034:15366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=653 comm="syz.1.10149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 362.249188][ T398] team0: Port device team_slave_0 added [ 362.267606][ T398] team0: Port device team_slave_1 added [ 362.303877][ T398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.310959][ T398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.337054][ T398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.354342][ T398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.361446][ T398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.387436][ T398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.434625][ T398] hsr_slave_0: entered promiscuous mode [ 362.440702][ T398] hsr_slave_1: entered promiscuous mode [ 362.454353][ T398] debugfs: 'hsr0' already exists in 'hsr' [ 362.460114][ T398] Cannot create hsr debugfs directory [ 362.509829][ T762] pim6reg1: entered promiscuous mode [ 362.515201][ T762] pim6reg1: entered allmulticast mode [ 362.576679][ T791] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.586512][ T791] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.612832][ T795] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 362.639304][ T791] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.649150][ T791] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.662846][ T817] netlink: 'syz.0.10157': attribute type 10 has an invalid length. [ 362.671015][ T817] __nla_validate_parse: 1 callbacks suppressed [ 362.671048][ T817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10157'. [ 362.705958][ T817] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 362.734121][ T791] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.744010][ T791] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.756118][ T832] pim6reg1: entered promiscuous mode [ 362.761596][ T832] pim6reg1: entered allmulticast mode [ 362.807138][ T791] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.816976][ T791] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.902996][ T3400] IPVS: starting estimator thread 0... [ 362.929923][ T3810] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.938239][ T3810] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.960907][ T3810] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.969203][ T3810] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.982553][ T3810] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.990911][ T3810] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.002802][ T866] IPVS: using max 2208 ests per chain, 110400 per kthread [ 363.005097][ T870] netlink: '+}[@': attribute type 13 has an invalid length. [ 363.011821][ T3810] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 363.025670][ T3810] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.085685][ T870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.118262][ T398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 363.133357][ T398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 363.146443][ T398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 363.164045][ T398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.227718][ T398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.255149][ T398] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.266231][ T3854] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.273358][ T3854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.283162][ T923] IPv4: Oversized IP packet from 127.202.26.0 [ 363.290717][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.297985][ T3844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.353724][ T928] netlink: 'syz.9.10178': attribute type 3 has an invalid length. [ 363.398310][ T398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.494987][ T398] veth0_vlan: entered promiscuous mode [ 363.506920][ T398] veth1_vlan: entered promiscuous mode [ 363.529215][ T398] veth0_macvtap: entered promiscuous mode [ 363.535583][ T956] netlink: 'syz.5.10185': attribute type 4 has an invalid length. [ 363.538045][ T398] veth1_macvtap: entered promiscuous mode [ 363.570387][ T398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.581649][ T398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.608585][ T3864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.624236][ T3864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.639451][ T3864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.648735][ T958] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 363.661166][ T3864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.689561][ T948] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10182'. [ 363.715493][ T967] program syz.5.10188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.717978][ T965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10123'. [ 363.877031][ T995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10193'. [ 364.026666][ T1010] bridge: RTM_NEWNEIGH with invalid ether address [ 364.193514][ T1013] netlink: 'syz.5.10200': attribute type 10 has an invalid length. [ 364.217093][ T1013] team0: Port device dummy0 added [ 364.228763][ T1013] netlink: 'syz.5.10200': attribute type 10 has an invalid length. [ 364.256741][ T1013] team0: Port device dummy0 removed [ 364.283358][ T1013] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 364.719267][ T1039] Set syz1 is full, maxelem 65536 reached [ 364.731347][ T1061] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10214'. [ 364.819314][ T1089] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 364.847133][ T1094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10216'. [ 365.016941][ T1123] syzkaller1: entered promiscuous mode [ 365.022460][ T1123] syzkaller1: entered allmulticast mode [ 365.179602][ T1140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10227'. [ 365.686817][ T1178] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 365.843547][ T1190] netlink: 'syz.2.10242': attribute type 1 has an invalid length. [ 365.851456][ T1190] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10242'. [ 365.979033][ T1194] netlink: 'syz.2.10244': attribute type 4 has an invalid length. [ 366.045261][ T1196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.205074][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 367.205093][ T29] audit: type=1326 audit(1757892631.430:15683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.278493][ T29] audit: type=1326 audit(1757892631.430:15684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.302363][ T29] audit: type=1326 audit(1757892631.441:15685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.325907][ T29] audit: type=1326 audit(1757892631.441:15686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.349721][ T29] audit: type=1326 audit(1757892631.441:15687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.373586][ T29] audit: type=1326 audit(1757892631.441:15688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.397360][ T29] audit: type=1326 audit(1757892631.441:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.421198][ T29] audit: type=1326 audit(1757892631.441:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.444896][ T29] audit: type=1326 audit(1757892631.441:15691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.450016][ T1252] netlink: 'syz.5.10265': attribute type 7 has an invalid length. [ 367.468530][ T29] audit: type=1326 audit(1757892631.441:15692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1240 comm="syz.9.10262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 367.500476][ T1252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10265'. [ 368.097234][ T1196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.141537][ T1196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.218197][ T1196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.325255][ T3854] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.338170][ T3864] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.362800][ T3864] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.381826][ T3864] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.405970][ T1330] veth1_macvtap: left promiscuous mode [ 368.411618][ T1330] macsec0: entered allmulticast mode [ 369.191724][ T1386] random: crng reseeded on system resumption [ 369.277869][ T1398] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 369.449706][ T1405] netlink: 'syz.5.10295': attribute type 10 has an invalid length. [ 369.494384][ T1408] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 369.500974][ T1408] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 369.611525][ T1415] pim6reg: entered allmulticast mode [ 369.619786][ T1415] pim6reg: left allmulticast mode [ 369.905724][ T1453] netlink: '+}[@': attribute type 13 has an invalid length. [ 369.945721][ T1453] bridge0: port 3(ip6gretap0) entered blocking state [ 369.952559][ T1453] bridge0: port 3(ip6gretap0) entered forwarding state [ 369.959716][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.966868][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.974346][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.981478][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.013430][ T1453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.411184][ T1496] openvswitch: netlink: Message has 6 unknown bytes. [ 370.515780][ T1510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10328'. [ 370.842886][ T1554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10331'. [ 370.949113][ T1567] siw: device registration error -23 [ 371.015190][ T1577] loop9: detected capacity change from 0 to 512 [ 371.123094][ T1590] netlink: 360 bytes leftover after parsing attributes in process `syz.0.10343'. [ 371.734470][ T1618] loop9: detected capacity change from 0 to 2048 [ 372.096889][ T29] kauditd_printk_skb: 938 callbacks suppressed [ 372.096908][ T29] audit: type=1400 audit(1757892636.565:16631): avc: denied { audit_write } for pid=1644 comm="syz.5.10357" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 372.155589][ T29] audit: type=1107 audit(1757892636.565:16632): pid=1644 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 372.356847][ T1675] pim6reg1: entered promiscuous mode [ 372.362285][ T1675] pim6reg1: entered allmulticast mode [ 372.485414][ T1685] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.495292][ T1685] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.569422][ T1685] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.579300][ T1685] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.695877][ T1685] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.705774][ T1685] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.742450][ T1685] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.752443][ T1685] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.793036][ T1729] vlan1: entered allmulticast mode [ 372.798342][ T1729] veth1_virt_wifi: entered allmulticast mode [ 372.823842][ T3873] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.832205][ T3873] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.855464][ T3873] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 372.856156][ T1743] netlink: 'syz.0.10367': attribute type 13 has an invalid length. [ 372.863748][ T3873] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.961651][ T1743] bridge0: port 3(ip6gretap0) entered disabled state [ 372.969537][ T1743] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.976692][ T1743] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.348504][ T3873] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.356852][ T3873] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.374466][ T1766] pim6reg1: entered promiscuous mode [ 373.379889][ T1766] pim6reg1: entered allmulticast mode [ 373.445230][ T3873] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.453519][ T3873] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.489082][ T3873] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.497588][ T3873] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.555075][ T3873] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.563546][ T3873] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.638610][ T3873] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.647319][ T3873] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.655992][ T3873] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.664462][ T3873] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.724529][ T1777] netlink: 'syz.0.10373': attribute type 83 has an invalid length. [ 373.789855][ T29] audit: type=1326 audit(1757892638.328:16633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 373.813601][ T29] audit: type=1326 audit(1757892638.328:16634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 373.837232][ T29] audit: type=1326 audit(1757892638.328:16635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 373.860930][ T29] audit: type=1326 audit(1757892638.328:16636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 373.884642][ T29] audit: type=1326 audit(1757892638.328:16637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 373.908386][ T29] audit: type=1326 audit(1757892638.328:16638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4229b4d65f code=0x7ffc0000 [ 373.931912][ T29] audit: type=1326 audit(1757892638.328:16639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 373.955792][ T29] audit: type=1326 audit(1757892638.328:16640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1784 comm="syz.1.10376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 374.010690][ T1793] loop9: detected capacity change from 0 to 1024 [ 374.020875][ T1793] EXT4-fs: Ignoring removed nobh option [ 374.026703][ T1793] EXT4-fs: Ignoring removed bh option [ 374.060217][ T1793] loop9: detected capacity change from 0 to 764 [ 374.083094][ T1790] bridge0: port 3(ip6gretap0) entered disabled state [ 374.096559][ T1793] msdos: Unknown parameter '18446744073709551615' [ 374.099740][ T1790] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.110480][ T1790] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.375719][ T3863] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.384286][ T3863] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.412867][ T3863] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.421530][ T3863] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.433238][ T3863] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.441796][ T3863] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.450633][ T3863] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.459098][ T3863] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.508930][ T1824] loop9: detected capacity change from 0 to 128 [ 374.559525][ T1831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10387'. [ 374.627983][ T1833] loop9: detected capacity change from 0 to 1024 [ 374.650213][ T1833] EXT4-fs: test_dummy_encryption option not supported [ 374.932776][ T1861] netlink: 'syz.2.10395': attribute type 4 has an invalid length. [ 374.940841][ T1861] netlink: 17 bytes leftover after parsing attributes in process `syz.2.10395'. [ 375.040336][ T1883] netlink: 'syz.9.10398': attribute type 4 has an invalid length. [ 375.210021][ T1898] syzkaller0: entered promiscuous mode [ 375.215806][ T1898] syzkaller0: entered allmulticast mode [ 375.277943][ T1799] syz.0.10379 (1799) used greatest stack depth: 6136 bytes left [ 375.317425][ T1911] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 375.325877][ T1908] loop2: detected capacity change from 0 to 2048 [ 375.365169][ T1908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 375.375259][ T1923] loop9: detected capacity change from 0 to 1024 [ 375.416654][ T1930] loop9: detected capacity change from 0 to 1024 [ 375.498204][ T1936] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 375.515062][ T1936] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1360 with error 28 [ 375.527586][ T1936] EXT4-fs (loop2): This should not happen!! Data will be lost [ 375.527586][ T1936] [ 375.537278][ T1936] EXT4-fs (loop2): Total free blocks count 0 [ 375.543374][ T1936] EXT4-fs (loop2): Free/Dirty block details [ 375.549315][ T1936] EXT4-fs (loop2): free_blocks=2415919104 [ 375.555065][ T1936] EXT4-fs (loop2): dirty_blocks=1376 [ 375.560388][ T1936] EXT4-fs (loop2): Block reservation details [ 375.566409][ T1936] EXT4-fs (loop2): i_reserved_data_blocks=86 [ 375.698013][ T3844] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 376.735246][ T2031] netlink: 'syz.5.10428': attribute type 4 has an invalid length. [ 376.750678][ T2031] netlink: 'syz.5.10428': attribute type 4 has an invalid length. [ 376.889838][ T2052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10436'. [ 376.913470][ T2052] bond2 (unregistering): Released all slaves [ 377.018482][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 377.018509][ T29] audit: type=1326 audit(1757892641.741:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.054343][ T29] audit: type=1326 audit(1757892641.741:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.078058][ T29] audit: type=1326 audit(1757892641.772:16716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.101959][ T29] audit: type=1326 audit(1757892641.772:16717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.125640][ T29] audit: type=1326 audit(1757892641.772:16718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.149372][ T29] audit: type=1326 audit(1757892641.772:16719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.172967][ T29] audit: type=1326 audit(1757892641.772:16720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.222366][ T29] audit: type=1326 audit(1757892641.772:16721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.224288][ T2127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10438'. [ 377.246092][ T29] audit: type=1326 audit(1757892641.772:16722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.246136][ T29] audit: type=1326 audit(1757892641.772:16723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2125 comm="syz.5.10439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 377.542170][ T2154] netlink: 5 bytes leftover after parsing attributes in process `syz.5.10447'. [ 377.560943][ T2154] 0{X功: renamed from gretap0 [ 377.581845][ T2154] 0{X功: entered allmulticast mode [ 377.597622][ T2154] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 377.939919][ T2211] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10462'. [ 377.998943][ T2229] loop9: detected capacity change from 0 to 736 [ 378.014457][ T2229] rock: directory entry would overflow storage [ 378.020805][ T2229] rock: sig=0x3b10, size=4, remaining=3 [ 380.494720][ T3400] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 380.507231][ T3400] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.960688][ T2403] bridge0: port 1(batadv1) entered blocking state [ 380.968834][ T2403] bridge0: port 1(batadv1) entered disabled state [ 380.976876][ T2403] batadv1: entered allmulticast mode [ 381.010227][ T2403] batadv1: entered promiscuous mode [ 381.181473][ T2429] loop9: detected capacity change from 0 to 1024 [ 381.349577][ T3812] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 381.358884][ T3812] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 381.666880][ T2444] netlink: 'syz.1.10514': attribute type 30 has an invalid length. [ 381.725891][ T2450] tipc: Enabling of bearer rejected, failed to enable media [ 381.754095][ T2452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10516'. [ 381.926710][ T2438] syz.0.10512 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 381.940720][ T2438] CPU: 0 UID: 0 PID: 2438 Comm: syz.0.10512 Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.940810][ T2438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 381.940824][ T2438] Call Trace: [ 381.940831][ T2438] [ 381.940839][ T2438] __dump_stack+0x1d/0x30 [ 381.940865][ T2438] dump_stack_lvl+0xe8/0x140 [ 381.940905][ T2438] dump_stack+0x15/0x1b [ 381.940944][ T2438] dump_header+0x81/0x220 [ 381.941023][ T2438] oom_kill_process+0x342/0x400 [ 381.941058][ T2438] out_of_memory+0x979/0xb80 [ 381.941093][ T2438] try_charge_memcg+0x5e6/0x9e0 [ 381.941177][ T2438] obj_cgroup_charge_pages+0xa6/0x150 [ 381.941220][ T2438] __memcg_kmem_charge_page+0x9f/0x170 [ 381.941265][ T2438] __alloc_frozen_pages_noprof+0x188/0x360 [ 381.941337][ T2438] alloc_pages_mpol+0xb3/0x250 [ 381.941383][ T2438] alloc_pages_noprof+0x90/0x130 [ 381.941506][ T2438] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 381.941565][ T2438] __kvmalloc_node_noprof+0x30f/0x4e0 [ 381.941666][ T2438] ? ip_set_alloc+0x1f/0x30 [ 381.941694][ T2438] ? ip_set_alloc+0x1f/0x30 [ 381.941721][ T2438] ? __kmalloc_cache_noprof+0x189/0x320 [ 381.941762][ T2438] ip_set_alloc+0x1f/0x30 [ 381.941808][ T2438] hash_netiface_create+0x282/0x740 [ 381.941839][ T2438] ? __pfx_hash_netiface_create+0x10/0x10 [ 381.941869][ T2438] ip_set_create+0x3cc/0x960 [ 381.941993][ T2438] nfnetlink_rcv_msg+0x4c6/0x590 [ 381.942040][ T2438] netlink_rcv_skb+0x120/0x220 [ 381.942068][ T2438] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 381.942099][ T2438] nfnetlink_rcv+0x16b/0x1690 [ 381.942136][ T2438] ? __list_del_entry_valid_or_report+0x65/0x130 [ 381.942240][ T2438] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 381.942288][ T2438] ? strnchr+0x1e/0x40 [ 381.942351][ T2438] ? should_fail_ex+0x30/0x280 [ 381.942430][ T2438] ? selinux_nlmsg_lookup+0x99/0x890 [ 381.942471][ T2438] ? __rcu_read_unlock+0x34/0x70 [ 381.942504][ T2438] ? __netlink_lookup+0x266/0x2a0 [ 381.942611][ T2438] netlink_unicast+0x5c0/0x690 [ 381.942639][ T2438] netlink_sendmsg+0x58b/0x6b0 [ 381.942671][ T2438] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.942763][ T2438] __sock_sendmsg+0x142/0x180 [ 381.942802][ T2438] ____sys_sendmsg+0x31e/0x4e0 [ 381.942874][ T2438] ___sys_sendmsg+0x17b/0x1d0 [ 381.942924][ T2438] __x64_sys_sendmsg+0xd4/0x160 [ 381.943005][ T2438] x64_sys_call+0x191e/0x2ff0 [ 381.943050][ T2438] do_syscall_64+0xd2/0x200 [ 381.943090][ T2438] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.943121][ T2438] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 381.943230][ T2438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.943311][ T2438] RIP: 0033:0x7ff66044eba9 [ 381.943325][ T2438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.943390][ T2438] RSP: 002b:00007ff65eeaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.943407][ T2438] RAX: ffffffffffffffda RBX: 00007ff660695fa0 RCX: 00007ff66044eba9 [ 381.943419][ T2438] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 381.943430][ T2438] RBP: 00007ff6604d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 381.943441][ T2438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.943453][ T2438] R13: 00007ff660696038 R14: 00007ff660695fa0 R15: 00007ffef5d467b8 [ 381.943471][ T2438] [ 381.943497][ T2438] memory: usage 307200kB, limit 307200kB, failcnt 438 [ 381.989803][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 381.989847][ T29] audit: type=1326 audit(1757892646.959:16863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 381.992560][ T2438] memory+swap: usage 374924kB, limit 9007199254740988kB, failcnt 0 [ 381.992580][ T2438] kmem: usage 307020kB, limit 9007199254740988kB, failcnt 0 [ 382.011408][ T29] audit: type=1326 audit(1757892646.969:16864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.013115][ T2438] Memory cgroup stats for /syz0: [ 382.013640][ T2438] cache 0 [ 382.019021][ T29] audit: type=1326 audit(1757892646.969:16865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.023773][ T2438] rss 28672 [ 382.028753][ T29] audit: type=1326 audit(1757892646.969:16866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.034552][ T2438] shmem 0 [ 382.034563][ T2438] mapped_file 0 [ 382.039943][ T29] audit: type=1326 audit(1757892646.969:16867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.044518][ T2438] dirty 0 [ 382.048967][ T29] audit: type=1326 audit(1757892646.969:16868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.054562][ T2438] writeback 0 [ 382.058863][ T29] audit: type=1326 audit(1757892646.969:16869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.058893][ T29] audit: type=1326 audit(1757892646.969:16870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.064112][ T2438] workingset_refault_anon 130 [ 382.064122][ T2438] workingset_refault_file 5439 [ 382.064130][ T2438] swap 69349376 [ 382.064137][ T2438] swapcached 0 [ 382.064144][ T2438] pgpgin 575604 [ 382.064151][ T2438] pgpgout 575559 [ 382.064158][ T2438] pgfault 587642 [ 382.069879][ T29] audit: type=1326 audit(1757892646.969:16871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.074491][ T2438] pgmajfault 90 [ 382.084744][ T29] audit: type=1326 audit(1757892646.969:16872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2460 comm="syz.1.10519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 382.089681][ T2438] inactive_anon 20480 [ 382.089693][ T2438] active_anon 8192 [ 382.506641][ T2466] bridge3: entered promiscuous mode [ 382.508084][ T2438] inactive_file 155648 [ 382.602692][ T2438] active_file 0 [ 382.606155][ T2438] unevictable 0 [ 382.609664][ T2438] hierarchical_memory_limit 314572800 [ 382.615043][ T2438] hierarchical_memsw_limit 9223372036854771712 [ 382.621314][ T2438] total_cache 0 [ 382.624894][ T2438] total_rss 28672 [ 382.628566][ T2438] total_shmem 0 [ 382.632035][ T2438] total_mapped_file 0 [ 382.636064][ T2438] total_dirty 0 [ 382.639622][ T2438] total_writeback 0 [ 382.643509][ T2438] total_workingset_refault_anon 130 [ 382.648841][ T2438] total_workingset_refault_file 5439 [ 382.654169][ T2438] total_swap 69349376 [ 382.658317][ T2438] total_swapcached 0 [ 382.662408][ T2438] total_pgpgin 575604 [ 382.666507][ T2438] total_pgpgout 575559 [ 382.670652][ T2438] total_pgfault 587642 [ 382.675004][ T2438] total_pgmajfault 90 [ 382.678998][ T2438] total_inactive_anon 20480 [ 382.683540][ T2438] total_active_anon 8192 [ 382.687812][ T2438] total_inactive_file 155648 [ 382.692543][ T2438] total_active_file 0 [ 382.696533][ T2438] total_unevictable 0 [ 382.700519][ T2438] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.10512,pid=2437,uid=0 [ 382.715271][ T2438] Memory cgroup out of memory: Killed process 2437 (syz.0.10512) total-vm:93892kB, anon-rss:1072kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 383.957076][ T2549] loop2: detected capacity change from 0 to 256 [ 383.978367][ T2545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10530'. [ 384.000427][ T2545] bond0: (slave dummy0): Releasing backup interface [ 384.007643][ T2549] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 384.074521][ T2566] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 384.088014][ T2566] hsr_slave_0: left promiscuous mode [ 384.102185][ T2566] hsr_slave_1: left promiscuous mode [ 384.451678][ T2588] netlink: 'syz.0.10544': attribute type 10 has an invalid length. [ 384.543381][ T2597] loop2: detected capacity change from 0 to 1024 [ 384.552774][ T2597] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 384.625478][ T2613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10552'. [ 384.644292][ T2613] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10552'. [ 384.666801][ T2617] loop2: detected capacity change from 0 to 512 [ 384.676552][ T2617] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 384.684857][ T2617] EXT4-fs (loop2): orphan cleanup on readonly fs [ 384.691613][ T2617] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.10553: Failed to acquire dquot type 1 [ 384.696653][ T2621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10554'. [ 384.707836][ T2617] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.10553: bg 0: block 40: padding at end of block bitmap is not set [ 384.729991][ T2617] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 384.739132][ T2617] EXT4-fs (loop2): 1 truncate cleaned up [ 384.747337][ T2617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.761996][ T2617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.858256][ T2633] loop2: detected capacity change from 0 to 1024 [ 384.873513][ T2633] EXT4-fs: Ignoring removed bh option [ 384.886727][ T2633] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 384.908248][ T2633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.917117][ T2642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10561'. [ 384.933988][ T2637] ref_ctr increment failed for inode: 0xc91 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810005b980 [ 384.955057][ T2636] uprobe: syz.9.10560:2636 failed to unregister, leaking uprobe [ 385.046861][ T2650] loop9: detected capacity change from 0 to 1024 [ 385.229118][ T2659] loop9: detected capacity change from 0 to 8192 [ 385.276121][ T2669] netlink: 'syz.1.10570': attribute type 10 has an invalid length. [ 385.280288][ T2672] netlink: 100 bytes leftover after parsing attributes in process `syz.0.10578'. [ 385.286140][ T2669] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 385.303987][ T2669] team0: Failed to send options change via netlink (err -105) [ 385.311578][ T2669] team0: Port device dummy0 added [ 385.421216][ T2681] netlink: 'syz.5.10573': attribute type 12 has an invalid length. [ 386.791925][ T398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.839372][ T2715] loop9: detected capacity change from 0 to 512 [ 387.037136][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 387.037152][ T29] audit: type=1400 audit(1757892652.250:16998): avc: denied { cmd } for pid=2728 comm="syz.2.10582" path="socket:[96401]" dev="sockfs" ino=96401 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 387.339586][ T29] audit: type=1326 audit(1757892652.565:16999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.363322][ T29] audit: type=1326 audit(1757892652.565:17000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.387147][ T29] audit: type=1326 audit(1757892652.565:17001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.410890][ T29] audit: type=1326 audit(1757892652.565:17002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.434568][ T29] audit: type=1326 audit(1757892652.565:17003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.458385][ T29] audit: type=1326 audit(1757892652.565:17004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.510178][ T29] audit: type=1326 audit(1757892652.565:17005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.533888][ T29] audit: type=1326 audit(1757892652.565:17006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.557514][ T29] audit: type=1326 audit(1757892652.565:17007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2764 comm="syz.5.10587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 387.726452][ T2788] loop9: detected capacity change from 0 to 512 [ 387.743808][ T2788] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 387.754845][ T2788] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 387.765003][ T2788] EXT4-fs (loop9): group descriptors corrupted! [ 387.856431][ T2807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=2807 comm=syz.9.10604 [ 387.873532][ T2807] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10604'. [ 387.886309][ T2807] macvtap0: refused to change device tx_queue_len [ 387.953532][ T2823] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10610'. [ 388.072576][ T2861] delete_channel: no stack [ 388.153417][ T2869] syzkaller0: entered promiscuous mode [ 388.159054][ T2869] syzkaller0: entered allmulticast mode [ 388.323173][ T2891] bridge: RTM_NEWNEIGH with invalid ether address [ 388.465928][ T2930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10626'. [ 388.529699][ T2936] loop2: detected capacity change from 0 to 1024 [ 388.609746][ T2936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.625806][ T3812] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.645837][ T2936] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.667527][ T2943] netlink: 5 bytes leftover after parsing attributes in process `syz.0.10630'. [ 388.680919][ T3812] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.695919][ T2943] 0{X功: renamed from 30猉功D [ 388.701873][ T3853] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:42: bg 0: block 393: padding at end of block bitmap is not set [ 388.706123][ T2943] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 388.744012][ T3853] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 388.745128][ T3812] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.756667][ T3853] EXT4-fs (loop2): This should not happen!! Data will be lost [ 388.756667][ T3853] [ 388.869357][ T3812] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.923986][ T2953] loop9: detected capacity change from 0 to 512 [ 388.983962][ T3812] bridge_slave_1: left allmulticast mode [ 388.990002][ T3812] bridge_slave_1: left promiscuous mode [ 388.995769][ T3812] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.019752][ T3812] bridge_slave_0: left allmulticast mode [ 389.020119][ T398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.025478][ T3812] bridge_slave_0: left promiscuous mode [ 389.040466][ T3812] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.200109][ T3812] team0: Port device geneve1 removed [ 389.762646][ T3812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.779585][ T3812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.794947][ T3812] bond0 (unregistering): Released all slaves [ 389.980990][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.988459][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.997038][ T3812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.004608][ T3812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.037705][ T3002] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10642'. [ 390.047065][ T3812] veth1_macvtap: left promiscuous mode [ 390.054492][ T3812] veth0_macvtap: left promiscuous mode [ 390.060037][ T3812] veth1_vlan: left promiscuous mode [ 390.078816][ T3812] veth0_vlan: left promiscuous mode [ 390.265755][ T3812] team0 (unregistering): Port device team_slave_1 removed [ 390.292030][ T3812] team0 (unregistering): Port device team_slave_0 removed [ 390.322703][ T3015] loop9: detected capacity change from 0 to 8192 [ 390.389264][ T3002] 0{X功: renamed from gretap0 (while UP) [ 390.403471][ T3002] 0{X功: entered allmulticast mode [ 390.418495][ T3002] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 390.498079][ T3032] loop2: detected capacity change from 0 to 512 [ 390.527089][ T3032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 390.547698][ T3032] EXT4-fs (loop2): 1 truncate cleaned up [ 390.567718][ T3032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.338896][ T3085] lo speed is unknown, defaulting to 1000 [ 391.345953][ T3085] lo speed is unknown, defaulting to 1000 [ 391.354031][ T3085] lo speed is unknown, defaulting to 1000 [ 391.360608][ T3085] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 391.376368][ T3085] lo speed is unknown, defaulting to 1000 [ 391.393135][ T398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.399854][ T3085] lo speed is unknown, defaulting to 1000 [ 391.419664][ T3085] lo speed is unknown, defaulting to 1000 [ 391.427696][ T3085] lo speed is unknown, defaulting to 1000 [ 391.453853][ T3085] lo speed is unknown, defaulting to 1000 [ 391.461982][ T3085] lo speed is unknown, defaulting to 1000 [ 391.478192][ T3085] lo speed is unknown, defaulting to 1000 [ 391.812066][ T3113] loop9: detected capacity change from 0 to 1024 [ 391.830512][ T3113] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 391.841679][ T3113] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 391.864627][ T3118] loop2: detected capacity change from 0 to 512 [ 391.886659][ T3118] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.10670: invalid block [ 391.916026][ T3113] JBD2: no valid journal superblock found [ 391.921920][ T3113] EXT4-fs (loop9): Could not load journal inode [ 391.935768][ T3118] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10670: invalid indirect mapped block 4294967295 (level 1) [ 391.963749][ T3113] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 391.994733][ T3118] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.10670: invalid indirect mapped block 4294967295 (level 1) [ 392.052900][ T3118] EXT4-fs (loop2): 2 truncates cleaned up [ 392.094363][ T3118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.197366][ T3148] netlink: 'syz.1.10678': attribute type 7 has an invalid length. [ 392.205282][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10678'. [ 392.306188][ T3155] netlink: 'syz.9.10680': attribute type 30 has an invalid length. [ 392.344944][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 392.344964][ T29] audit: type=1326 audit(1757892657.825:17295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.437650][ T29] audit: type=1326 audit(1757892657.825:17296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.461500][ T29] audit: type=1326 audit(1757892657.867:17297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.485135][ T29] audit: type=1326 audit(1757892657.867:17298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.509052][ T29] audit: type=1326 audit(1757892657.867:17299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.515203][ T3163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.532879][ T29] audit: type=1326 audit(1757892657.867:17300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.532920][ T29] audit: type=1326 audit(1757892657.878:17301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.590902][ T29] audit: type=1326 audit(1757892657.878:17302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3158 comm="syz.1.10682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4229b4eba9 code=0x7ffc0000 [ 392.633765][ T3150] netlink: 332 bytes leftover after parsing attributes in process `syz.5.10679'. [ 392.644877][ T3150] netlink: 'syz.5.10679': attribute type 9 has an invalid length. [ 392.653000][ T3150] netlink: 108 bytes leftover after parsing attributes in process `syz.5.10679'. [ 392.662300][ T3150] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10679'. [ 392.692429][ T398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.028028][ T29] audit: type=1326 audit(1757892658.539:17303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3186 comm="syz.2.10689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3bc0eba9 code=0x7ffc0000 [ 393.051733][ T29] audit: type=1326 audit(1757892658.539:17304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3186 comm="syz.2.10689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f3bc0eba9 code=0x7ffc0000 [ 393.354064][ T3194] loop2: detected capacity change from 0 to 512 [ 393.706926][ T3213] loop2: detected capacity change from 0 to 512 [ 393.738357][ T3213] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.758145][ T3213] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.10698: bg 0: block 4: invalid block bitmap [ 393.798001][ T3213] EXT4-fs (loop2): Remounting filesystem read-only [ 393.823460][ T3213] EXT4-fs (loop2): 1 truncate cleaned up [ 393.892872][ T3230] loop9: detected capacity change from 0 to 1024 [ 393.919777][ T3213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.995048][ T3244] netlink: 'syz.1.10709': attribute type 4 has an invalid length. [ 394.018299][ T3244] netlink: 'syz.1.10709': attribute type 4 has an invalid length. [ 394.037675][ T3421] lo speed is unknown, defaulting to 1000 [ 394.043465][ T3421] syz0: Port: 1 Link ACTIVE [ 394.120696][ T3250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=3250 comm=syz.5.10712 [ 394.161807][ T3250] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10712'. [ 394.180011][ T3250] macvtap0: refused to change device tx_queue_len [ 394.242135][ T3253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10713'. [ 394.421395][ T3263] netlink: 56 bytes leftover after parsing attributes in process `syz.9.10715'. [ 394.430673][ T3263] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10715'. [ 394.463484][ T3265] SELinux: security_context_str_to_sid (-歑軜7.H\ %簎@) failed with errno=-22 [ 394.530747][ T398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.814507][ T3283] lo speed is unknown, defaulting to 1000 [ 395.224027][ T3312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=3312 comm=syz.0.10723 [ 395.253140][ T3312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10723'. [ 395.282982][ T3312] macvtap0: refused to change device tx_queue_len [ 395.375782][ T3325] loop2: detected capacity change from 0 to 512 [ 395.395972][ T23] Process accounting resumed [ 395.439067][ T3325] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.10726: casefold flag without casefold feature [ 395.466486][ T3325] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.10726: couldn't read orphan inode 15 (err -117) [ 395.503792][ T3325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.600922][ T398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.800791][ T3381] hub 9-0:1.0: USB hub found [ 395.806619][ T3381] hub 9-0:1.0: 8 ports detected [ 396.422370][ T3414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10751'. [ 396.452985][ T3414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10751'. [ 396.483138][ T3420] netlink: 'syz.1.10752': attribute type 30 has an invalid length. [ 396.653709][ T3430] loop9: detected capacity change from 0 to 1024 [ 397.250418][ T3457] veth0: entered promiscuous mode [ 397.259764][ T3457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10762'. [ 397.281114][ T3457] veth0 (unregistering): left promiscuous mode [ 397.432838][ T3476] netlink: 'syz.0.10767': attribute type 13 has an invalid length. [ 397.440852][ T3476] netlink: 'syz.0.10767': attribute type 17 has an invalid length. [ 397.455349][ T3478] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 397.470834][ T3476] 0{X功: left allmulticast mode [ 397.488476][ T3476] bridge0: port 3(ip6gretap0) entered blocking state [ 397.495290][ T3476] bridge0: port 3(ip6gretap0) entered forwarding state [ 397.502374][ T3476] bridge0: left promiscuous mode [ 397.507435][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.517354][ T3476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.531627][ T3476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 397.630728][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 397.630764][ T29] audit: type=1400 audit(1757892663.380:17521): avc: denied { firmware_load } for pid=3481 comm="syz.2.10770" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 397.755849][ T3501] loop2: detected capacity change from 0 to 1024 [ 397.788966][ T3501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.840761][ T3501] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.10776: Allocating blocks 449-513 which overlap fs metadata [ 397.868977][ T29] audit: type=1400 audit(1757892663.631:17522): avc: denied { rename } for pid=3499 comm="syz.2.10776" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 397.869511][ T3501] EXT4-fs (loop2): pa ffff8881006949a0: logic 48, phys. 177, len 21 [ 397.899670][ T3501] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 397.918161][ T3873] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.991652][ T398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.038371][ T3512] __nla_validate_parse: 2 callbacks suppressed [ 398.038391][ T3512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10778'. [ 398.069556][ T3512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10778'. [ 398.195368][ T3521] tipc: Enabling of bearer rejected, failed to enable media [ 398.280428][ T3518] lo speed is unknown, defaulting to 1000 [ 398.439075][ T3812] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.446983][ T3812] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.464718][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.512111][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.519943][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 398.661054][ T29] audit: type=1326 audit(1757892664.461:17523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.9.10785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 398.684818][ T29] audit: type=1326 audit(1757892664.461:17524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.9.10785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 398.708409][ T29] audit: type=1326 audit(1757892664.461:17525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.9.10785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 398.732031][ T29] audit: type=1326 audit(1757892664.461:17526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.9.10785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 398.756131][ T29] audit: type=1326 audit(1757892664.461:17527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3554 comm="syz.9.10785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbeb265eba9 code=0x7ffc0000 [ 398.883859][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.070582][ T3571] netlink: 'syz.2.10791': attribute type 30 has an invalid length. [ 399.198163][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 399.513262][ T3591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10794'. [ 399.567459][ T3599] loop2: detected capacity change from 0 to 128 [ 399.659033][ T29] audit: type=1326 audit(1757892665.511:17528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.5.10799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 399.682769][ T29] audit: type=1326 audit(1757892665.511:17529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.5.10799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 399.706361][ T29] audit: type=1326 audit(1757892665.511:17530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3604 comm="syz.5.10799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 399.786184][ T3602] netlink: 332 bytes leftover after parsing attributes in process `syz.9.10798'. [ 399.798046][ T3602] netlink: 'syz.9.10798': attribute type 9 has an invalid length. [ 399.805905][ T3602] netlink: 108 bytes leftover after parsing attributes in process `syz.9.10798'. [ 399.809220][ T3606] syz.2.10797: attempt to access beyond end of device [ 399.809220][ T3606] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 399.815075][ T3602] netlink: 32 bytes leftover after parsing attributes in process `syz.9.10798'. [ 399.857363][ T3599] syz.2.10797: attempt to access beyond end of device [ 399.857363][ T3599] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 399.867720][ T3606] syz.2.10797: attempt to access beyond end of device [ 399.867720][ T3606] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 399.880212][ T3599] syz.2.10797: attempt to access beyond end of device [ 399.880212][ T3599] loop2: rw=2049, sector=209, nr_sectors = 24 limit=128 [ 399.898585][ T3606] syz.2.10797: attempt to access beyond end of device [ 399.898585][ T3606] loop2: rw=0, sector=161, nr_sectors = 1 limit=128 [ 399.927572][ T3618] netlink: 'syz.5.10800': attribute type 13 has an invalid length. [ 399.935596][ T3618] netlink: 'syz.5.10800': attribute type 17 has an invalid length. [ 399.951928][ T3618] 0{X功: left allmulticast mode [ 399.968048][ T3618] bridge0: port 3(ip6gretap0) entered blocking state [ 399.969712][ T3599] syz.2.10797: attempt to access beyond end of device [ 399.969712][ T3599] loop2: rw=2049, sector=241, nr_sectors = 2 limit=128 [ 399.974827][ T3618] bridge0: port 3(ip6gretap0) entered forwarding state [ 399.978718][ T3618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.012696][ T3623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.023236][ T3623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.046167][ T3618] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.067375][ T3618] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.355572][ T3643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10806'. [ 400.449723][ T3643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.500561][ T3643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.530596][ T3629] lo speed is unknown, defaulting to 1000 [ 400.539147][ T3658] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10810'. [ 400.679939][ T3687] netlink: 360 bytes leftover after parsing attributes in process `syz.5.10813'. [ 400.802842][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10819'. [ 400.830550][ T3702] team0 (unregistering): Port device dummy0 removed [ 401.019653][ T3759] netlink: 'syz.1.10824': attribute type 13 has an invalid length. [ 401.027876][ T3759] netlink: 'syz.1.10824': attribute type 17 has an invalid length. [ 401.082510][ T3759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.095452][ T3759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.183341][ T3761] loop9: detected capacity change from 0 to 512 [ 401.191099][ T3761] EXT4-fs: Ignoring removed nobh option [ 401.201761][ T3773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=3773 comm=syz.0.10828 [ 401.545226][ T3790] lo speed is unknown, defaulting to 1000 [ 401.636644][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 401.680624][ T3836] syzkaller0: entered promiscuous mode [ 401.686519][ T3836] syzkaller0: entered allmulticast mode [ 402.493186][ T3927] lo speed is unknown, defaulting to 1000 [ 402.663620][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 402.663650][ T29] audit: type=1326 audit(1757892668.661:17586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 402.698924][ T29] audit: type=1326 audit(1757892668.692:17587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 402.722628][ T29] audit: type=1326 audit(1757892668.692:17588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a2270ebe3 code=0x7ffc0000 [ 402.746101][ T29] audit: type=1326 audit(1757892668.692:17589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1a2270ebe3 code=0x7ffc0000 [ 402.769587][ T29] audit: type=1326 audit(1757892668.692:17590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 402.793299][ T29] audit: type=1326 audit(1757892668.692:17591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 402.854392][ T29] audit: type=1326 audit(1757892668.692:17592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 402.878066][ T29] audit: type=1326 audit(1757892668.692:17593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 402.901921][ T29] audit: type=1326 audit(1757892668.692:17594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 402.925659][ T29] audit: type=1326 audit(1757892668.692:17595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3959 comm="syz.5.10851" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2270eba9 code=0x7ffc0000 [ 403.078355][ T3975] $H: renamed from bond0 (while UP) [ 403.106693][ T3975] $H: entered promiscuous mode [ 403.111890][ T3975] bond_slave_0: entered promiscuous mode [ 403.117742][ T3975] bond_slave_1: entered promiscuous mode [ 403.225328][ T3982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10857'. [ 403.347266][ T3988] vlan1: entered allmulticast mode [ 403.352793][ T3988] dummy0: entered allmulticast mode [ 403.540987][ T4005] loop9: detected capacity change from 0 to 512 [ 403.648040][ T4014] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 403.655565][ T4014] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 403.845230][ T4027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10870'. [ 403.927908][ T4039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10871'. [ 403.937094][ T4039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10871'. [ 403.946232][ T4039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10871'. [ 403.955590][ T4039] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10871'. [ 403.973015][ T4041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=4041 comm=syz.0.10883 [ 404.029437][ T4049] serio: Serial port ptm0 [ 404.736127][ T4075] netlink: 'syz.2.10880': attribute type 13 has an invalid length. [ 404.744264][ T4075] netlink: 'syz.2.10880': attribute type 17 has an invalid length. [ 404.757600][ T4075] 0{X功: left allmulticast mode [ 404.822024][ T4079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.829757][ T4075] $H: left promiscuous mode [ 404.832003][ T4079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.835193][ T4075] bond_slave_0: left promiscuous mode [ 404.848540][ T4075] bond_slave_1: left promiscuous mode [ 404.855080][ T4075] 8021q: adding VLAN 0 to HW filter on device $H [ 404.989207][ T4075] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.250821][ T4087] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10884'. [ 405.457154][ T4078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10884'. [ 405.823993][ T4107] lo speed is unknown, defaulting to 1000 [ 405.881448][ T4133] lo: entered promiscuous mode [ 406.124604][ T4154] hub 9-0:1.0: USB hub found [ 406.135159][ T4154] hub 9-0:1.0: 8 ports detected [ 406.193531][ T4158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10903'. [ 406.361879][ T4162] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.419081][ T4162] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.462593][ T4172] pim6reg1: entered promiscuous mode [ 406.468084][ T4172] pim6reg1: entered allmulticast mode [ 406.503474][ T4162] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.586975][ T4162] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.719280][ T4196] netlink: 'syz.9.10909': attribute type 13 has an invalid length. [ 406.727292][ T4196] netlink: 'syz.9.10909': attribute type 17 has an invalid length. [ 406.745558][ T3873] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.763952][ T3873] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.774804][ T4201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.812402][ T4201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.875014][ T4196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.891013][ T3873] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.907765][ T3873] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.126287][ T3853] ================================================================== [ 407.134445][ T3853] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios [ 407.142995][ T3853] [ 407.145336][ T3853] write to 0xffff8881048c7108 of 44 bytes by task 4211 on cpu 0: [ 407.153078][ T3853] tty_set_termios+0xc0/0x8c0 [ 407.157789][ T3853] set_termios+0x496/0x4e0 [ 407.162242][ T3853] tty_mode_ioctl+0x379/0x5c0 [ 407.166952][ T3853] n_tty_ioctl_helper+0x91/0x210 [ 407.172054][ T3853] n_tty_ioctl+0x101/0x200 [ 407.176522][ T3853] tty_ioctl+0x845/0xb80 [ 407.180788][ T3853] __se_sys_ioctl+0xce/0x140 [ 407.185411][ T3853] __x64_sys_ioctl+0x43/0x50 [ 407.190019][ T3853] x64_sys_call+0x1816/0x2ff0 [ 407.194722][ T3853] do_syscall_64+0xd2/0x200 [ 407.199262][ T3853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.205181][ T3853] [ 407.207519][ T3853] read to 0xffff8881048c7122 of 1 bytes by task 3853 on cpu 1: [ 407.215079][ T3853] n_tty_receive_char_flow_ctrl+0x59/0x1a0 [ 407.220935][ T3853] n_tty_lookahead_flow_ctrl+0xed/0x130 [ 407.226524][ T3853] tty_port_default_lookahead_buf+0x91/0xc0 [ 407.232439][ T3853] flush_to_ldisc+0x285/0x340 [ 407.237134][ T3853] process_scheduled_works+0x4cb/0x9d0 [ 407.242630][ T3853] worker_thread+0x582/0x770 [ 407.247250][ T3853] kthread+0x489/0x510 [ 407.251389][ T3853] ret_from_fork+0x11f/0x1b0 [ 407.256013][ T3853] ret_from_fork_asm+0x1a/0x30 [ 407.260804][ T3853] [ 407.263143][ T3853] value changed: 0x13 -> 0x3c [ 407.267822][ T3853] [ 407.270156][ T3853] Reported by Kernel Concurrency Sanitizer on: [ 407.276317][ T3853] CPU: 1 UID: 0 PID: 3853 Comm: kworker/u8:42 Not tainted syzkaller #0 PREEMPT(voluntary) [ 407.286322][ T3853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 407.296413][ T3853] Workqueue: events_unbound flush_to_ldisc [ 407.302252][ T3853] ================================================================== [ 409.341502][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 412.313178][ T3374] page_pool_release_retry() stalled pool shutdown: id 200, 2 inflight 60 sec