last executing test programs: 3m30.72194539s ago: executing program 1 (id=4767): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000004c0)=""/14}, {0x0}, {&(0x7f0000000380)=""/183, 0xb7}], 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 3m29.820329202s ago: executing program 1 (id=4782): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$eJzs3V9rLGcZAPBnNrvHk3NymlS90IK12krOQc9u0tg2eFEriF4V1HpfY7IJIZtsyG7ak1BMDn4AQUQFr/TGG8EPIEjBGy9FKOi1oqKInuqFF9qR2Z1Nc5L913aTTZPfDybzvjPvzPO8G2Z2ZmeYCeDKeiIiXoiIt9I0vRMR0/n0Qj7EYXvI2r354LXlbEgiTV/6RxJJPq2zriQf38wXux4RX/tyxDeT03Ebe/sbS7VadSevV5qb25XG3v7d9c2ltepadWthYf7ZxecWn1mcG0k/b0XE81/8y/e/89MvPf/Lz7z6x5f/dvtbWVpT+fzj/XiHiv1mtrtean0WxxfYeZfBLqJiq4e5yW4tJk5NuX/GOQEA0F12jP/BiPhkRNyJ6ZjofzgLAAAAvA+ln5+K/yYRaXfXekwHAAAA3kcKrXtgk0I5vxdgKgqFcrl9D++H40ahVm80P71a391aad8rOxOlwup6rTqX3ys8E6Ukq8+3ym/Xnz5RX4iIRyPie9OTrXp5uV5bGfePHwAAAHBF3Dxx/v/v6fb5f8fBOJMDAAAARmdm3AkAAAAAZ27Y8/8bZ5wHAAAAcHZc/wcAAIBL7SsvvpgNaef91yuv7O1u1F+5u1JtbJQ3d5fLy/Wd7fJavb7Wembf5qD11er17c/G1u69SrPaaFYae9djs7671Xx5/aFXYAMAAADn6NGPv/77JCIOPzfZGjLXhlt0yGbARVU8KiX5uMtm/YdH2uM/n1NSwLmYGHcCwNgUx50AMDalcScAjF0yYH7Pm3d+k48/Mdp8AACA0Zv9aO/r/4W+Sx72nw1ceDZiuLpc/4erq3X9f9g7eR0swKVSGnQE0HebPxhxNsA4vOfr/wOl6TtKCAAAGLmp1pAUysVOvVAolyNutV4LUEpW12vVuYh4JCJ+N136QFafb7VMBp4zAAAAAAAAAAAAAAAAAAAAAAAAAABtaZpECgAAAFxqEYW/Jr9qP8t/dvqpqZO/D1xL/jMd+StCX/3RSz+4t9Rs7sxn0/95NL35w3z60+P4BQMAAACuhAEv8H9Y5zy9cx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKP05oPXljvDecb9+xciYqZb/GJcb42vRykibvwrieKx5ZKImBhB/Mnsz0e6xU+ytI5Cdos/OYL4h/f7xo/D/FPoFv/mCOLDVfZ6tv95odv2V4gnWuPu218x4qH6u9V7/xdH+7+JHtv/rSFjPPbGzys949+PeKx4Kv5BFqETP+kR/8kh43/j6/v7vealP46Y7fr9k3SaZHvIqDQ3tyuNvf2765tLa9W16tbCwvyzi88tPrM4V1ldr1Xzv11jfPdjv3irX/9v9Ig/M6D/T51a27WuMf73xr0HH2oXS93i336yS/xf/yRvcTp+If/u+1RezubPdsqH7fJxj//st4/36/9Kj/4P+v/f7rXSE+589dt/GrIpAHAOGnv7G0u1WnXn0hays/QhG2dHZxciZ4XzKRyMdIVpmqbZNvUe1pPERfhYWoVx75kAAIBRe/ugf9yZAAAAAAAAAAAAAAAAAAAAwNV1Ho8TOxnz8KiUjOIR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/H/AAAA///s19ky") r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3m29.164021624s ago: executing program 1 (id=4792): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mm_page_free\x00', r2, 0x0, 0x5}, 0x18) read(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xfdef, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x8d348b7d2e649c4b, 0x1010, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x34, 0x0, @fd_index=0x8, 0x0, 0x0, 0x7, 0x8, 0x1, {0x0, r5, r1}}) socket$inet_sctp(0x2, 0x5, 0x84) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v1={0x1000000, [{0xffffffff, 0x6}]}, 0xc, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x1010, r0, 0x1a651000) 3m28.880510087s ago: executing program 1 (id=4797): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x81, 0x12510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x8280, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000e00)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000002000000ddffffff00"/384]) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) r6 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000000100)={'nat\x00'}, &(0x7f00000001c0)=0x24) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x107) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r9, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 3m24.971094449s ago: executing program 1 (id=4847): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r7, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3m24.57792727s ago: executing program 1 (id=4854): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "d524c18c21e24872", "c6a71e72e7ff122a782a7f00", "e471e97b", "6168e4a7e349a0d4"}, 0x28) close(r1) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@local, @remote, @void, {@llc={0x4, {@llc={0x42, 0xf4, '\x00', "95f0f6d9"}}}}}, 0x0) 3m24.573566481s ago: executing program 32 (id=4854): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "d524c18c21e24872", "c6a71e72e7ff122a782a7f00", "e471e97b", "6168e4a7e349a0d4"}, 0x28) close(r1) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@local, @remote, @void, {@llc={0x4, {@llc={0x42, 0xf4, '\x00', "95f0f6d9"}}}}}, 0x0) 3m10.039677941s ago: executing program 5 (id=5146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000906010200000c0000000000020000000900020073797a310000000005000100070000002c0007801800018014000240fe8000000000000000000000000000bb060004404e1f000005000700"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 3m9.981324366s ago: executing program 5 (id=5149): bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r7, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 3m9.850756637s ago: executing program 5 (id=5150): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) fsopen(&(0x7f0000000000)='hfs\x00', 0x0) (fail_nth: 3) 3m9.567458829s ago: executing program 5 (id=5151): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r4}, 0x18) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000f8dbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000440)=""/104) timer_create(0x4, &(0x7f0000000040)={0x0, 0x5, 0x4, @tid=r5}, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000002380)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="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", @ANYBLOB="000000000000b9e4b7040000010000008500000078ffff0000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r6, @ANYRES32], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_u}]}}) socket$key(0xf, 0x3, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000006de91f442d540dfd014de000000000000"], &(0x7f0000000600)='GPL\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x3, 0x8, {{0x31, 0x4, 0x1, 0x39, 0xc4, 0x64, 0x0, 0x3, 0x2f, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x23, 0xb, [@dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @local, @private=0xa010102, @rand_addr=0x64010102, @empty, @loopback]}, @timestamp_addr={0x44, 0x4c, 0x39, 0x1, 0x0, [{@broadcast, 0xb3}, {@multicast2, 0xac}, {@empty, 0x4}, {@broadcast, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@remote, 0xd}, {@broadcast, 0xfffffffd}, {@multicast2, 0x4}, {@loopback, 0x1}]}, @rr={0x7, 0x1f, 0xe7, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x7, [{@local, 0xffffff0d}, {@local, 0x2}]}, @timestamp={0x44, 0xc, 0xa1, 0x0, 0x8, [0x3, 0x9]}]}}}}}) truncate(&(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xf26}, 0x8) 3m9.212444998s ago: executing program 5 (id=5163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r4, 0x0, 0xf7}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffa8) 3m8.508379744s ago: executing program 5 (id=5176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)="0000110000150000000000", 0xffffffffffffff90, 0x10008095, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) 3m8.481965856s ago: executing program 33 (id=5176): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)="0000110000150000000000", 0xffffffffffffff90, 0x10008095, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) 1m44.633471543s ago: executing program 6 (id=6663): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xb4, 0xffffffffffffffff, 'id0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x4, [@datasec={0xf, 0x0, 0x0, 0xf, 0x1, [], "d4"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000000c0)=""/38, 0x2c, 0x26, 0x0, 0x7, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf72b3000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) r6 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x8202, 0x144) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="b7ccb47a96cf5a1fa739a052470b1bbab9231a87fcbd808ff740f693a21f4467fd192ac3eeab122a695c27b6581249700bb0b4283237319a02b49070f45bde8727cdb03d4c6488a0", 0x48}, {&(0x7f0000000540)="bea72ab4e4738993efef5a0c62b3b1548324e986828876db1855be97279691c9fb4a58746d070e799d1d12354a5fb014584dcc5504af7224a01e27cfc9de2c0c123c5b1dffcc1139f9f5987bef9464a95acf3a6b7a0f477c080522e2458007562d8dc9f1630ec0bfd51a8b4cda07d900920098526fde86724a15ba3f579aed61efe9ced46d3e36824189cc94f62dac422c86741e2763bf7ac0d7fbce", 0x9c}], 0x2, &(0x7f0000000680)=[{0x30, 0x3a, 0x2, "150c2bdc0abe8b73424b1fa46d26bc63af09554bfc499a0ee170ebe3a31abb"}, {0x98, 0x29, 0x6f3, "91aca95ebb669e0745c982b35c011fa28173c955e50ed216475cafcf9fb15e062a5ddc51fd1098843177df3dd377c060bf9c07bbfbd5b227a06a874216276896685c74fa93623e53fb03614fc9566847df565444ecb900d0884372b76fb2bac173424d1c5c959b9108f3569d3c79e04c8a6807f96f6ea4f041f5640468e8190cd1"}], 0xc8}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='xprtrdma_post_send_err\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m44.16866556s ago: executing program 6 (id=6678): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) futex(&(0x7f000000cffc)=0x1, 0x185, 0x4, 0x0, &(0x7f0000000000)=0x1, 0x1) socket$unix(0x1, 0x1, 0x0) 1m43.305876389s ago: executing program 6 (id=6695): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1m43.271618682s ago: executing program 6 (id=6697): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x1, 0x5, 0xb, 0x6, 0xfffffff0, 0x9}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x11, 0x7fffffff}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x8a, &(0x7f00000001c0)=""/138, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_setup(0x243f, &(0x7f0000000200)={0x0, 0xfffffffb, 0x42, 0x2, 0xfffffffd}) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x90d80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f00000003c0)=""/119, 0x1000, 0x800, 0x3, 0x2}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x101}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000002, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x100, 0xfffffffc, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0xda08, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "2fad65e5d5f2aa6a5f70876b33e432f17d744708dc7f1334b3ae30fcbc7f12658205e0ccd3bdffd05cacba0e1637e23a"}, 0x40) 1m42.887418092s ago: executing program 6 (id=6703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f0000000040)='./file1\x00', 0x0) 1m42.601986275s ago: executing program 6 (id=6707): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) write$P9_RLCREATE(r3, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x8, 0x2, 0x4}, 0x8}}, 0x18) 1m42.585290976s ago: executing program 34 (id=6707): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000) write$P9_RLCREATE(r3, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x8, 0x2, 0x4}, 0x8}}, 0x18) 2.101334532s ago: executing program 7 (id=8638): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x6, 0x8, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000003380)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x2052, 0xffffffffffffffff, 0x3000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="a80100002100010027bd7000fedbdf2502"], 0x1a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000050) 1.578940004s ago: executing program 3 (id=8651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.559165905s ago: executing program 3 (id=8653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.532142767s ago: executing program 3 (id=8654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.464615633s ago: executing program 3 (id=8655): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup, 0xffffffffffffffff, 0x36, 0x2020}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xca380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x4, 0x40010, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x100, &(0x7f0000000000), 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 1.389296149s ago: executing program 3 (id=8658): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sysinfo(&(0x7f0000000000)=""/152) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000864) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x3, 0xfffffffe, 0x3ff}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000600)=0x9, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x4000ce9}, 0x18) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0xfff2, 0xffff}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x4ffe6, 0x0) 1.200730554s ago: executing program 7 (id=8662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000580)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x1, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 1.133396039s ago: executing program 7 (id=8664): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400"/15], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2}, 0x94) 1.100514362s ago: executing program 7 (id=8665): perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xba4}, 0x0, 0xc8, 0x0, 0x6, 0x0, 0x1, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000015c0)=0x4) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) sendfile(r0, r0, 0x0, 0x800000009) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000020018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1}}, 0x2e) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 1.041802877s ago: executing program 7 (id=8667): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) 974.534572ms ago: executing program 4 (id=8670): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 940.074005ms ago: executing program 7 (id=8672): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) r0 = socket(0xa, 0x3, 0xff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x68, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xd}, {0x0, 0xf}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe53}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x24, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x1ff}, @TCA_POLICE_TBF={0x0, 0x1, {0x5, 0x3, 0x9, 0xc, 0xd65, {0x5, 0x0, 0x3, 0x1, 0x8, 0x1}, {0x5, 0x1, 0x2, 0x1, 0x1, 0x373a}, 0x989, 0x9, 0x71}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x8) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe800000"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x6}, 0x7}], 0x1, 0x102, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}}, 0x0) 899.681548ms ago: executing program 4 (id=8674): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "d524c18c21e24872", "c6a71e72e7ff122a782a7f00", "e471e97b", "6168e4a7e349a0d4"}, 0x28) close(r2) copy_file_range(r0, &(0x7f0000000000)=0x5, r0, &(0x7f0000000040)=0x4, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@local, @remote, @void, {@llc={0x4, {@llc={0x42, 0xf4, '\x00', "95f0f6d9"}}}}}, 0x0) 800.443916ms ago: executing program 4 (id=8679): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, r2, 0x10ada85e65c25359, 0xfffffff9, 0x25dfdbfd, {{0x6b}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x20, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x0, 0x9, 0xa, 0x7, 0x2, 0xb]}}]}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 784.647727ms ago: executing program 4 (id=8680): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='mm_page_free\x00', r1, 0x0, 0x5}, 0x18) syz_emit_ethernet(0xfdef, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ca3000/0x2000)=nil, 0x2000, 0x0, 0x80010, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x8d348b7d2e649c4b, 0x1010, 0xffffffffffffffff, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_TEE={0x21, 0x34, 0x0, @fd_index=0x8, 0x0, 0x0, 0x7, 0x8, 0x1, {0x0, r4, r0}}) socket$inet_sctp(0x2, 0x5, 0x84) setxattr$security_capability(0x0, &(0x7f0000000080), &(0x7f0000000200)=@v1={0x1000000, [{0xffffffff, 0x6}]}, 0xc, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@sr0, 0x0, &(0x7f00000002c0)='./file0/file1\x00') 568.514974ms ago: executing program 4 (id=8688): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x200408, &(0x7f00000000c0), 0xfd, 0x585, &(0x7f0000002480)="$eJzs3d9rFNceAPDvbDZGjfcmF0Su9+Ei+FCLuDFJf1goaB9LKxXad7ska5BsXMkPaVKh8aG+9KVIoZQKpX9A3/rQR+k/0L9CaAUpEtqHUkiZ3dm4Zn9kEzfd1P18YHTOzuycc3Lme3LOzGw2gIF1Kv0nF3EyIj5PIsYatuUj23iqtt/Gk9sz6ZLE5ub7vyZxcduxkuz/0Szx34j48dOIs7nmfJdW1+aL5XJpMUtPLC/cnFhaXTt3faE4V5or3Zianr7w6vTUG6+/1kUthruq68tXfv/qvQdvX/js9MaX3z36z70kLsWxbFtar64O0tl6Y+JU8c+t8l3atuNkDzI7SJJ+F4A9GcriPI2gkzEWQ1nUAy++TyJiExhQifiHAVUfB9Tn9j2aB/9jPH6rNgFqqP9QbUu+dm0kDlfnRkc3kmdmRul8d7wH+ad5/PDL/XvpEp2vQxzZIQ2wK+t3IuJ8Pt/c/ydZ/7d356sXjzvbnkcv+lSgOw/S8U+yHtEU/7mt8U+0GP+Mtojdvdh+jObxT+5RD7JpKx3/vdly/LvVdY0PZal/Vfun4eTa9XLpfET8OyLOxPBImu50P+fCxsPNdtsax3/pkuZfHwtm5XiUH3n2PbPF5eLz1LnR4zsR/8u3qn+y1f5Ji/ZPfx5XuszjROn+/9tt27n++2vz24iXWrb/0ztaSef7kxPV82GiflY0++3uiZ/a5d/v+qftf7Rz/ceTxvu1S7vP45vDf5Tabdvr+X8o+aC6fih77aPi8vLiZMSh5N386PbXp56+t56u75/W/8zp1vHf6fxPJ18fdln/u8fvtt31ILT/7K7af/crD9/5+Ot2+XfX/q9U185kr3TT/3VbwOf52QEAAAAAAMBBk4uIY5HkClvruVyhUHu+43gczZUrS8tnr1VWbsxG9bOy4zGcq9/pHmt4HmIye3arnp7alp6O2mO1XwwdqaYLM5XybL8rDwAAAAAAAAAAAAAAAAAAAAfEaJvP/6d+Hup36YB9V/1ig5F+lwLohx2/8r8X3/QEHEg7xj/wwtp9/LsyAC8Kv/9hcIl/GFziHwZXt/E/PLbPBQH+dn7/w+AS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBTVy5fTpfNjSe3Z9L07K3VlfnKrXOzpaX5wsLKTGGmsnizMFepzJVLhZnKwk7HK1cqNydjvZZYnlhaXbu6UFm5sXz1+kJxrnS1NOyPDQMAAAAAAAAAAAAAAAAAAECTpdW1+WK5XFq00nblYhyIYuxnBauG9/T2fJ8L/312Ju97XiODFTL96pEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNlfAQAA//+BlSf2") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 516.089008ms ago: executing program 2 (id=8691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x3c, r2, 0x10ada85e65c25359, 0xfffffff9, 0x25dfdbfd, {{0x6b}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x28, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x20, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x0, 0x9, 0xa, 0x7, 0x2, 0xb]}}]}]}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 515.430548ms ago: executing program 3 (id=8692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001b00)=""/4074, 0xfea}, {&(0x7f00000047c0)=""/4054, 0xfd6}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f00000019c0)=""/160, 0xa0}], 0x5}, 0x40000000) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f00000016c0)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x800) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), 0x0}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x14) openat$snapshot(0xffffffffffffff9c, 0x0, 0x20300, 0x0) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 514.782139ms ago: executing program 4 (id=8693): socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, 0x0, 0x0, 0x7800, 0x0, 0x3) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x8, 0x1698}, 0x8) 495.26867ms ago: executing program 2 (id=8694): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x40840) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 468.320352ms ago: executing program 2 (id=8696): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') futimesat(r0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0xea60}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x700682, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="280000001c00010428bd700000dcdf2507000000", @ANYRES32=r4, @ANYBLOB="40ffe4090a000200bb"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r5 = socket(0x10, 0x803, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000180)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000700000a38000000180a03000000000000000000010000080900010073797a31000000000900010073797a31000000000c000540000000000000020a0300000100000000000000000000140000001000010000000000000000000084000a"], 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xd) unshare(0x20000400) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r7, 0x0, 0x2ca}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 420.103386ms ago: executing program 0 (id=8697): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 349.888722ms ago: executing program 0 (id=8698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x400}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4fd, 0x4, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000102c0)=[{{0x0, 0xfffffffffffffecc, &(0x7f0000010340)=[{&(0x7f0000000080)="00000000000000037cb1c140af", 0xd}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002500)="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", 0x433}], 0x1}}], 0x2, 0x0) 349.159522ms ago: executing program 0 (id=8699): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 332.272583ms ago: executing program 0 (id=8700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 280.493777ms ago: executing program 0 (id=8701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 231.598581ms ago: executing program 0 (id=8702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f00000190c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x18) sysinfo(&(0x7f0000000000)=""/152) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000864) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x4, 0x3, 0xfffffffe, 0x3ff}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000600)=0x9, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3, 0x0, 0x4000ce9}, 0x18) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0xfff2, 0xffff}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc) splice(r9, 0x0, r11, 0x0, 0x4ffe6, 0x0) 185.983344ms ago: executing program 2 (id=8703): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) 80.033503ms ago: executing program 2 (id=8704): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x200408, &(0x7f00000000c0), 0xfd, 0x585, &(0x7f0000002480)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=8705): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0xb4, 0xffffffffffffffff, 'id0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x4, [@datasec={0xf, 0x0, 0x0, 0xf, 0x1, [], "d4"}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000000c0)=""/38, 0x2c, 0x26, 0x0, 0x7, 0x10000, @value=r0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf72b3000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r6 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x8202, 0x144) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, &(0x7f0000000680)=[{0x30, 0x3a, 0x2, "150c2bdc0abe8b73424b1fa46d26bc63af09554bfc499a0ee170ebe3a31abb"}, {0x98, 0x29, 0x6f3, "91aca95ebb669e0745c982b35c011fa28173c955e50ed216475cafcf9fb15e062a5ddc51fd1098843177df3dd377c060bf9c07bbfbd5b227a06a874216276896685c74fa93623e53fb03614fc9566847df565444ecb900d0884372b76fb2bac173424d1c5c959b9108f3569d3c79e04c8a6807f96f6ea4f041f5640468e8190cd1"}], 0xc8}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='xprtrdma_post_send_err\x00', 0xffffffffffffffff, 0x0, 0x80}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 83.063546][T20155] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.082046][T26932] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 483.091499][T26932] EXT4-fs (loop4): 1 orphan inode deleted [ 483.100140][T26942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7783'. [ 483.109188][T26942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7783'. [ 483.125819][T26942] IPv6: Can't replace route, no match found [ 483.136047][T26943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7785'. [ 483.145401][T26940] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7785'. [ 483.159916][T26940] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 483.187859][T26942] loop0: detected capacity change from 0 to 1024 [ 483.195223][T26942] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 483.207569][T26949] program syz.4.7788 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 483.217331][T26949] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 483.259995][T26953] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7789'. [ 483.303431][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7784'. [ 483.428320][T26963] loop0: detected capacity change from 0 to 512 [ 483.442563][T26963] EXT4-fs: Ignoring removed oldalloc option [ 483.449197][T26963] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 483.464602][T26963] EXT4-fs (loop0): 1 truncate cleaned up [ 483.504479][T26973] netlink: 'syz.0.7796': attribute type 1 has an invalid length. [ 483.519000][T26973] 8021q: adding VLAN 0 to HW filter on device bond11 [ 483.532402][T26973] 8021q: adding VLAN 0 to HW filter on device bond11 [ 483.539478][T26973] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 483.551123][T26973] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 483.562390][T26979] netlink: 'syz.7.7795': attribute type 10 has an invalid length. [ 483.570481][T26979] veth1_vlan: left allmulticast mode [ 483.584086][T26981] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7799'. [ 483.598658][T26978] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 483.644202][T26985] loop4: detected capacity change from 0 to 512 [ 483.651923][T26985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.667035][T26985] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.678645][T26985] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7801: corrupted xattr block 19: overlapping e_value [ 483.693560][T26985] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 483.702699][T26985] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7801: corrupted xattr block 19: overlapping e_value [ 483.716964][T26985] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 483.726832][T26985] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7801: corrupted xattr block 19: overlapping e_value [ 483.767005][T26980] lo speed is unknown, defaulting to 1000 [ 483.773211][T26980] lo speed is unknown, defaulting to 1000 [ 484.257493][T27013] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 484.338746][T27016] loop7: detected capacity change from 0 to 1024 [ 484.345546][T27016] EXT4-fs: Ignoring removed bh option [ 484.468759][T27031] loop7: detected capacity change from 0 to 1024 [ 484.475688][T27031] EXT4-fs: Ignoring removed bh option [ 484.549926][T27040] loop3: detected capacity change from 0 to 512 [ 484.557548][T27040] EXT4-fs: Ignoring removed oldalloc option [ 484.564420][T27040] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 484.578482][T27040] EXT4-fs (loop3): 1 truncate cleaned up [ 484.605132][T27045] loop7: detected capacity change from 0 to 512 [ 484.613416][T27045] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 484.641600][T27045] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.654180][T27045] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7825: corrupted xattr block 19: overlapping e_value [ 484.668019][T27045] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 484.677074][T27045] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7825: corrupted xattr block 19: overlapping e_value [ 484.690892][T27045] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 484.700319][T27045] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7825: corrupted xattr block 19: overlapping e_value [ 484.914565][T27066] loop3: detected capacity change from 0 to 32768 [ 484.922006][T27075] loop7: detected capacity change from 0 to 8192 [ 484.945383][T27066] loop3: p1 p3 < > [ 485.085798][T27080] IPv6: Can't replace route, no match found [ 485.104042][T27082] loop0: detected capacity change from 0 to 1024 [ 485.142028][T27082] EXT4-fs: Ignoring removed bh option [ 485.163061][T27083] loop2: detected capacity change from 0 to 1024 [ 485.170712][T27083] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 485.268423][T27092] IPv6: Can't replace route, no match found [ 485.346978][T27103] loop2: detected capacity change from 0 to 1024 [ 485.354145][T27103] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 485.514552][T27102] loop3: detected capacity change from 0 to 128 [ 485.535855][T27102] ext4 filesystem being mounted at /282/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 485.596195][T27115] netlink: 'syz.3.7852': attribute type 1 has an invalid length. [ 485.610854][T27115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.629038][T27115] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.636303][T27115] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 485.648140][T27115] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 485.837806][T27117] lo speed is unknown, defaulting to 1000 [ 485.843974][T27117] lo speed is unknown, defaulting to 1000 [ 485.916297][T27126] loop3: detected capacity change from 0 to 512 [ 485.922817][T27126] EXT4-fs: Ignoring removed oldalloc option [ 485.929320][T27126] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 485.941772][T27126] EXT4-fs (loop3): 1 truncate cleaned up [ 486.171917][T27149] netlink: 'syz.3.7862': attribute type 10 has an invalid length. [ 486.179961][T27149] macvlan1: entered promiscuous mode [ 486.185400][T27149] macvlan1: entered allmulticast mode [ 486.192893][T27149] veth1_vlan: entered allmulticast mode [ 486.199719][T27149] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 486.222687][T27151] netlink: 'syz.0.7865': attribute type 1 has an invalid length. [ 486.236788][T27151] 8021q: adding VLAN 0 to HW filter on device bond12 [ 486.244004][T27153] 9pnet_fd: Insufficient options for proto=fd [ 486.251970][T27151] 8021q: adding VLAN 0 to HW filter on device bond12 [ 486.259274][T27153] loop4: detected capacity change from 0 to 512 [ 486.273425][T27151] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 486.275033][T27153] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.7864: missing EA_INODE flag [ 486.297691][T27153] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.7864: error while reading EA inode 11 err=-117 [ 486.297935][T27151] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 486.310890][T27153] EXT4-fs (loop4): 1 orphan inode deleted [ 486.325805][T27156] loop2: detected capacity change from 0 to 512 [ 486.340990][T27153] usb usb1: usbfs: process 27153 (syz.4.7864) did not claim interface 0 before use [ 486.352743][T27156] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.466098][T27151] lo speed is unknown, defaulting to 1000 [ 486.472109][T27151] lo speed is unknown, defaulting to 1000 [ 486.606973][T27164] loop2: detected capacity change from 0 to 32768 [ 486.645886][T27164] loop2: p1 p3 < > [ 486.719213][T27167] loop0: detected capacity change from 0 to 512 [ 486.727494][T27167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 486.739394][T27167] EXT4-fs (loop0): 1 truncate cleaned up [ 486.858857][T27190] loop2: detected capacity change from 0 to 512 [ 486.888473][T27190] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.046085][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 487.046097][ T29] audit: type=1400 audit(2000001687.511:36808): avc: denied { connect } for pid=27212 comm="syz.3.7887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 487.076761][ T29] audit: type=1400 audit(2000001687.511:36809): avc: denied { map_create } for pid=27215 comm="syz.4.7888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 487.096185][ T29] audit: type=1400 audit(2000001687.511:36810): avc: denied { map_read map_write } for pid=27215 comm="syz.4.7888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 487.116286][ T29] audit: type=1400 audit(2000001687.521:36811): avc: denied { open } for pid=27216 comm="syz.2.7889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 487.135762][ T29] audit: type=1400 audit(2000001687.521:36812): avc: denied { kernel } for pid=27216 comm="syz.2.7889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 487.155412][ T29] audit: type=1400 audit(2000001687.521:36813): avc: denied { read write } for pid=27215 comm="syz.4.7888" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 487.178857][ T29] audit: type=1400 audit(2000001687.521:36814): avc: denied { open } for pid=27215 comm="syz.4.7888" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 487.202217][ T29] audit: type=1400 audit(2000001687.531:36815): avc: denied { write } for pid=27212 comm="syz.3.7887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 487.221912][ T29] audit: type=1400 audit(2000001687.531:36816): avc: denied { name_connect } for pid=27212 comm="syz.3.7887" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 487.226339][T27220] loop7: detected capacity change from 0 to 512 [ 487.268319][ T29] audit: type=1400 audit(2000001687.641:36817): avc: denied { execute } for pid=27216 comm="syz.2.7889" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=89649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 487.300463][T27220] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 487.318135][T27220] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.330270][T27220] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7890: corrupted xattr block 19: overlapping e_value [ 487.344378][T27220] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 487.353902][T27220] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7890: corrupted xattr block 19: overlapping e_value [ 487.370131][T27220] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 487.389195][T27220] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7890: corrupted xattr block 19: overlapping e_value [ 487.452081][T27244] netlink: 'syz.4.7901': attribute type 1 has an invalid length. [ 487.471102][T27244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.491244][T27244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 487.499477][T27244] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 487.511302][T27244] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 487.528157][T27252] netdevsim netdevsim7: Direct firmware load for ./file0/file1 failed with error -2 [ 487.556356][T27256] 9pnet_fd: Insufficient options for proto=fd [ 487.566877][T27256] loop0: detected capacity change from 0 to 512 [ 487.602262][T27256] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.7900: missing EA_INODE flag [ 487.617991][T27256] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.7900: error while reading EA inode 11 err=-117 [ 487.637803][T27256] EXT4-fs (loop0): 1 orphan inode deleted [ 487.663166][T27256] usb usb1: usbfs: process 27256 (syz.0.7900) did not claim interface 0 before use [ 487.704689][T27249] loop2: detected capacity change from 0 to 32768 [ 487.745789][T27249] loop2: p1 p3 < > [ 487.873410][T27262] loop2: detected capacity change from 0 to 4096 [ 487.916756][T27262] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.7905: corrupted inode contents [ 487.944415][T27263] lo speed is unknown, defaulting to 1000 [ 487.951292][T27262] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm syz.2.7905: mark_inode_dirty error [ 487.952131][T27263] lo speed is unknown, defaulting to 1000 [ 487.976104][T27262] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.7905: corrupted inode contents [ 487.996100][T27265] netlink: 'syz.2.7905': attribute type 153 has an invalid length. [ 488.004022][T27265] __nla_validate_parse: 14 callbacks suppressed [ 488.004036][T27265] netlink: 101196 bytes leftover after parsing attributes in process `syz.2.7905'. [ 488.008296][T27262] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.7905: mark_inode_dirty error [ 488.054313][T27262] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.7905: corrupted inode contents [ 488.089434][T27262] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.7905: mark_inode_dirty error [ 488.103326][T27262] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm syz.2.7905: corrupted inode contents [ 488.124055][T27262] EXT4-fs error (device loop2): ext4_truncate:4666: inode #15: comm syz.2.7905: mark_inode_dirty error [ 488.159882][T27262] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 488.171226][T27270] loop7: detected capacity change from 0 to 512 [ 488.187536][T27270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 488.240696][T27270] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.254540][T27270] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7908: corrupted xattr block 19: overlapping e_value [ 488.311392][T27288] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7914'. [ 488.332927][T27270] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 488.367756][T27270] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7908: corrupted xattr block 19: overlapping e_value [ 488.407587][T27270] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 488.442457][T27270] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7908: corrupted xattr block 19: overlapping e_value [ 488.455773][T27301] netlink: 'syz.0.7917': attribute type 1 has an invalid length. [ 488.878612][T27297] loop2: detected capacity change from 0 to 32768 [ 488.890164][T27301] 8021q: adding VLAN 0 to HW filter on device bond13 [ 488.919221][T27304] 8021q: adding VLAN 0 to HW filter on device bond13 [ 488.935807][T27297] loop2: p1 p3 < > [ 488.952537][T27304] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 488.964517][T27304] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 488.976923][T27293] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.988164][T27291] 8021q: VLANs not supported on caif0 [ 489.028016][T27301] lo speed is unknown, defaulting to 1000 [ 489.033994][T27301] lo speed is unknown, defaulting to 1000 [ 489.057738][T27293] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.131152][T27293] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.160392][T27327] loop4: detected capacity change from 0 to 1024 [ 489.167965][T27327] EXT4-fs: Ignoring removed bh option [ 489.186841][T27293] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.246888][T17225] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.271229][T17227] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.283728][T17227] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.298075][T17227] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.378882][T27345] loop2: detected capacity change from 0 to 8192 [ 489.437646][T27355] loop4: detected capacity change from 0 to 1024 [ 489.446691][T27355] EXT4-fs: Ignoring removed bh option [ 489.486123][T27359] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 489.504990][T27361] loop4: detected capacity change from 0 to 512 [ 489.517212][T27361] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.643726][T27361] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 489.655660][T27361] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #18: comm siw: mark_inode_dirty error [ 489.666890][T27361] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 489.678739][T27361] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm siw: mark_inode_dirty error [ 489.690340][T27361] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm siw: mark inode dirty (error -117) [ 489.702714][T27361] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 490.157500][T27373] loop4: detected capacity change from 0 to 128 [ 490.193939][T27373] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.287734][T27396] loop2: detected capacity change from 0 to 512 [ 490.309959][T27396] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.434752][T27396] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 490.446900][T27396] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm siw: mark_inode_dirty error [ 490.458613][T27396] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 490.470640][T27396] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm siw: mark_inode_dirty error [ 490.470847][T27409] loop0: detected capacity change from 0 to 32768 [ 490.482834][T27396] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm siw: mark inode dirty (error -117) [ 490.500677][T27396] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 490.536024][T27409] loop0: p1 p3 < > [ 490.655482][T27424] loop2: detected capacity change from 0 to 512 [ 490.662127][T27424] EXT4-fs: Ignoring removed oldalloc option [ 490.668354][T27424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 490.679613][T27424] EXT4-fs (loop2): 1 truncate cleaned up [ 490.771012][T27430] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 491.055603][T27440] 8021q: VLANs not supported on caif0 [ 491.258291][T27444] loop4: detected capacity change from 0 to 1024 [ 491.282516][T27444] EXT4-fs: Ignoring removed bh option [ 491.477115][T27459] netlink: 'syz.3.7974': attribute type 1 has an invalid length. [ 491.493892][T27459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.509588][T27459] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.516649][T27459] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 491.527909][T27459] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 491.819713][T27465] lo speed is unknown, defaulting to 1000 [ 491.826327][T27465] lo speed is unknown, defaulting to 1000 [ 492.067245][ T29] kauditd_printk_skb: 587 callbacks suppressed [ 492.067259][ T29] audit: type=1400 audit(2000001692.531:37405): avc: denied { create } for pid=27505 comm="syz.3.7993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.096526][ T29] audit: type=1400 audit(2000001692.551:37406): avc: denied { ioctl } for pid=27505 comm="syz.3.7993" path="socket:[92184]" dev="sockfs" ino=92184 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.122379][ T29] audit: type=1400 audit(2000001692.551:37407): avc: denied { module_request } for pid=27505 comm="syz.3.7993" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 492.145242][T27503] loop7: detected capacity change from 0 to 32768 [ 492.153009][ T29] audit: type=1400 audit(2000001692.601:37408): avc: denied { sys_module } for pid=27505 comm="syz.3.7993" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 492.174368][ T29] audit: type=1400 audit(2000001692.631:37409): avc: denied { execmem } for pid=27505 comm="syz.3.7993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 492.196373][T27503] loop7: p1 p3 < > [ 492.205334][ T29] audit: type=1400 audit(2000001692.661:37410): avc: denied { create } for pid=27501 comm="syz.7.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 492.237552][ T29] audit: type=1400 audit(2000001692.691:37411): avc: denied { read write } for pid=27501 comm="syz.7.7991" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 492.261250][ T29] audit: type=1400 audit(2000001692.691:37412): avc: denied { open } for pid=27501 comm="syz.7.7991" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 492.284804][ T29] audit: type=1400 audit(2000001692.691:37413): avc: denied { create } for pid=27501 comm="syz.7.7991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 492.304621][ T29] audit: type=1400 audit(2000001692.691:37414): avc: denied { read write } for pid=27501 comm="syz.7.7991" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 492.428648][T27517] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7994'. [ 492.436350][T27518] 8021q: VLANs not supported on caif0 [ 492.471299][T27525] netlink: 'syz.7.7999': attribute type 1 has an invalid length. [ 492.494285][T27525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.514303][T27525] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.521827][T27525] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 492.533651][T27525] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 492.686503][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7998'. [ 492.773653][T27528] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.783562][T27528] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.919292][T27528] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.929097][T27528] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.939004][T27519] loop0: detected capacity change from 0 to 32768 [ 492.977254][T27519] loop0: p1 p3 < > [ 492.982115][T27539] lo speed is unknown, defaulting to 1000 [ 493.000679][T27539] lo speed is unknown, defaulting to 1000 [ 493.021409][T27528] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.031241][T27528] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.072874][T27528] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.082687][T27528] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.204968][ T266] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.213234][ T266] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.222973][ T266] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.231182][ T266] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.244463][ T266] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.252734][ T266] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.262142][ T266] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.270524][ T266] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.421899][T27558] loop3: detected capacity change from 0 to 32768 [ 493.486675][T27558] loop3: p1 p3 < > [ 493.957774][T27578] loop2: detected capacity change from 0 to 512 [ 493.969344][T27578] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.011957][T27584] 9pnet_fd: Insufficient options for proto=fd [ 494.021964][T27584] loop4: detected capacity change from 0 to 512 [ 494.035601][T27584] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.8016: missing EA_INODE flag [ 494.047829][T27584] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.8016: error while reading EA inode 11 err=-117 [ 494.060457][T27584] EXT4-fs (loop4): 1 orphan inode deleted [ 494.067800][T27584] usb usb1: usbfs: process 27584 (syz.4.8016) did not claim interface 0 before use [ 494.090225][T27578] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 494.101832][T27578] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm siw: mark_inode_dirty error [ 494.115058][T27578] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 494.127059][T27578] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm siw: mark_inode_dirty error [ 494.138856][T27583] loop7: detected capacity change from 0 to 32768 [ 494.139028][T27578] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm siw: mark inode dirty (error -117) [ 494.157597][T27578] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 494.180241][T27583] loop7: p1 p3 < > [ 494.197273][T27583] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.279614][T27583] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.295786][T27597] netlink: 404 bytes leftover after parsing attributes in process `syz.0.8023'. [ 494.324797][T27599] loop2: detected capacity change from 0 to 1024 [ 494.331563][T27599] EXT4-fs: Ignoring removed bh option [ 494.349945][T27583] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.391377][T27583] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.443222][ T266] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.458344][ T266] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.467029][ T266] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.478990][ T266] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.495519][T27612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8029'. [ 494.504593][T27612] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8029'. [ 494.531614][T27614] loop3: detected capacity change from 0 to 512 [ 494.547824][T27614] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.665568][T27614] siw: device registration error -23 [ 494.672437][T27614] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 494.684041][T27614] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #18: comm siw: mark_inode_dirty error [ 494.694966][T27614] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 494.706372][T27614] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm siw: mark_inode_dirty error [ 494.717842][T27614] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm siw: mark inode dirty (error -117) [ 494.729999][T27614] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 494.760128][T27623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8033'. [ 494.769027][T27623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8033'. [ 494.781398][T27623] IPv6: Can't replace route, no match found [ 494.821968][T27623] loop4: detected capacity change from 0 to 1024 [ 494.829552][T27623] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 494.858662][T27625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8032'. [ 494.869047][T27625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.887081][T27625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.998534][T27634] loop4: detected capacity change from 0 to 1024 [ 495.005340][T27634] EXT4-fs: Ignoring removed bh option [ 495.048162][T27632] loop3: detected capacity change from 0 to 32768 [ 495.087744][T27632] loop3: p1 p3 < > [ 495.101173][T27644] loop4: detected capacity change from 0 to 512 [ 495.108718][T27644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 495.129624][T27644] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.153871][T27644] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8040: corrupted xattr block 19: overlapping e_value [ 495.193493][T27644] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 495.203043][T27644] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8040: corrupted xattr block 19: overlapping e_value [ 495.226526][T27644] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 495.235654][T27644] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8040: corrupted xattr block 19: overlapping e_value [ 495.257052][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8045'. [ 495.266068][T27658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8045'. [ 495.285492][T27658] IPv6: Can't replace route, no match found [ 495.311995][T27664] loop4: detected capacity change from 0 to 1024 [ 495.325703][T27658] loop0: detected capacity change from 0 to 1024 [ 495.326833][T27664] EXT4-fs: Ignoring removed bh option [ 495.334841][T27658] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 495.347462][T27665] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 495.444124][T27675] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 495.450671][T27675] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 495.458357][T27675] vhci_hcd vhci_hcd.0: Device attached [ 495.465550][T27680] netlink: 404 bytes leftover after parsing attributes in process `syz.4.8050'. [ 495.474798][T27656] loop3: detected capacity change from 0 to 32768 [ 495.483077][T27675] loop0: detected capacity change from 0 to 2048 [ 495.507803][T27656] loop3: p1 p3 < > [ 495.507973][T27675] EXT4-fs (loop0): failed to initialize system zone (-117) [ 495.524305][T27675] EXT4-fs (loop0): mount failed [ 495.531815][T27683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.554582][T27678] vhci_hcd: connection closed [ 495.554678][T17223] vhci_hcd: stop threads [ 495.563856][T17223] vhci_hcd: release socket [ 495.568269][T17223] vhci_hcd: disconnect device [ 495.609166][T27683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.660454][T27683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.666609][T27691] loop7: detected capacity change from 0 to 512 [ 495.678034][T27691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 495.698113][T27691] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.709980][T27691] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8057: corrupted xattr block 19: overlapping e_value [ 495.724739][T27691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 495.733879][T27691] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8057: corrupted xattr block 19: overlapping e_value [ 495.734924][T27683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.748264][T27691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 495.767085][T27691] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8057: corrupted xattr block 19: overlapping e_value [ 495.799613][T27695] loop7: detected capacity change from 0 to 512 [ 495.813069][T17227] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.823823][T17227] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.827971][T27695] ext4 filesystem being mounted at /291/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.838350][T17227] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.853596][T17227] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.925103][T27702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8060'. [ 495.949274][T27704] loop3: detected capacity change from 0 to 1024 [ 495.956152][T27704] EXT4-fs: Ignoring removed bh option [ 495.962874][T27695] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 495.974637][T27695] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm siw: mark_inode_dirty error [ 495.985711][T27695] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 495.997475][T27695] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm siw: mark_inode_dirty error [ 496.009927][T27695] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm siw: mark inode dirty (error -117) [ 496.022149][T27695] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 496.101596][T27721] netlink: 'syz.3.8068': attribute type 1 has an invalid length. [ 496.102472][T27720] IPv6: Can't replace route, no match found [ 496.123766][T27720] loop0: detected capacity change from 0 to 1024 [ 496.130763][T27720] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 496.131229][T27721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.174089][T27721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.181558][T27721] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 496.193885][T27721] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 496.289794][T27737] IPv6: Can't replace route, no match found [ 496.357915][T27744] loop2: detected capacity change from 0 to 512 [ 496.392775][T27744] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.519334][T27731] lo speed is unknown, defaulting to 1000 [ 496.525392][T27731] lo speed is unknown, defaulting to 1000 [ 496.535040][T27744] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 496.549451][T27761] 9pnet_fd: Insufficient options for proto=fd [ 496.559964][T27761] loop4: detected capacity change from 0 to 512 [ 496.570019][T27744] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm siw: mark_inode_dirty error [ 496.590208][T27761] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.8078: missing EA_INODE flag [ 496.601985][T27734] loop7: detected capacity change from 0 to 32768 [ 496.614088][T27744] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm siw: corrupted inode contents [ 496.614175][T27761] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.8078: error while reading EA inode 11 err=-117 [ 496.635579][T27731] chnl_net:caif_netlink_parms(): no params data found [ 496.644648][T27761] EXT4-fs (loop4): 1 orphan inode deleted [ 496.651140][T27744] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm siw: mark_inode_dirty error [ 496.653046][T27721] lo speed is unknown, defaulting to 1000 [ 496.668695][T27734] loop7: p1 p3 < > [ 496.673070][T27761] usb usb1: usbfs: process 27761 (syz.4.8078) did not claim interface 0 before use [ 496.683111][T27744] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm siw: mark inode dirty (error -117) [ 496.685762][T27721] lo speed is unknown, defaulting to 1000 [ 496.695837][T27744] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 496.752789][T27731] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.759894][T27731] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.767453][T27731] bridge_slave_0: entered allmulticast mode [ 496.774246][T27731] bridge_slave_0: entered promiscuous mode [ 496.809959][T27731] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.817130][T27731] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.824511][T27731] bridge_slave_1: entered allmulticast mode [ 496.831388][T27731] bridge_slave_1: entered promiscuous mode [ 496.870475][T27731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.883515][T27778] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 496.883766][T27780] IPv6: Can't replace route, no match found [ 496.898545][T27731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.913476][T27780] loop3: detected capacity change from 0 to 1024 [ 496.920449][T27780] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 496.941506][T27731] team0: Port device team_slave_0 added [ 496.948441][T27731] team0: Port device team_slave_1 added [ 496.971558][T27731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.978627][T27731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.004610][T27731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.020674][T27731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.027643][T27731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.053586][T27731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.084873][T27731] hsr_slave_0: entered promiscuous mode [ 497.087172][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 497.087183][ T29] audit: type=1400 audit(2000001697.540:37882): avc: denied { read write } for pid=23922 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.091150][T27731] hsr_slave_1: entered promiscuous mode [ 497.096623][ T29] audit: type=1400 audit(2000001697.540:37883): avc: denied { open } for pid=23922 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.121665][T27731] debugfs: 'hsr0' already exists in 'hsr' [ 497.130486][ T29] audit: type=1400 audit(2000001697.590:37884): avc: denied { ioctl } for pid=23922 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 497.150769][T27731] Cannot create hsr debugfs directory [ 497.198109][ T29] audit: type=1400 audit(2000001697.620:37885): avc: denied { map_create } for pid=27787 comm="syz.7.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.217462][ T29] audit: type=1400 audit(2000001697.620:37886): avc: denied { open } for pid=27787 comm="syz.7.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 497.236985][ T29] audit: type=1400 audit(2000001697.620:37887): avc: denied { perfmon } for pid=27787 comm="syz.7.8087" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.258026][ T29] audit: type=1400 audit(2000001697.620:37888): avc: denied { kernel } for pid=27787 comm="syz.7.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 497.277591][ T29] audit: type=1400 audit(2000001697.620:37889): avc: denied { prog_load } for pid=27787 comm="syz.7.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.296810][ T29] audit: type=1400 audit(2000001697.620:37890): avc: denied { bpf } for pid=27787 comm="syz.7.8087" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 497.300432][T27791] loop7: detected capacity change from 0 to 128 [ 497.317581][ T29] audit: type=1400 audit(2000001697.630:37891): avc: denied { prog_run } for pid=27787 comm="syz.7.8087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 497.409403][T27791] ext4 filesystem being mounted at /299/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 497.516609][T27731] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.526378][T27731] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.627040][T27731] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.636871][T27731] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.712660][T27803] loop3: detected capacity change from 0 to 32768 [ 497.759134][T27731] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.768998][T27731] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.780275][T27803] loop3: p1 p3 < > [ 497.828019][T27731] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.837806][T27731] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.899160][T17215] bridge_slave_1: left allmulticast mode [ 497.904852][T17215] bridge_slave_1: left promiscuous mode [ 497.910538][T17215] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.920499][T17215] bridge_slave_0: left allmulticast mode [ 497.926164][T17215] bridge_slave_0: left promiscuous mode [ 497.931833][T17215] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.982836][T27831] 9pnet_fd: Insufficient options for proto=fd [ 497.998217][T27831] loop4: detected capacity change from 0 to 512 [ 498.008274][T27831] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.8100: missing EA_INODE flag [ 498.020167][T27831] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.8100: error while reading EA inode 11 err=-117 [ 498.033430][T27831] EXT4-fs (loop4): 1 orphan inode deleted [ 498.040954][T27831] usb usb1: usbfs: process 27831 (syz.4.8100) did not claim interface 0 before use [ 498.042657][T17215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.065500][T17215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.076015][T17215] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 498.085529][T17215] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 498.094178][T17215] veth1_vlan: left allmulticast mode [ 498.100842][T17215] bond0 (unregistering): Released all slaves [ 498.110253][T17215] bond1 (unregistering): Released all slaves [ 498.119021][T17215] bond2 (unregistering): Released all slaves [ 498.127417][T27837] IPv6: Can't replace route, no match found [ 498.127645][T17215] bond3 (unregistering): Released all slaves [ 498.138910][T27837] loop7: detected capacity change from 0 to 1024 [ 498.142499][T17215] bond4 (unregistering): Released all slaves [ 498.146225][T27837] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 498.154604][T17215] bond5 (unregistering): Released all slaves [ 498.168895][T17215] bond6 (unregistering): Released all slaves [ 498.178303][T17215] bond7 (unregistering): Released all slaves [ 498.187437][T17215] bond8 (unregistering): Released all slaves [ 498.196592][T17215] bond9 (unregistering): Released all slaves [ 498.206486][T17215] bond10 (unregistering): Released all slaves [ 498.215207][T17215] bond11 (unregistering): Released all slaves [ 498.226111][T17215] bond12 (unregistering): Released all slaves [ 498.234947][T17215] bond13 (unregistering): Released all slaves [ 498.260882][T27731] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 498.270633][T27731] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 498.296721][T27731] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.305621][T17215] tipc: Disabling bearer [ 498.311026][T17215] tipc: Left network mode [ 498.311111][T27731] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.352620][T17215] hsr_slave_0: left promiscuous mode [ 498.365470][T17215] hsr_slave_1: left promiscuous mode [ 498.381326][T17215] veth1_macvtap: left promiscuous mode [ 498.386956][T17215] veth0_macvtap: left promiscuous mode [ 498.392562][T17215] veth0_vlan: left promiscuous mode [ 498.444743][T17215] team0 (unregistering): Port device team_slave_1 removed [ 498.456817][T17215] team0 (unregistering): Port device team_slave_0 removed [ 498.464440][ T266] smc: removing ib device syz! [ 498.512151][T27731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.541220][T27731] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.555042][T17227] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.562112][T17227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.581490][T27731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.591978][T27731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.625574][T17227] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.632704][T17227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.731016][T27731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.800770][T27874] IPv6: Can't replace route, no match found [ 498.815035][T27862] loop2: detected capacity change from 0 to 128 [ 498.863329][T27731] veth0_vlan: entered promiscuous mode [ 498.871516][T27731] veth1_vlan: entered promiscuous mode [ 498.888353][T27862] ext4 filesystem being mounted at /307/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 498.903000][T27731] veth0_macvtap: entered promiscuous mode [ 498.921833][T27731] veth1_macvtap: entered promiscuous mode [ 498.930327][T27886] loop4: detected capacity change from 0 to 1024 [ 498.932909][T27731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.948983][T27731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.958685][T27889] netlink: 'syz.7.8119': attribute type 1 has an invalid length. [ 498.959704][T17223] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.979434][ T266] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.988973][T27886] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 499.004884][T27889] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.024463][ T266] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.042731][T27894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 499.052128][T27894] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 499.058233][T27901] loop4: detected capacity change from 0 to 1024 [ 499.064550][T27894] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 499.103456][ T266] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.125279][T27901] EXT4-fs: Ignoring removed bh option [ 499.127139][T27903] loop3: detected capacity change from 0 to 512 [ 499.146022][T27903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 499.163230][T27903] EXT4-fs (loop3): 1 truncate cleaned up [ 499.331620][T27889] lo speed is unknown, defaulting to 1000 [ 499.337770][T27889] lo speed is unknown, defaulting to 1000 [ 499.347216][T27929] __nla_validate_parse: 18 callbacks suppressed [ 499.347227][T27929] netlink: 404 bytes leftover after parsing attributes in process `syz.0.8131'. [ 499.418966][T27925] loop4: detected capacity change from 0 to 128 [ 499.442273][T27925] ext4 filesystem being mounted at /484/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 499.457422][T27932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8132'. [ 499.485489][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8133'. [ 499.494463][T27937] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8133'. [ 499.509377][T27937] IPv6: Can't replace route, no match found [ 499.539871][T27943] loop4: detected capacity change from 0 to 512 [ 499.547177][T27943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.555940][T27937] loop7: detected capacity change from 0 to 1024 [ 499.562855][T27937] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 499.568708][T27943] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.584184][T27943] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8136: corrupted xattr block 19: overlapping e_value [ 499.598523][T27943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 499.607539][T27943] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8136: corrupted xattr block 19: overlapping e_value [ 499.622385][T27943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 499.631626][T27943] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8136: corrupted xattr block 19: overlapping e_value [ 499.631754][T27947] loop7: detected capacity change from 0 to 1024 [ 499.652341][T27947] EXT4-fs: Ignoring removed bh option [ 499.682006][T27953] loop4: detected capacity change from 0 to 512 [ 499.702331][T27953] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.826189][T27953] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.8139: corrupted inode contents [ 499.838382][T27953] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #18: comm syz.4.8139: mark_inode_dirty error [ 499.850390][T27953] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.8139: corrupted inode contents [ 499.856426][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8144'. [ 499.878004][T27953] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.8139: mark_inode_dirty error [ 499.895794][T27953] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.8139: mark inode dirty (error -117) [ 499.923738][T27953] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 499.938686][T27975] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8147'. [ 499.947782][T27975] netlink: 212 bytes leftover after parsing attributes in process `syz.7.8147'. [ 499.985333][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'. [ 499.994230][T27978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'. [ 500.008406][T27979] loop7: detected capacity change from 0 to 512 [ 500.015576][T27978] IPv6: Can't replace route, no match found [ 500.027765][T27978] loop3: detected capacity change from 0 to 1024 [ 500.034501][T27978] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 500.053591][T27979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 500.077908][T27984] loop2: detected capacity change from 0 to 128 [ 500.095366][T27979] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.110011][T27979] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8148: corrupted xattr block 19: overlapping e_value [ 500.173179][T27979] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 500.183239][T27979] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8148: corrupted xattr block 19: overlapping e_value [ 500.208509][T27979] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 500.210161][T27984] ext4 filesystem being mounted at /309/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 500.218027][T27979] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.8148: corrupted xattr block 19: overlapping e_value [ 500.331783][T28009] netlink: 252 bytes leftover after parsing attributes in process `syz.7.8160'. [ 500.441981][T28015] IPv6: Can't replace route, no match found [ 500.469163][T28015] loop4: detected capacity change from 0 to 1024 [ 500.484330][T28015] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 500.561116][T28022] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.587877][T28003] loop3: detected capacity change from 0 to 32768 [ 500.618523][T28022] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.637235][T28003] loop3: p1 p3 < > [ 500.649528][T28025] 9pnet_fd: Insufficient options for proto=fd [ 500.660076][T28025] loop4: detected capacity change from 0 to 512 [ 500.671591][T28025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.8166: missing EA_INODE flag [ 500.684210][T28025] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.8166: error while reading EA inode 11 err=-117 [ 500.685105][T28022] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.697489][T28025] EXT4-fs (loop4): 1 orphan inode deleted [ 500.717860][T28025] usb usb1: usbfs: process 28025 (syz.4.8166) did not claim interface 0 before use [ 500.779019][T28022] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.827112][T17215] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.843141][T17215] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.854541][T17215] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.857582][T28034] loop2: detected capacity change from 0 to 512 [ 500.871248][T28034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 500.871425][T17215] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.898513][T28034] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 500.910633][T28034] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8170: corrupted xattr block 19: overlapping e_value [ 500.924734][T28034] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 500.934358][T28034] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8170: corrupted xattr block 19: overlapping e_value [ 500.949031][T28034] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 500.958296][T28034] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8170: corrupted xattr block 19: overlapping e_value [ 501.029110][T28044] loop2: detected capacity change from 0 to 1024 [ 501.038808][T28044] EXT4-fs: Ignoring removed bh option [ 501.228355][T28064] infiniband syz!: set active [ 501.233146][T28064] infiniband syz!: added team_slave_0 [ 501.244914][T28064] RDS/IB: syz!: added [ 501.249141][T28064] smc: adding ib device syz! with port count 1 [ 501.249848][T28059] loop2: detected capacity change from 0 to 32768 [ 501.255352][T28064] smc: ib device syz! port 1 has pnetid [ 501.287878][T28059] loop2: p1 p3 < > [ 501.395107][T28069] loop2: detected capacity change from 0 to 512 [ 501.410423][T28069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 501.440263][T28069] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 501.456082][T28069] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8183: corrupted xattr block 19: overlapping e_value [ 501.470339][T28069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 501.479616][T28069] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8183: corrupted xattr block 19: overlapping e_value [ 501.493611][T28069] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 501.503030][T28069] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8183: corrupted xattr block 19: overlapping e_value [ 501.536219][T28082] loop4: detected capacity change from 0 to 1024 [ 501.543057][T28082] EXT4-fs: Ignoring removed bh option [ 501.628565][T28096] loop4: detected capacity change from 0 to 1024 [ 501.635334][T28096] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 501.741664][T28099] loop2: detected capacity change from 0 to 512 [ 501.748544][T28099] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 501.761202][T28102] 9pnet_fd: Insufficient options for proto=fd [ 501.764622][T28099] EXT4-fs (loop2): 1 truncate cleaned up [ 501.776060][T28102] loop4: detected capacity change from 0 to 512 [ 501.784350][T28102] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.8195: missing EA_INODE flag [ 501.797042][T28102] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.8195: error while reading EA inode 11 err=-117 [ 501.810259][T28102] EXT4-fs (loop4): 1 orphan inode deleted [ 501.817664][T28102] usb usb1: usbfs: process 28102 (syz.4.8195) did not claim interface 0 before use [ 502.057289][T28110] loop3: detected capacity change from 0 to 128 [ 502.082140][T28110] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 502.087569][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 502.087583][ T29] audit: type=1400 audit(2000001702.539:38552): avc: denied { open } for pid=28119 comm="syz.0.8202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 502.118134][ T29] audit: type=1400 audit(2000001702.549:38553): avc: denied { perfmon } for pid=28119 comm="syz.0.8202" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 502.118664][T28120] loop0: detected capacity change from 0 to 1024 [ 502.139391][ T29] audit: type=1400 audit(2000001702.549:38554): avc: denied { kernel } for pid=28119 comm="syz.0.8202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 502.165518][ T29] audit: type=1326 audit(2000001702.549:38555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28109 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9216f6d550 code=0x7ffc0000 [ 502.165871][T28120] EXT4-fs: Ignoring removed bh option [ 502.189267][ T29] audit: type=1326 audit(2000001702.549:38556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28109 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9216f6d937 code=0x7ffc0000 [ 502.218010][ T29] audit: type=1326 audit(2000001702.549:38557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28109 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9216f6d550 code=0x7ffc0000 [ 502.241627][ T29] audit: type=1400 audit(2000001702.549:38558): avc: denied { read write } for pid=28109 comm="syz.3.8198" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.265818][ T29] audit: type=1400 audit(2000001702.549:38559): avc: denied { open } for pid=28109 comm="syz.3.8198" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 502.289932][ T29] audit: type=1326 audit(2000001702.549:38560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28109 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9216f6ebe9 code=0x7ffc0000 [ 502.313660][ T29] audit: type=1326 audit(2000001702.549:38561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28109 comm="syz.3.8198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9216f6ebe9 code=0x7ffc0000 [ 502.395357][T28131] netlink: 'syz.3.8206': attribute type 1 has an invalid length. [ 502.411672][T28131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.427841][T28131] 8021q: adding VLAN 0 to HW filter on device bond7 [ 502.434977][T28131] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 502.446645][T28131] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 502.555722][T28148] IPv6: Can't replace route, no match found [ 502.566419][T28148] loop2: detected capacity change from 0 to 1024 [ 502.601002][T28148] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 502.672478][T28140] lo speed is unknown, defaulting to 1000 [ 502.689681][T28140] lo speed is unknown, defaulting to 1000 [ 502.752609][T28146] loop4: detected capacity change from 0 to 32768 [ 502.793640][T28146] loop4: p1 p3 < > [ 502.800273][T28163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.805276][T28169] program syz.3.8221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.818062][T28169] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 502.818794][T28163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.953868][T28181] 9pnet_fd: Insufficient options for proto=fd [ 502.987641][T28181] loop3: detected capacity change from 0 to 512 [ 503.044949][T28184] loop2: detected capacity change from 0 to 1024 [ 503.051848][T28184] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 503.061006][T28178] loop0: detected capacity change from 0 to 32768 [ 503.062114][T28181] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.8223: missing EA_INODE flag [ 503.079727][T28181] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.8223: error while reading EA inode 11 err=-117 [ 503.092614][T28181] EXT4-fs (loop3): 1 orphan inode deleted [ 503.102887][T28181] usb usb1: usbfs: process 28181 (syz.3.8223) did not claim interface 0 before use [ 503.112588][T28178] loop0: p1 p3 < > [ 503.181961][T28196] netlink: 'syz.0.8232': attribute type 1 has an invalid length. [ 503.199494][T28197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28197 comm=syz.2.8231 [ 503.212093][T28197] netlink: 'syz.2.8231': attribute type 15 has an invalid length. [ 503.219964][T28197] netlink: 'syz.2.8231': attribute type 18 has an invalid length. [ 503.230029][T28197] vxlan0: entered promiscuous mode [ 503.236180][T17227] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.245046][T17227] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.253773][T17227] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.262234][T17227] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 503.359743][T28196] lo speed is unknown, defaulting to 1000 [ 503.365781][T28196] lo speed is unknown, defaulting to 1000 [ 503.445968][T28203] program syz.0.8234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 503.455375][T28203] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 503.664443][T28225] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 503.707338][T28229] loop3: detected capacity change from 0 to 512 [ 503.714467][T28229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.729560][T28229] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 503.741733][T28229] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8246: corrupted xattr block 19: overlapping e_value [ 503.755838][T28229] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 503.765379][T28229] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8246: corrupted xattr block 19: overlapping e_value [ 503.779502][T28229] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 503.788805][T28229] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8246: corrupted xattr block 19: overlapping e_value [ 503.867152][T28243] loop3: detected capacity change from 0 to 512 [ 503.884286][T28243] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 504.002857][T28243] siw: device registration error -23 [ 504.009988][T28243] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.8250: corrupted inode contents [ 504.023601][T28243] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #18: comm syz.3.8250: mark_inode_dirty error [ 504.037850][T28243] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.8250: corrupted inode contents [ 504.049820][T28243] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.8250: mark_inode_dirty error [ 504.063147][T28243] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.8250: mark inode dirty (error -117) [ 504.076194][T28243] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 504.457478][T28272] __nla_validate_parse: 17 callbacks suppressed [ 504.457490][T28272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8261'. [ 504.472646][T28272] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8261'. [ 504.490167][T28272] loop7: detected capacity change from 0 to 1024 [ 504.497629][T28272] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 504.610478][T28274] loop0: detected capacity change from 0 to 32768 [ 504.624739][T28281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28281 comm=syz.7.8264 [ 504.638029][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8264'. [ 504.646896][T28281] netlink: 'syz.7.8264': attribute type 15 has an invalid length. [ 504.654717][T28281] netlink: 'syz.7.8264': attribute type 18 has an invalid length. [ 504.657597][T28274] loop0: p1 p3 < > [ 504.665800][T28281] vxlan0: entered promiscuous mode [ 504.672685][T17227] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.681418][T17227] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.690091][T17227] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.699773][T17227] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 504.822652][T28287] netlink: 'syz.0.8267': attribute type 1 has an invalid length. [ 504.836914][T28287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.852592][T28287] 8021q: adding VLAN 0 to HW filter on device bond1 [ 504.860305][T28287] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 504.871678][T28287] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 504.995877][T28294] loop2: detected capacity change from 0 to 512 [ 505.004184][T28294] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 505.016225][T28294] EXT4-fs (loop2): 1 truncate cleaned up [ 505.042067][T28287] lo speed is unknown, defaulting to 1000 [ 505.048347][T28287] lo speed is unknown, defaulting to 1000 [ 505.129420][T28308] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 505.139611][T28310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8274'. [ 505.148530][T28310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8274'. [ 505.164301][T28310] loop0: detected capacity change from 0 to 1024 [ 505.171664][T28310] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 505.469788][T28322] loop0: detected capacity change from 0 to 128 [ 505.478004][T28322] EXT4-fs mount: 122 callbacks suppressed [ 505.478018][T28322] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 505.496135][T28322] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 505.702560][T28294] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.802441][T28344] netlink: 252 bytes leftover after parsing attributes in process `syz.7.8289'. [ 505.848709][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8290'. [ 505.857615][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8290'. [ 505.875597][T28347] loop2: detected capacity change from 0 to 1024 [ 505.883036][T28347] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 506.000352][T28365] loop7: detected capacity change from 0 to 1024 [ 506.007331][T28365] EXT4-fs: Ignoring removed bh option [ 506.007937][T28362] loop3: detected capacity change from 0 to 512 [ 506.021604][T28362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 506.032922][T28365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.047817][T28362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.076682][T28362] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.089564][T23922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.104419][T28362] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8296: corrupted xattr block 19: overlapping e_value [ 506.110964][T28372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8300'. [ 506.126930][T28372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8300'. [ 506.135406][T28362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 506.145195][T28362] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8296: corrupted xattr block 19: overlapping e_value [ 506.179107][T28362] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 506.186741][T28372] loop7: detected capacity change from 0 to 1024 [ 506.205154][T28372] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 506.209776][T28362] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8296: corrupted xattr block 19: overlapping e_value [ 506.314486][T23261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.325493][T27731] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 506.335610][T28391] loop7: detected capacity change from 0 to 1024 [ 506.342421][T28391] EXT4-fs: Ignoring removed bh option [ 506.364151][T28391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.406320][T23922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.479766][T28416] loop7: detected capacity change from 0 to 1024 [ 506.492381][T28416] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 506.551557][T28423] loop2: detected capacity change from 0 to 512 [ 506.570042][T28423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 506.629247][T28423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 506.653120][T28427] loop7: detected capacity change from 0 to 128 [ 506.657797][T28423] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.684171][T28423] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8320: corrupted xattr block 19: overlapping e_value [ 506.688406][T28427] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 506.724211][T28423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 506.741223][T28427] ext4 filesystem being mounted at /359/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 506.748530][T28423] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8320: corrupted xattr block 19: overlapping e_value [ 506.785711][T28423] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 506.816500][T28423] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.8320: corrupted xattr block 19: overlapping e_value [ 506.882256][T22626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.031856][T28444] loop3: detected capacity change from 0 to 512 [ 507.072669][T28444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.099160][ T29] kauditd_printk_skb: 821 callbacks suppressed [ 507.099175][ T29] audit: type=1400 audit(2000001707.559:39383): avc: denied { map } for pid=28449 comm="syz.4.8329" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 507.108060][T28444] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.129864][ T29] audit: type=1400 audit(2000001707.559:39384): avc: denied { read write } for pid=28449 comm="syz.4.8329" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95445 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 507.192388][T28454] loop2: detected capacity change from 0 to 1024 [ 507.199497][T28452] loop4: detected capacity change from 0 to 1024 [ 507.217772][T28452] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 507.265072][T28454] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 507.278472][ T29] audit: type=1400 audit(2000001707.569:39385): avc: denied { mount } for pid=28443 comm="syz.3.8326" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 507.300493][ T29] audit: type=1400 audit(2000001707.629:39386): avc: denied { map_create } for pid=28449 comm="syz.4.8329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 507.319928][ T29] audit: type=1400 audit(2000001707.629:39387): avc: denied { map_read map_write } for pid=28449 comm="syz.4.8329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 507.340055][ T29] audit: type=1400 audit(2000001707.709:39388): avc: denied { read write } for pid=27731 comm="syz-executor" name="loop0" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.363619][ T29] audit: type=1400 audit(2000001707.709:39389): avc: denied { open } for pid=27731 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.386973][ T29] audit: type=1400 audit(2000001707.709:39390): avc: denied { ioctl } for pid=27731 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=697 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 507.411892][ T29] audit: type=1400 audit(2000001707.719:39391): avc: denied { read } for pid=28443 comm="syz.3.8326" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 507.433206][ T29] audit: type=1400 audit(2000001707.719:39392): avc: denied { open } for pid=28443 comm="syz.3.8326" path="net:[4026532829]" dev="nsfs" ino=4026532829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 507.457346][T28463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28463 comm=syz.0.8331 [ 507.478690][T28460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.8326: corrupted inode contents [ 507.490952][T28460] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #18: comm syz.3.8326: mark_inode_dirty error [ 507.520022][T28460] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #18: comm syz.3.8326: corrupted inode contents [ 507.545347][T28460] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.8326: mark_inode_dirty error [ 507.596839][T28460] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.8326: mark inode dirty (error -117) [ 507.610020][T23922] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 507.610617][T28460] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 507.782036][T28493] loop4: detected capacity change from 0 to 512 [ 507.789225][T28493] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 507.810608][T28493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.830817][T28493] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.872065][T23261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.891886][T28493] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8345: corrupted xattr block 19: overlapping e_value [ 507.907870][T28501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.921185][T28501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.925543][T28493] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 507.937427][T28493] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8345: corrupted xattr block 19: overlapping e_value [ 507.951327][T28493] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 507.960661][T28493] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.8345: corrupted xattr block 19: overlapping e_value [ 507.986392][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.115684][T28530] netlink: 'syz.0.8361': attribute type 1 has an invalid length. [ 508.129992][T28528] loop2: detected capacity change from 0 to 512 [ 508.152020][T28528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.165051][T28530] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.176675][T28528] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.188445][T28538] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.195619][T28538] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 508.207304][T28538] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 508.298627][T28545] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.8360: corrupted inode contents [ 508.310647][T28545] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #18: comm syz.2.8360: mark_inode_dirty error [ 508.322198][T28545] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #18: comm syz.2.8360: corrupted inode contents [ 508.336427][T28545] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.8360: mark_inode_dirty error [ 508.355107][T28545] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.8360: mark inode dirty (error -117) [ 508.369415][T28545] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 508.384502][T28547] loop3: detected capacity change from 0 to 1024 [ 508.389781][T28530] lo speed is unknown, defaulting to 1000 [ 508.391401][T28547] EXT4-fs: Ignoring removed bh option [ 508.396921][T28530] lo speed is unknown, defaulting to 1000 [ 508.411037][T28547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.444839][T23261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.947359][T22626] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.302876][T28589] 9pnet_fd: Insufficient options for proto=fd [ 509.312455][T28589] loop7: detected capacity change from 0 to 512 [ 509.320693][T28589] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.8381: missing EA_INODE flag [ 509.332447][T28589] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.8381: error while reading EA inode 11 err=-117 [ 509.344934][T28589] EXT4-fs (loop7): 1 orphan inode deleted [ 509.351198][T28589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.523048][T28610] netlink: 'syz.4.8391': attribute type 1 has an invalid length. [ 509.536395][T28610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.554013][T28610] 8021q: adding VLAN 0 to HW filter on device bond6 [ 509.561018][T28613] loop0: detected capacity change from 0 to 1024 [ 509.561545][T28610] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 509.567915][T28613] EXT4-fs: Ignoring removed bh option [ 509.579279][T28610] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 509.589477][T28613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.635184][T28618] program syz.3.8393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.651167][T27731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.660540][T28618] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 509.696720][T28622] __nla_validate_parse: 17 callbacks suppressed [ 509.696734][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8395'. [ 509.711923][T28622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8395'. [ 509.745617][T28622] loop3: detected capacity change from 0 to 1024 [ 509.761909][T28622] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 509.790144][T28610] lo speed is unknown, defaulting to 1000 [ 509.803200][T28610] lo speed is unknown, defaulting to 1000 [ 509.858925][T28620] loop0: detected capacity change from 0 to 128 [ 509.886748][T28632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8399'. [ 509.942702][T28620] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 509.957865][T28620] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 510.000730][T27731] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 510.052393][T23922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.102932][T28650] loop3: detected capacity change from 0 to 512 [ 510.113978][T28650] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 510.138199][T28665] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8412'. [ 510.149744][T28668] netlink: 404 bytes leftover after parsing attributes in process `syz.2.8408'. [ 510.165599][T28650] EXT4-fs (loop3): 1 truncate cleaned up [ 510.179137][T28650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.194519][T28671] netlink: 'syz.4.8413': attribute type 1 has an invalid length. [ 510.214455][T28671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.236485][T28671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.255745][T28671] bond7: (slave vxcan7): The slave device specified does not support setting the MAC address [ 510.277218][T28671] bond7: (slave vxcan7): Error -95 calling set_mac_address [ 510.292002][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8415'. [ 510.296136][T28662] loop7: detected capacity change from 0 to 32768 [ 510.348990][T28662] loop7: p1 p3 < > [ 510.421942][T28686] lo speed is unknown, defaulting to 1000 [ 510.428005][T28686] lo speed is unknown, defaulting to 1000 [ 510.530454][T28694] 9pnet_fd: Insufficient options for proto=fd [ 510.545225][T28698] loop4: detected capacity change from 0 to 1024 [ 510.552438][T28698] EXT4-fs: Ignoring removed bh option [ 510.563750][T28694] loop0: detected capacity change from 0 to 512 [ 510.575871][T28698] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.577153][T28694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.8420: missing EA_INODE flag [ 510.602521][T28694] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.8420: error while reading EA inode 11 err=-117 [ 510.618017][T28700] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8424'. [ 510.618314][T28694] EXT4-fs (loop0): 1 orphan inode deleted [ 510.636183][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.636356][T28694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.752145][T28711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8427'. [ 510.769563][T28650] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.790064][T28716] loop3: detected capacity change from 0 to 512 [ 510.797168][T28716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 510.812210][T28716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.824943][T28716] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 510.941476][T28716] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8428: corrupted xattr block 19: overlapping e_value [ 511.015887][T28716] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 511.074688][T28716] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8428: corrupted xattr block 19: overlapping e_value [ 511.156954][T28716] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 511.221024][T28716] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8428: corrupted xattr block 19: overlapping e_value [ 511.235289][T28731] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8434'. [ 511.244336][T28731] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8434'. [ 511.264309][T23261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.329312][T27731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.385561][T28748] netlink: 'syz.0.8443': attribute type 1 has an invalid length. [ 511.402614][T28748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.413920][T28752] rdma_rxe: rxe_newlink: failed to add syz_tun [ 511.420870][T28751] loop4: detected capacity change from 0 to 1024 [ 511.436042][T28748] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.442748][T28751] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 511.453671][T28748] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 511.470723][T28748] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 511.624473][T28779] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 511.658606][T28748] lo speed is unknown, defaulting to 1000 [ 511.664687][T28748] lo speed is unknown, defaulting to 1000 [ 511.706719][T28782] 9pnet_fd: Insufficient options for proto=fd [ 511.716648][T28782] loop3: detected capacity change from 0 to 512 [ 511.734865][T28782] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.8454: missing EA_INODE flag [ 511.746803][T28782] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.8454: error while reading EA inode 11 err=-117 [ 511.759688][T28782] EXT4-fs (loop3): 1 orphan inode deleted [ 511.765813][T28782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.783015][T28786] loop0: detected capacity change from 0 to 512 [ 511.820296][T28786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 511.833021][T28786] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.901938][T28786] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.8457: corrupted inode contents [ 511.914065][T28786] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #18: comm syz.0.8457: mark_inode_dirty error [ 511.925723][T28786] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.8457: corrupted inode contents [ 511.938050][T28786] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.8457: mark_inode_dirty error [ 511.950826][T28786] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.8457: mark inode dirty (error -117) [ 511.963633][T28786] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 511.981466][T27731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.059115][T28791] loop0: detected capacity change from 0 to 1024 [ 512.066131][T28791] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 512.112149][ T29] kauditd_printk_skb: 770 callbacks suppressed [ 512.112165][ T29] audit: type=1400 audit(2000001712.568:40163): avc: denied { create } for pid=28794 comm="syz.0.8460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 512.139953][ T29] audit: type=1400 audit(2000001712.568:40164): avc: denied { ioctl } for pid=28794 comm="syz.0.8460" path="socket:[96041]" dev="sockfs" ino=96041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 512.165856][ T29] audit: type=1400 audit(2000001712.588:40165): avc: denied { open } for pid=28796 comm="syz.0.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 512.185402][ T29] audit: type=1400 audit(2000001712.588:40166): avc: denied { perfmon } for pid=28796 comm="syz.0.8461" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 512.206514][ T29] audit: type=1400 audit(2000001712.588:40167): avc: denied { kernel } for pid=28796 comm="syz.0.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 512.226218][ T29] audit: type=1400 audit(2000001712.588:40168): avc: denied { map_read map_write } for pid=28796 comm="syz.0.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.246211][ T29] audit: type=1400 audit(2000001712.588:40169): avc: denied { module_request } for pid=28796 comm="syz.0.8461" kmod="netdev-wlan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 512.269481][ T29] audit: type=1400 audit(2000001712.598:40170): avc: denied { sys_module } for pid=28796 comm="syz.0.8461" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 512.290870][ T29] audit: type=1400 audit(2000001712.608:40171): avc: denied { prog_run } for pid=28796 comm="syz.0.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 512.310072][ T29] audit: type=1400 audit(2000001712.718:40172): avc: denied { execmem } for pid=28796 comm="syz.0.8461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 512.446626][T23261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.527668][T28815] netlink: 'syz.4.8467': attribute type 1 has an invalid length. [ 512.562565][T28820] loop7: detected capacity change from 0 to 512 [ 512.576036][T28815] 8021q: adding VLAN 0 to HW filter on device bond8 [ 512.592723][T28821] 8021q: adding VLAN 0 to HW filter on device bond8 [ 512.601377][T28820] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.614375][T28821] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 512.624785][T28807] loop3: detected capacity change from 0 to 32768 [ 512.625849][T28820] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.632781][T28821] bond8: (slave vxcan7): Error -95 calling set_mac_address [ 512.678865][T28807] loop3: p1 p3 < > [ 512.720532][T28820] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.8469: corrupted inode contents [ 512.739826][T28820] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm syz.7.8469: mark_inode_dirty error [ 512.761364][T28820] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.8469: corrupted inode contents [ 512.773601][T28827] loop3: detected capacity change from 0 to 1024 [ 512.780782][T28820] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.8469: mark_inode_dirty error [ 512.781172][T28827] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 512.809175][T28820] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.8469: mark inode dirty (error -117) [ 512.822814][T28820] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 512.849859][T28821] lo speed is unknown, defaulting to 1000 [ 512.856351][T28821] lo speed is unknown, defaulting to 1000 [ 512.863363][T23922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.980704][T28844] program syz.4.8477 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.990168][T28844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 513.013709][T28846] 9pnet_fd: Insufficient options for proto=fd [ 513.061840][T28855] loop4: detected capacity change from 0 to 512 [ 513.081720][T28855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.094469][T28855] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.136903][T28863] loop0: detected capacity change from 0 to 1024 [ 513.143945][T28863] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 513.169024][T28855] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.8482: corrupted inode contents [ 513.185509][T28855] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #18: comm syz.4.8482: mark_inode_dirty error [ 513.214492][T28855] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.8482: corrupted inode contents [ 513.230647][T28873] netlink: 'syz.2.8488': attribute type 1 has an invalid length. [ 513.240179][T28855] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.8482: mark_inode_dirty error [ 513.253805][T28855] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.8482: mark inode dirty (error -117) [ 513.254475][T28876] program syz.3.8490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.277077][T28876] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 513.281754][T28873] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.287135][T28855] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 513.308200][T28880] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.318223][T28880] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 513.348129][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.367466][T28880] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 513.487145][T28889] loop4: detected capacity change from 0 to 1024 [ 513.497087][T28890] loop3: detected capacity change from 0 to 128 [ 513.505752][T28889] EXT4-fs: Ignoring removed bh option [ 513.521961][T28890] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 513.540417][T28890] ext4 filesystem being mounted at /412/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 513.559625][T28873] lo speed is unknown, defaulting to 1000 [ 513.565826][T28873] lo speed is unknown, defaulting to 1000 [ 513.586954][T28889] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 513.661103][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.687101][T28899] loop4: detected capacity change from 0 to 512 [ 513.735915][T28899] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.8495: corrupted xattr block 95: invalid header [ 513.758871][T28903] loop2: detected capacity change from 0 to 1024 [ 513.766203][T28903] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 513.774997][T28899] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8495: bg 0: block 7: invalid block bitmap [ 513.787588][T28899] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 513.797095][T28899] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.8495: corrupted xattr block 95: invalid header [ 513.867050][T28899] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 513.876522][T28899] EXT4-fs (loop4): 1 orphan inode deleted [ 513.883303][T28899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.908440][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.080335][T28915] loop4: detected capacity change from 0 to 512 [ 514.087528][T28915] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 514.109047][T28915] EXT4-fs (loop4): 1 truncate cleaned up [ 514.115556][T28915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.210566][T23261] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 514.222334][T28926] loop0: detected capacity change from 0 to 1024 [ 514.229395][T28926] EXT4-fs: Ignoring removed bh option [ 514.240071][T28928] netlink: 'syz.3.8507': attribute type 1 has an invalid length. [ 514.252601][T28928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 514.256109][T28926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.275241][T28928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 514.282735][T28928] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 514.293774][T27731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.294672][T28928] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 514.454893][T28928] lo speed is unknown, defaulting to 1000 [ 514.461272][T28928] lo speed is unknown, defaulting to 1000 [ 514.510044][T28944] loop0: detected capacity change from 0 to 512 [ 514.534901][T28944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.548028][T28944] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 514.630677][T28944] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.8513: corrupted inode contents [ 514.648194][T28944] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #18: comm syz.0.8513: mark_inode_dirty error [ 514.675352][T28944] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.8513: corrupted inode contents [ 514.689255][T28944] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.8513: mark_inode_dirty error [ 514.701771][T28944] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.8513: mark inode dirty (error -117) [ 514.714625][T28944] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 514.763185][T27731] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.767054][T28915] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.803257][T28970] program syz.4.8523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.813002][T28970] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 514.821429][T28968] __nla_validate_parse: 10 callbacks suppressed [ 514.821444][T28968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8522'. [ 514.836701][T28968] netlink: 212 bytes leftover after parsing attributes in process `syz.3.8522'. [ 514.923903][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8518'. [ 515.003276][T28973] loop0: detected capacity change from 0 to 32768 [ 515.049017][T28973] loop0: p1 p3 < > [ 515.123396][T28999] program syz.0.8535 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 515.132860][T28999] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 515.250120][T29011] 9pnet_fd: Insufficient options for proto=fd [ 515.271107][T29009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8540'. [ 515.300820][T29018] loop3: detected capacity change from 0 to 1024 [ 515.307643][T29018] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 515.344515][T29022] loop3: detected capacity change from 0 to 512 [ 515.351619][T29022] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.380411][T29022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.393358][T29022] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.404913][T29022] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8544: corrupted xattr block 19: overlapping e_value [ 515.419296][T29022] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 515.428293][T29022] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8544: corrupted xattr block 19: overlapping e_value [ 515.442345][T29022] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 515.451614][T29022] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.8544: corrupted xattr block 19: overlapping e_value [ 515.475035][T23261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.615752][T29028] loop3: detected capacity change from 0 to 32768 [ 515.659459][T29028] loop3: p1 p3 < > [ 515.749242][T29034] loop4: detected capacity change from 0 to 1024 [ 515.756120][T29034] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 515.771001][T29035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=29035 comm=syz.3.8547 [ 515.783863][T29035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8547'. [ 515.792837][T29035] netlink: 'syz.3.8547': attribute type 15 has an invalid length. [ 515.801002][T29035] netlink: 'syz.3.8547': attribute type 18 has an invalid length. [ 515.811267][T29035] vxlan0: entered promiscuous mode [ 515.817422][T17248] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.828336][T17248] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.837279][T17248] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.845651][T17248] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.061991][T29049] loop7: detected capacity change from 0 to 512 [ 516.081754][T29049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.095598][T29049] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.129371][T29054] loop4: detected capacity change from 0 to 1024 [ 516.137761][T29054] EXT4-fs: Ignoring removed bh option [ 516.151403][T29054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.173431][T29061] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.8554: corrupted inode contents [ 516.196420][T29061] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #18: comm syz.7.8554: mark_inode_dirty error [ 516.211976][T29061] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #18: comm syz.7.8554: corrupted inode contents [ 516.212422][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.225275][T29061] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.8554: mark_inode_dirty error [ 516.245232][T29061] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.8554: mark inode dirty (error -117) [ 516.284386][T29061] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 516.307810][T23922] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.333096][T29058] loop0: detected capacity change from 0 to 32768 [ 516.378999][T29058] loop0: p1 p3 < > [ 516.385523][T29072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8563'. [ 516.394532][T29072] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8563'. [ 516.458514][T29077] 9pnet_fd: Insufficient options for proto=fd [ 516.479364][T29080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8565'. [ 516.488569][T29074] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8565'. [ 516.502805][T29074] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 516.509588][T29076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8564'. [ 516.560005][T29088] netlink: 'syz.0.8568': attribute type 1 has an invalid length. [ 516.575252][T29088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.604556][T29088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 516.615382][T29088] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 516.626861][T29088] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 516.673074][T29102] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 516.818982][T29104] loop4: detected capacity change from 0 to 32768 [ 516.851818][T29088] lo speed is unknown, defaulting to 1000 [ 516.857826][T29088] lo speed is unknown, defaulting to 1000 [ 516.869107][T29104] loop4: p1 p3 < > [ 516.954646][T29108] loop4: detected capacity change from 0 to 512 [ 516.964823][T29108] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.4.8576: corrupted xattr block 95: invalid header [ 516.990570][T29108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.8576: bg 0: block 7: invalid block bitmap [ 517.003804][T29108] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 517.012757][T29108] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #11: comm syz.4.8576: corrupted xattr block 95: invalid header [ 517.026922][T29108] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 517.036763][T29108] EXT4-fs (loop4): 1 orphan inode deleted [ 517.042941][T29108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.068042][T21452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.089211][T29118] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 517.106037][T29121] program syz.4.8582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.115593][T29121] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 517.138966][ T29] kauditd_printk_skb: 719 callbacks suppressed [ 517.138978][ T29] audit: type=1400 audit(2000001717.588:40892): avc: denied { create } for pid=29124 comm="syz.4.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 517.167956][T29123] loop2: detected capacity change from 0 to 1024 [ 517.175186][T29123] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 517.184574][ T29] audit: type=1400 audit(2000001717.598:40893): avc: denied { setopt } for pid=29124 comm="syz.4.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 517.204252][ T29] audit: type=1400 audit(2000001717.598:40894): avc: denied { bind } for pid=29124 comm="syz.4.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 517.223837][ T29] audit: type=1400 audit(2000001717.598:40895): avc: denied { name_bind } for pid=29124 comm="syz.4.8584" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 517.245838][ T29] audit: type=1400 audit(2000001717.598:40896): avc: denied { node_bind } for pid=29124 comm="syz.4.8584" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 517.266792][ T29] audit: type=1400 audit(2000001717.598:40897): avc: denied { create } for pid=29124 comm="syz.4.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.287386][ T29] audit: type=1400 audit(2000001717.598:40898): avc: denied { write } for pid=29124 comm="syz.4.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.308103][ T29] audit: type=1400 audit(2000001717.598:40899): avc: denied { read } for pid=29124 comm="syz.4.8584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 517.332363][ T29] audit: type=1400 audit(2000001717.628:40900): avc: denied { getopt } for pid=29116 comm="syz.0.8581" lport=49240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 517.353090][ T29] audit: type=1400 audit(2000001717.628:40901): avc: denied { mounton } for pid=29122 comm="syz.2.8583" path="/403/bus" dev="tmpfs" ino=2177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 517.378508][T29128] loop4: detected capacity change from 0 to 512 [ 517.397027][T29128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.412904][T29128] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.487357][T29128] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.8585: corrupted inode contents [ 517.501053][T29128] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #18: comm syz.4.8585: mark_inode_dirty error [ 517.585411][T29128] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #18: comm syz.4.8585: corrupted inode contents [ 517.609862][T29128] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.8585: mark_inode_dirty error [ 517.628432][T29128] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.8585: mark inode dirty (error -117) [ 517.643472][T29128] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 517.653964][T29155] loop2: detected capacity change from 0 to 1024 [ 517.656980][T29157] loop3: detected capacity change from 0 to 512 [ 517.675524][T29157] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.8594: corrupted xattr block 95: invalid header [ 517.684808][T29155] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 517.714044][T29157] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.8594: bg 0: block 7: invalid block bitmap [ 517.741124][T29157] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 517.786454][T29157] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.8594: corrupted xattr block 95: invalid header [ 517.788190][T29166] loop0: detected capacity change from 0 to 1024 [ 517.808377][T29166] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 517.817245][T29157] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 517.838011][T29157] EXT4-fs (loop3): 1 orphan inode deleted [ 518.013792][T29190] loop4: detected capacity change from 0 to 512 [ 518.021995][T29190] EXT4-fs: Ignoring removed oldalloc option [ 518.034851][T29190] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 518.046920][T29190] EXT4-fs (loop4): 1 truncate cleaned up [ 518.151097][T29207] loop0: detected capacity change from 0 to 512 [ 518.162502][T29207] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.190964][T29207] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 518.202231][T29207] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8614: corrupted xattr block 19: overlapping e_value [ 518.216182][T29207] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 518.225611][T29207] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8614: corrupted xattr block 19: overlapping e_value [ 518.235765][T29198] loop4: detected capacity change from 0 to 128 [ 518.245765][T29207] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 518.256591][T29207] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8614: corrupted xattr block 19: overlapping e_value [ 518.280212][T29198] ext4 filesystem being mounted at /588/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 518.313193][T29218] program syz.3.8618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 518.322560][T29218] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 518.459738][T29237] netlink: 'syz.0.8625': attribute type 1 has an invalid length. [ 518.473500][T29237] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.486679][T29237] 8021q: adding VLAN 0 to HW filter on device bond5 [ 518.493949][T29237] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 518.505595][T29237] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 518.661816][T29255] loop7: detected capacity change from 0 to 1024 [ 518.686275][T29255] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 518.694173][T29257] lo speed is unknown, defaulting to 1000 [ 518.734527][T29257] lo speed is unknown, defaulting to 1000 [ 518.812354][T29266] loop2: detected capacity change from 0 to 128 [ 518.839789][T29266] ext4 filesystem being mounted at /408/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 518.901605][T29276] loop3: detected capacity change from 0 to 512 [ 518.945136][T29279] loop0: detected capacity change from 0 to 512 [ 519.059528][T29276] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.8636: corrupted xattr block 95: invalid header [ 519.073698][T29279] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.086105][T29276] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.8636: bg 0: block 7: invalid block bitmap [ 519.100336][T29276] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 519.109252][T29276] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #11: comm syz.3.8636: corrupted xattr block 95: invalid header [ 519.123368][T29276] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 519.132681][T29276] EXT4-fs (loop3): 1 orphan inode deleted [ 519.147134][T29279] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.8637: corrupted inode contents [ 519.169438][T29279] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #18: comm syz.0.8637: mark_inode_dirty error [ 519.197485][T29279] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #18: comm syz.0.8637: corrupted inode contents [ 519.260112][T29279] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #18: comm syz.0.8637: mark_inode_dirty error [ 519.281578][T29279] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #18: comm syz.0.8637: mark inode dirty (error -117) [ 519.311972][T29279] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 519.425693][T29300] loop3: detected capacity change from 0 to 1024 [ 519.433620][T29300] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 519.501604][T29306] loop3: detected capacity change from 0 to 512 [ 519.508540][T29306] EXT4-fs: Ignoring removed oldalloc option [ 519.515741][T29306] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 519.539242][T29306] EXT4-fs (loop3): 1 truncate cleaned up [ 519.605743][T29321] loop0: detected capacity change from 0 to 512 [ 519.614559][T29321] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.8652: corrupted xattr block 95: invalid header [ 519.631175][T29321] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.8652: bg 0: block 7: invalid block bitmap [ 519.644363][T29321] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 519.649557][T29325] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 519.653283][T29321] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.8652: corrupted xattr block 95: invalid header [ 519.673423][T29321] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 519.682559][T29321] EXT4-fs (loop0): 1 orphan inode deleted [ 519.712399][T29331] program syz.0.8656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 519.721968][T29331] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 519.833252][T29340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=29340 comm=syz.3.8658 [ 519.846235][T29340] __nla_validate_parse: 12 callbacks suppressed [ 519.846248][T29340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8658'. [ 519.846399][T29339] loop0: detected capacity change from 0 to 512 [ 519.852548][T29340] netlink: 'syz.3.8658': attribute type 15 has an invalid length. [ 519.865271][T29339] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.0.8660: corrupted xattr block 95: invalid header [ 519.867634][T29340] netlink: 'syz.3.8658': attribute type 18 has an invalid length. [ 519.875950][T29339] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.8660: bg 0: block 7: invalid block bitmap [ 519.876136][T29339] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 519.876246][T29339] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2962: inode #11: comm syz.0.8660: corrupted xattr block 95: invalid header [ 519.876426][T29339] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 519.876452][T29339] EXT4-fs (loop0): 1 orphan inode deleted [ 519.977356][T29347] loop0: detected capacity change from 0 to 512 [ 519.984461][T29347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 520.001345][T29347] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.012956][T29347] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8663: corrupted xattr block 19: overlapping e_value [ 520.027199][T29347] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 520.036456][T29347] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8663: corrupted xattr block 19: overlapping e_value [ 520.050436][T29347] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 520.059800][T29347] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.8663: corrupted xattr block 19: overlapping e_value [ 520.081282][T29355] loop7: detected capacity change from 0 to 1024 [ 520.088724][T29355] EXT4-fs: Ignoring removed bh option [ 520.126930][T29361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8668'. [ 520.136087][T29361] netlink: 212 bytes leftover after parsing attributes in process `syz.4.8668'. [ 520.188554][T29359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8666'. [ 520.329645][T29386] loop0: detected capacity change from 0 to 1024 [ 520.336491][T29386] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 520.363867][T29388] loop0: detected capacity change from 0 to 1024 [ 520.370849][T29388] EXT4-fs: Ignoring removed bh option [ 520.447296][T29402] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8672'. [ 520.475403][T29396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8682'. [ 520.599395][T29416] loop4: detected capacity change from 0 to 1024 [ 520.606538][T29416] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 520.710541][T29432] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 520.721165][T21452] syz_tun (unregistering): left allmulticast mode [ 520.844626][T29433] lo speed is unknown, defaulting to 1000 [ 520.861895][T17225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.882061][T29433] lo speed is unknown, defaulting to 1000 [ 520.916539][T17225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.972931][T17225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.002700][T29459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=29459 comm=syz.0.8702 [ 521.015061][T29433] chnl_net:caif_netlink_parms(): no params data found [ 521.015530][T29459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8702'. [ 521.031033][T29459] netlink: 'syz.0.8702': attribute type 15 has an invalid length. [ 521.038835][T29459] netlink: 'syz.0.8702': attribute type 18 has an invalid length. [ 521.048296][T17225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.064525][T29459] vxlan0: entered promiscuous mode [ 521.081902][ T266] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.091067][ T266] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.091093][T29461] loop2: detected capacity change from 0 to 1024 [ 521.106338][T29461] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 521.111787][ T266] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.132122][ T266] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.145653][T29433] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.152926][T29433] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.160286][T29433] bridge_slave_0: entered allmulticast mode [ 521.166759][T29466] netlink: 'syz.2.8705': attribute type 1 has an invalid length. [ 521.166781][T29433] bridge_slave_0: entered promiscuous mode [ 521.166947][T29466] ================================================================== [ 521.175390][T29433] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.180393][T29466] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 521.188478][T29433] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.195455][T29466] [ 521.195462][T29466] write to 0xffffffff86872998 of 8 bytes by task 29433 on cpu 1: [ 521.195479][T29466] data_alloc+0x271/0x2b0 [ 521.202541][T29433] bridge_slave_1: entered allmulticast mode [ 521.209380][T29466] prb_reserve+0x808/0xaf0 [ 521.209409][T29466] vprintk_store+0x56d/0x860 [ 521.209438][T29466] vprintk_emit+0x178/0x650 [ 521.209453][T29466] vprintk_default+0x26/0x30 [ 521.209469][T29466] vprintk+0x1d/0x30 [ 521.212354][T29433] bridge_slave_1: entered promiscuous mode [ 521.219468][T29466] _printk+0x79/0xa0 [ 521.219496][T29466] __netdev_printk+0x321/0x3e0 [ 521.265890][T29466] netdev_info+0x9b/0xd0 [ 521.270127][T29466] __dev_set_promiscuity+0x233/0x450 [ 521.275405][T29466] netif_set_promiscuity+0x39/0x90 [ 521.280510][T29466] dev_set_promiscuity+0xc1/0x170 [ 521.285524][T29466] br_manage_promisc+0xf1/0x370 [ 521.290361][T29466] nbp_update_port_count+0xc3/0xe0 [ 521.295458][T29466] br_add_if+0x502/0xa60 [ 521.299684][T29466] br_add_slave+0x2c/0x40 [ 521.304004][T29466] do_set_master+0x38d/0x460 [ 521.308587][T29466] do_setlink+0xa43/0x2810 [ 521.312993][T29466] rtnl_newlink+0xe75/0x12d0 [ 521.317569][T29466] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 521.322496][T29466] netlink_rcv_skb+0x123/0x220 [ 521.327245][T29466] rtnetlink_rcv+0x1c/0x30 [ 521.331651][T29466] netlink_unicast+0x5bd/0x690 [ 521.336411][T29466] netlink_sendmsg+0x58b/0x6b0 [ 521.341162][T29466] __sock_sendmsg+0x142/0x180 [ 521.345830][T29466] __sys_sendto+0x268/0x330 [ 521.350324][T29466] __x64_sys_sendto+0x76/0x90 [ 521.354994][T29466] x64_sys_call+0x2d05/0x2ff0 [ 521.359658][T29466] do_syscall_64+0xd2/0x200 [ 521.364153][T29466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.370040][T29466] [ 521.372349][T29466] read to 0xffffffff86872998 of 16 bytes by task 29466 on cpu 0: [ 521.380050][T29466] _prb_read_valid+0x1bc/0x920 [ 521.384809][T29466] prb_final_commit+0x136/0x1e0 [ 521.389654][T29466] vprintk_store+0x741/0x860 [ 521.394247][T29466] vprintk_emit+0x178/0x650 [ 521.398733][T29466] vprintk_default+0x26/0x30 [ 521.403306][T29466] vprintk+0x1d/0x30 [ 521.407188][T29466] _printk+0x79/0xa0 [ 521.411075][T29466] __nla_validate_parse+0x1227/0x1d00 [ 521.416435][T29466] __nla_parse+0x40/0x60 [ 521.420663][T29466] rtnl_newlink+0x793/0x12d0 [ 521.425242][T29466] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 521.430168][T29466] netlink_rcv_skb+0x123/0x220 [ 521.434918][T29466] rtnetlink_rcv+0x1c/0x30 [ 521.439321][T29466] netlink_unicast+0x5bd/0x690 [ 521.444087][T29466] netlink_sendmsg+0x58b/0x6b0 [ 521.448837][T29466] __sock_sendmsg+0x142/0x180 [ 521.453507][T29466] ____sys_sendmsg+0x31e/0x4e0 [ 521.458259][T29466] ___sys_sendmsg+0x17b/0x1d0 [ 521.462921][T29466] __x64_sys_sendmsg+0xd4/0x160 [ 521.467759][T29466] x64_sys_call+0x191e/0x2ff0 [ 521.472422][T29466] do_syscall_64+0xd2/0x200 [ 521.476916][T29466] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 521.482806][T29466] [ 521.485109][T29466] Reported by Kernel Concurrency Sanitizer on: [ 521.491242][T29466] CPU: 0 UID: 0 PID: 29466 Comm: syz.2.8705 Not tainted 6.17.0-rc1-syzkaller-00111-g24ea63ea3877 #0 PREEMPT(voluntary) [ 521.503723][T29466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.513765][T29466] ================================================================== [ 521.558946][T29466] 8021q: adding VLAN 0 to HW filter on device bond6 [ 521.862348][T17225] bond0 (unregistering): Released all slaves [ 521.870983][T17225] bond1 (unregistering): Released all slaves [ 521.879345][T17225] bond2 (unregistering): Released all slaves [ 521.888595][T17225] bond3 (unregistering): Released all slaves [ 521.922915][T17225] bond4 (unregistering): Released all slaves [ 521.945433][T17225] bond5 (unregistering): Released all slaves [ 521.958527][T17225] bond6 (unregistering): Released all slaves [ 521.966459][T17225] bond7 (unregistering): Released all slaves [ 521.974109][T17225] bond8 (unregistering): Released all slaves [ 522.031834][T17225] tipc: Disabling bearer [ 522.037040][T17225] tipc: Left network mode [ 522.056108][T17225] hsr_slave_0: left promiscuous mode [ 522.061872][T17225] hsr_slave_1: left promiscuous mode [ 522.069280][T17225] veth1_macvtap: left promiscuous mode [ 522.075327][T17225] veth0_macvtap: left promiscuous mode [ 522.140857][T29469] lo speed is unknown, defaulting to 1000 [ 522.146595][T29469] infiniband syz2: ib_query_port failed (-19) [ 522.362324][T17225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.372660][T17225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.422028][T17225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.432323][T17225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.491977][T17225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.502279][T17225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.562649][T17225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.572910][T17225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.630509][T17225] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.640318][T17225] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.690667][T17225] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.700420][T17225] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.740757][T17225] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.750579][T17225] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.800889][T17225] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.810634][T17225] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.851295][T17225] bridge_slave_1: left allmulticast mode [ 522.856992][T17225] bridge_slave_1: left promiscuous mode [ 522.862647][T17225] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.870297][T17225] bridge_slave_0: left allmulticast mode [ 522.875941][T17225] bridge_slave_0: left promiscuous mode [ 522.881543][T17225] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.889500][T17225] bridge_slave_1: left allmulticast mode [ 522.895216][T17225] bridge_slave_1: left promiscuous mode [ 522.900882][T17225] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.908545][T17225] bridge_slave_0: left allmulticast mode [ 522.914269][T17225] bridge_slave_0: left promiscuous mode [ 522.919958][T17225] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.928148][T17225] bridge_slave_1: left allmulticast mode [ 522.933865][T17225] bridge_slave_1: left promiscuous mode [ 522.939439][T17225] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.946893][T17225] bridge_slave_0: left allmulticast mode [ 522.952526][T17225] bridge_slave_0: left promiscuous mode [ 522.958092][T17225] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.061375][T17225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.071209][T17225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.080631][T17225] bond0 (unregistering): Released all slaves [ 523.088508][T17225] bond1 (unregistering): Released all slaves [ 523.096605][T17225] bond2 (unregistering): Released all slaves [ 523.104177][T17225] bond3 (unregistering): Released all slaves [ 523.111906][T17225] bond4 (unregistering): Released all slaves [ 523.119786][T17225] bond5 (unregistering): Released all slaves [ 523.161647][T17225]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.170786][T17225]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.179932][T17225]  (unregistering): (slave macvlan1): Releasing backup interface [ 523.188086][T17225]  (unregistering): Released all slaves [ 523.195627][T17225] bond1 (unregistering): Released all slaves [ 523.203501][T17225] bond2 (unregistering): Released all slaves [ 523.211655][T17225] bond3 (unregistering): Released all slaves [ 523.219640][T17225] bond4 (unregistering): Released all slaves [ 523.227473][T17225] bond0 (unregistering): Released all slaves [ 523.236086][T17225] bond5 (unregistering): Released all slaves [ 523.244050][T17225] bond6 (unregistering): Released all slaves [ 523.281051][T17225] bond0 (unregistering): Released all slaves [ 523.372788][T17225] hsr_slave_0: left promiscuous mode [ 523.378418][T17225] hsr_slave_1: left promiscuous mode [ 523.384085][T17225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.391512][T17225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.400435][T17225] hsr_slave_0: left promiscuous mode [ 523.405891][T17225] hsr_slave_1: left promiscuous mode [ 523.415590][T17225] veth1_macvtap: left promiscuous mode [ 523.421128][T17225] veth0_macvtap: left promiscuous mode [ 523.426616][T17225] veth1_vlan: left promiscuous mode [ 523.431849][T17225] veth0_vlan: left promiscuous mode [ 523.437572][T17225] veth1_macvtap: left promiscuous mode [ 523.443219][T17225] veth0_macvtap: left promiscuous mode [ 523.448675][T17225] veth1_vlan: left promiscuous mode [ 523.453904][T17225] veth0_vlan: left promiscuous mode [ 523.527589][T17225] team0 (unregistering): Port device team_slave_1 removed [ 523.537366][T17225] team0 (unregistering): Port device team_slave_0 removed [ 523.544917][T17248] smc: removing ib device syz! [ 523.581555][T17225] team0 (unregistering): Port device team_slave_1 removed [ 523.590516][T17225] team0 (unregistering): Port device team_slave_0 removed [ 525.727002][T17227] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.736758][T17227] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.781083][T17227] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.790845][T17227] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.841041][T17227] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.850788][T17227] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.911273][T17227] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 525.921020][T17227] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.962117][T17227] bridge_slave_1: left allmulticast mode [ 525.967776][T17227] bridge_slave_1: left promiscuous mode [ 525.973449][T17227] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.981115][T17227] bridge_slave_0: left allmulticast mode [ 525.986753][T17227] bridge_slave_0: left promiscuous mode [ 525.992413][T17227] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.131782][T17227] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.141334][T17227] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 526.151250][T17227] bond0 (unregistering): Released all slaves [ 526.159006][T17227] bond1 (unregistering): Released all slaves [ 526.167103][T17227] bond2 (unregistering): Released all slaves [ 526.174931][T17227] bond3 (unregistering): Released all slaves [ 526.182786][T17227] bond4 (unregistering): Released all slaves [ 526.190789][T17227] bond5 (unregistering): Released all slaves [ 526.198696][T17227] bond6 (unregistering): Released all slaves [ 526.252282][T17227] tipc: Disabling bearer [ 526.257494][T17227] tipc: Left network mode [ 526.264025][T17227] hsr_slave_0: left promiscuous mode [ 526.269664][T17227] hsr_slave_1: left promiscuous mode [ 526.275276][T17227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.282702][T17227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.292016][T17227] veth1_vlan: left promiscuous mode [ 526.297217][T17227] veth0_vlan: left promiscuous mode [ 526.320770][T17227] pim6reg (unregistering): left allmulticast mode [ 526.343687][T17227] team0 (unregistering): Port device team_slave_1 removed [ 526.352513][T17227] team0 (unregistering): Port device team_slave_0 removed [ 526.373567][T17227] team0 (unregistering): Port device dummy0 removed [ 526.385183][T29469] lo speed is unknown, defaulting to 1000 [ 526.390943][T29469] infiniband syz0: ib_query_port failed (-19)