last executing test programs: 3m7.42056244s ago: executing program 32 (id=156): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) 3m2.864014098s ago: executing program 33 (id=270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 3m1.186503471s ago: executing program 34 (id=315): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000980)="9f", 0x1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 3m0.304140558s ago: executing program 35 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x22508d8, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 2m38.325436173s ago: executing program 5 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 2m37.804287914s ago: executing program 5 (id=1132): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 2m37.804156254s ago: executing program 36 (id=1132): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 1m42.273238839s ago: executing program 37 (id=2988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) 1m42.124126471s ago: executing program 38 (id=2994): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x40) 1m25.851902147s ago: executing program 1 (id=3329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e900757c2498e33fe93a0c9001c5c65f7107d0d0000000000000000000037", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) 1m25.843734437s ago: executing program 1 (id=3332): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r0, r2, 0x0) 1m25.782379898s ago: executing program 1 (id=3336): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 1m25.739105329s ago: executing program 1 (id=3338): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000080)=0x3f) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0xae8, 0x863, 0x0) 1m25.534201603s ago: executing program 1 (id=3340): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000400)=0x4, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) recvmmsg(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000006c0)=""/166, 0xa6}], 0x1}, 0x2}], 0x1, 0x4, 0x0) 1m24.564218012s ago: executing program 1 (id=3353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 1m24.538238862s ago: executing program 39 (id=3353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 27.451646988s ago: executing program 4 (id=4735): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x103) dup2(r0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="000000009cb9ecb38e156102989411c3910000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000400000000000000010000008e", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="19"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000400, &(0x7f0000000080), 0xbe, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095", @ANYBLOB="2ecbb6d0e629feb8740e6f3e793baf4ce177d6e081443c86f577f4c18cd64e641c2694d88aba1d1829d501d6e5055e9b59f2f155946fd183decbe629e284bdfe04d88bed950fae69d0f0e0bf74d2dbb709f191f009a88b6381d84f28ada16ca4a3b4c31112b9b8544591d0e4", @ANYRES8, @ANYRESHEX, @ANYRESHEX=r5, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="8e4fbeb1b1a97c10c376633b6eea8c1a62f584668ea3dc69c079", @ANYBLOB="3a0264a3512cd27ab1d33557e81b8214ef2387b8c4e643fb14921672e0dadd6fe85a9cd208eada985385979cb3723df502399ec5e6f4fbcc95c4ce07ddbfa168feedd85cfde93f299d5655238119ee39c7570e8e7d7a403f68ef34e305eaca93ae2a544b821f7ba46680158820d8a79527eb5a56791c8c8613f3dd35b43973d0161820fe292b3663cd2d2ff29efad8b4707cbb3370215dbd836f0ca09dc6da3838a878dbeec497a204f458a52bbc78d66b13d19d7658bf4044a0c518f83d486c4ce48baa1557ed634abe3199b9454d4930683bccc2acd6e3e0dd", @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r8}, 0x18) r9 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) dup2(r6, r7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) fcntl$setown(r6, 0x8, r1) tkill(r1, 0x13) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r11, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') syz_emit_ethernet(0x2a, &(0x7f0000001f80)=ANY=[@ANYBLOB="0380c2001e00bbbbbbbbbbbb08004500001c0000000000019078ac1e0001ac1414aa000090"], 0x0) 26.588068425s ago: executing program 4 (id=4759): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004700)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 26.270223701s ago: executing program 4 (id=4763): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000300)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 26.235733122s ago: executing program 4 (id=4767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x206d0d1, 0x0) umount2(&(0x7f0000000080)='./file0/file0\x00', 0x1) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x0) 26.196073422s ago: executing program 4 (id=4770): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000001c0)="72a9286531b8c9bd0a1a6674afe5842c3366b0087b9f45ca7bf28ebeb65105f440fd", 0x22}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 26.088207295s ago: executing program 4 (id=4771): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x28}}], 0x1, 0x4000810) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 26.088046944s ago: executing program 40 (id=4771): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x28}}], 0x1, 0x4000810) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000040)={0x2, 0x6e27, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000080)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 24.502248945s ago: executing program 3 (id=4812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) 24.438573357s ago: executing program 3 (id=4813): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffee0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x5c, 0x30, 0xffffffffffffffff, 0xfffffffd, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) 24.419663727s ago: executing program 3 (id=4815): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x8000, 0x100077}, {@remote, 0x4e20, 0x3, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 24.368537428s ago: executing program 3 (id=4816): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 24.368398708s ago: executing program 3 (id=4817): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 23.960658596s ago: executing program 3 (id=4833): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 23.937016626s ago: executing program 41 (id=4833): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x138) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r1, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 22.280259539s ago: executing program 5 (id=4834): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x18) 22.145438801s ago: executing program 5 (id=4867): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 22.124355351s ago: executing program 5 (id=4868): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)={@broadcast, @random="80cc03df2bac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391100005efefd7f1a9aa8f6f3a6060ffc0e896f38da", "0b3d22b336984ffb47476e10c3ae64b1", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc660b8cd26e095f24ab642591"}}}}}}}, 0x0) 20.186299849s ago: executing program 5 (id=4885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 20.15420503s ago: executing program 42 (id=4885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 9.667327793s ago: executing program 7 (id=5147): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) 9.527174836s ago: executing program 7 (id=5149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x200980) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe0000000) 9.474663967s ago: executing program 7 (id=5150): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)) 9.363572799s ago: executing program 7 (id=5154): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x1389899, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88f8d2, 0x0) 9.312792119s ago: executing program 7 (id=5157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0x4}, {0x0, 0xfff1}, {0xfff3, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x4041080) 9.097672704s ago: executing program 7 (id=5163): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 9.080099784s ago: executing program 43 (id=5163): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xe85, 0x1, 0xc}, {0x4, 0x80000000, 0x3, 0x1, 0xf, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.127997539s ago: executing program 8 (id=5319): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x103) dup2(r0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="000000009cb9ecb38e156102989411c3910000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000400000000000000010000008e", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="19"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000400, &(0x7f0000000080), 0xbe, 0x7c0, &(0x7f0000000f80)="$eJzs3c9rG9kdAPDvyJZ/Ja1dKLTpyVBoDSFynbpJCz2k9FAKDQTacxMjKya1bAVLDrExJKEUeim0pYfC7iXn/ZG97XV/XHf/iz0sCdldx6yXPSxaRh7Zciw5dtaSDPl8YDzvvZnxe1+/mfGT3iAF8MqaTH/kIs5FxL+TiPGsPImIfCM1GHFlZ7/tzY1iuiRRr//586Sxz9bmRjFajkmdyTI/jogP/hFxPpcWjOyrt7q2vjhXLpdWsvx0ben2dHVt/cKtpbmF0kJp+dLM7OzFy7+6fOnkYv3y4/WzT/7zh5+/feXrv//o0b8+TOJKnM22tcZxUiZjMvub5NM/4T6/P+nK+izpdwN4KemlObBzlce5GI+BRqqD0V62DADolnsRUd8zVAcAXgFJ9LsFAEBvNd8H2NrcKDaX/r4j0VtPf7czNbmVzW1u78Y/mM3ZjTTmQce2kn0zI0lETJxA/ZMR8fq7f30zXaJL85AA7dx/EBE3JiYP3v+TA88sHNcvDttYH26sJp8rdv+D3nkvHf/8ut34L7c7/ok245/hNtfuy3jx9Z97fALVdJSO/37b8mzbdkv8mYmBLPe9xpgvn9y8VS6l97bvR8RU5IfT/Exj1/ZPQU09++ZZp/pbx39f/Pdvb6T1p+u9PXKPB4f3HzM/V5v7rnE3PX0Q8ZPBdvEnu/2fdBj/XjtiHX/8zT9f67QtjT+Nt7kcjL+76g8jfta2//f6Mjn0+cTpxukw3Twp2njnk/+Pdap/r/+HG+u0/uZrgV5I+3/s8PgnktbnNavHr+Ojh+Pvd9rWev63j7/9+T+U/KWRHsrK7s7VaiszEUPJnw6WX9w79m4+S2T7p/FP/bT99d/p/M9lz8be2M0dbvDJZ29lv6pt/A33O8XfXWn888fq/0MS9eyY5zY92l4c6FT/0fp/tpGaykqOcv97QUubiRd3HgAAAAAAAAAAAAAAAAAAAAAAAACcgFxEnI0kV9hN53KFws53eP8wxnLlSrV2/mZldXk+Gt+VPRH5XPOjLsdbPg91Jvs8/Gb+4nP5X0bEDyLif8OjjXyhWCnP9zt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMic2f/9//fSVaGws+3T4X63DgDompF+NwAA6Dn//wHg1XO8//+jXWsHANA7x379X0+60xAAoGdGIn+0HW90uyUAQK+Y/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDLrl29mi71rzY3iml+/s7a6mLlzoX5UnWxsLRaLBQrK7cLC5XKQrlUKFaWOv6i+zurcqVyezaWV+9O10rV2nR1bf36UmV1uXb91tLcQul6Kd+zyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6Kpr64tz5XJpReLQxOjpaMapSQzGqWjGiSXqAzvXw+loz2A0S4b61ozWu8Ron+5OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfftwEAAP//uwceNw==") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095", @ANYBLOB="2ecbb6d0e629feb8740e6f3e793baf4ce177d6e081443c86f577f4c18cd64e641c2694d88aba1d1829d501d6e5055e9b59f2f155946fd183decbe629e284bdfe04d88bed950fae69d0f0e0bf74d2dbb709f191f009a88b6381d84f28ada16c", @ANYRES8, @ANYRESHEX, @ANYRESHEX=r5, @ANYRESHEX, @ANYRESDEC=r4, @ANYBLOB="8e4fbeb1b1a97c10c376633b6eea8c1a62f584668ea3dc69c079", @ANYBLOB="3a0264a3512cd27ab1d33557e81b8214ef2387b8c4e643fb14921672e0dadd6fe85a9cd208eada985385979cb3723df502399ec5e6f4fbcc95c4ce07ddbfa168feedd85cfde93f299d5655238119ee39c7570e8e7d7a403f68ef34e305eaca93ae2a544b821f7ba46680158820d8a79527eb5a56791c8c8613f3dd35b43973d0161820fe292b3663cd2d2ff29efad8b4707cbb3370215dbd836f0ca09dc6da3838a878dbeec497a204f458a52bbc78d66b13d19d7658bf4044a0c518f83d486c4ce48baa1557ed634abe3199b9454d4930683bccc2acd6e3e0dd", @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r8}, 0x18) r9 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) dup2(r6, r7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) fcntl$setown(r6, 0x8, r1) tkill(r1, 0x13) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r11, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r11, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') syz_emit_ethernet(0x2a, &(0x7f0000001f80)=ANY=[@ANYBLOB="0380c2001e00bbbbbbbbbbbb08004500001c0000000000019078ac1e0001ac1414aa0000907800670008"], 0x0) 1.296444735s ago: executing program 8 (id=5351): syz_clone(0xc510c080, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 1.272013015s ago: executing program 6 (id=5352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$eJzs3M9vFFUcAPDvTH8gArYi/uCHWkVj44+WAioHD2o08YCJiR702LSFIIUaWhMhRMAYPBlj4t149F/wpBdjPJl41bshIYYL4GnM7M7Q3WV3oWWX0e7nkwy8N/OG97775u2+mbdLAANrIv8jidgaEX9ExFg921xgov7XtStn565fOTuXRJa9+3dSK3f1ytm5smh53pYiM5lGpJ8nsbtNvcunzxyfXVxcOFXkp1dOfDS9fPrMC8dOzB5dOLpwcv+hQwcPzLz80v4XexJn3qaruz5d2rPzrQ++fvvwl03xt8TRIxPdDj6dZT2urlrbGtLJcIUNYU2GIiLvrpHa+B+LoVjtvLF487NKGwf0VZZl2ZbOh89nwAaWRHPekIdBUX7Q5/e/5dY6CXi1f9OPyl1+rX4DlMd9rdhqB7IsO1eUGWm5v+2liYh4//w/3+Zb9Oc5BABAkx/z+c/z7eZ/aTzUUO6+Ym1oPCLuj4jtEfFAROyIiAcjamUfjohH1lh/6yLJzfOf9NK6ArtN+fzvlWJtq2n+F2lZZHyoyG2rxT+SHDm2uLCveE0mY2RTnp/pUsdPb/z+VadjjfO/fMvrL+eCRTsuDW9qPmd+dmX2TmJudPlCxK7hdvEnN1YCkojYGRG71lnHsWe/39Pp2K3j76IH60zZdxHP1Pv/fLTEX0q6r09O3xOLC/umy6viZr/+dvGdTvXfUfw9kPf/vW2v/xvxjyeN67XLa6/j4p9fdLynWe/1P5q8V0uPFvs+mV1ZOTUTMZocrje6cf/+1XPLfFk+j39yb/vxvz1WX4ndEZFfxI9GxGMR8XjR9ici4smI2Nsl/l9ef+rD9cffX3n882vq/9XEaLTuaZ8YOv7zD02Vjt8U//Xu/X+wlpos9tzO+9/ttGt9VzMAAAD8/6QRsTWSdOpGOk2npurfl98RkS4uLa88d2Tp45Pz9d8IjMdIWj7pGmt4HjpT3NbX8xciov7VgvL4geK58TdDm2v5qbmlxfmqg4cBt6XD+M/9NVR164C+G47YVHUbgGr4vSYMLuMfBpfxD4OrzfjfXEU7gLuv3ef/uQraAdx9LePfsh8MEPf/MLg6jv+N/D//ADU+/2EgLW+OW/9Ivmui/JfWefqGTcTIf6IZd57IkradG2nVDZPoZ6La9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBe+TcAAP//yinjzA==") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) 1.227260696s ago: executing program 6 (id=5353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 1.131874478s ago: executing program 6 (id=5358): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 1.078329789s ago: executing program 6 (id=5360): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010080000000fedbdf250f002d00180007800800020007"], 0x2c}, 0x1, 0x0, 0x0, 0x2805}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) 1.009368061s ago: executing program 6 (id=5363): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r1, 0x0, 0x12, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xf7}, 0x18) 965.203711ms ago: executing program 2 (id=5364): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00') bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 888.244283ms ago: executing program 8 (id=5365): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 862.798093ms ago: executing program 6 (id=5366): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x95bda107d86ebb57, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x2, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 730.045906ms ago: executing program 2 (id=5367): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 711.886597ms ago: executing program 8 (id=5368): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x80) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8db, 0x7ff, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x8, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x5, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) 652.222047ms ago: executing program 2 (id=5369): recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4}, 0x9}], 0x1, 0x40012000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 652.016458ms ago: executing program 8 (id=5370): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) 643.583978ms ago: executing program 8 (id=5371): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, 0x0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 469.875931ms ago: executing program 2 (id=5383): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)=r1}, 0x20) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0) 448.126921ms ago: executing program 0 (id=5375): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 413.263352ms ago: executing program 0 (id=5376): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x3}}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 375.559123ms ago: executing program 0 (id=5377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 326.024634ms ago: executing program 0 (id=5378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="09728f7f", 0x4}], 0x1}}], 0x2, 0x0) 306.195614ms ago: executing program 0 (id=5379): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) epoll_create1(0x0) socket(0x10, 0x80002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 258.102085ms ago: executing program 2 (id=5380): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='w\xde\xa1\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd\xde\xad\xf5\x1eM\x11[\xb6\x98\xda\xd2y\xbd\xad\x87P\xd8\xb2\xe5\xd2\xe7\xf6\xa1\xc8\'\x1e\xbc\xf4\xa0\xe6\xcf*(\xfb_\x9fL\xa2\x86\f\xcd\x1b\xd1\xe7\x11\xe8\xe1-\x0f\x1b:\xff\x11~') listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001680)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) 213.230566ms ago: executing program 2 (id=5381): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000080)={[{@discard}, {@noblock_validity}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) 212.824106ms ago: executing program 9 (id=5382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 210.357306ms ago: executing program 0 (id=5384): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="d79b07491f0d1156fb2943fd489f180000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r2, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r2, r2, 0x0) 132.195968ms ago: executing program 9 (id=5385): recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000980)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4}, 0x9}], 0x1, 0x40012000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) 106.003968ms ago: executing program 9 (id=5386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 64.386219ms ago: executing program 9 (id=5387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x20200, 0x0) ioctl$TIOCMBIS(r0, 0x5416, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00U\a', 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0xc001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 196µs ago: executing program 9 (id=5388): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$cgroup_int(r1, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) sendfile(r5, r4, 0x0, 0x1) 0s ago: executing program 9 (id=5389): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x102b2c, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) kernel console output (not intermixed with test programs): ous mode [ 149.478076][T12151] veth1_macvtap: entered promiscuous mode [ 149.493690][T12151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.507631][T12151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.519734][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.531774][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.549357][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.572436][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.655679][T12285] loop4: detected capacity change from 0 to 8192 [ 149.822516][T12301] loop4: detected capacity change from 0 to 256 [ 150.011446][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 150.029522][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3404'. [ 150.082991][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.090192][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.124707][T11157] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 150.166830][T12316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.206358][T12316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.216979][T12328] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3410'. [ 150.307951][T12336] loop0: detected capacity change from 0 to 2048 [ 150.322404][T12334] loop3: detected capacity change from 0 to 2048 [ 150.335648][T12336] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.355877][T12336] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3414: bg 0: block 120: padding at end of block bitmap is not set [ 150.379040][ T1979] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.397135][ T1979] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.408873][ T1979] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.418096][ T1979] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.428913][T12334] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.445538][T12334] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3413: bg 0: block 120: padding at end of block bitmap is not set [ 151.113234][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 151.139948][T11157] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 151.163036][T12362] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3421'. [ 151.250511][ T10] hid_parser_main: 6 callbacks suppressed [ 151.250529][ T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 151.264487][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 151.784771][T12406] loop4: detected capacity change from 0 to 128 [ 151.793116][T12406] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 151.806882][T12406] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 151.857322][T12151] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.879410][T12409] tipc: Started in network mode [ 151.884416][T12409] tipc: Node identity 66a1258abe08, cluster identity 4711 [ 151.891685][T12409] tipc: Enabled bearer , priority 0 [ 151.899918][T12409] tipc: Disabling bearer [ 151.977218][T12411] loop4: detected capacity change from 0 to 2048 [ 152.003107][T12411] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.015712][T12413] loop3: detected capacity change from 0 to 2048 [ 152.032441][T12413] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.048342][T12413] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3442: bg 0: block 120: padding at end of block bitmap is not set [ 152.069614][T12418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3441: bg 0: block 120: padding at end of block bitmap is not set [ 152.142363][ T29] kauditd_printk_skb: 757 callbacks suppressed [ 152.142415][ T29] audit: type=1326 audit(1757202214.045:11106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.172264][ T29] audit: type=1326 audit(1757202214.045:11107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.195954][ T29] audit: type=1326 audit(1757202214.045:11108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.219566][ T29] audit: type=1326 audit(1757202214.045:11109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.243245][ T29] audit: type=1326 audit(1757202214.045:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.267031][ T29] audit: type=1326 audit(1757202214.045:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.290665][ T29] audit: type=1326 audit(1757202214.045:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.314353][ T29] audit: type=1326 audit(1757202214.045:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.337971][ T29] audit: type=1326 audit(1757202214.045:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.361664][ T29] audit: type=1326 audit(1757202214.045:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12420 comm="syz.0.3443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 152.566622][T12440] sch_fq: defrate 4294967295 ignored. [ 152.636464][T12446] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3454'. [ 152.904556][T12151] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 152.941576][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 152.979356][T12466] serio: Serial port ptm0 [ 153.075436][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.083017][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.090485][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.098259][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.105903][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.113535][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.121057][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.128462][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.135990][ T3388] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 153.155390][ T3388] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 153.248994][T12492] loop4: detected capacity change from 0 to 2048 [ 153.306046][T12492] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.404537][T12507] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3475: bg 0: block 120: padding at end of block bitmap is not set [ 154.075614][T12151] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 154.125556][T12517] serio: Serial port ptm0 [ 154.244314][T12521] loop4: detected capacity change from 0 to 1024 [ 154.302805][T12521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.370139][T12521] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3495: Allocating blocks 449-513 which overlap fs metadata [ 154.424073][T12520] EXT4-fs (loop4): pa ffff888107283230: logic 48, phys. 177, len 21 [ 154.432191][T12520] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 154.457915][T12542] loop3: detected capacity change from 0 to 2048 [ 154.468017][T12151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.475609][T12542] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.507724][T12547] loop4: detected capacity change from 0 to 2048 [ 154.524623][T12547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.537207][T12547] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.550325][T12547] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3494: corrupted xattr block 128: invalid ea_ino [ 154.550666][T12551] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3493: bg 0: block 120: padding at end of block bitmap is not set [ 154.565384][T12547] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 154.587173][T12547] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.3494: corrupted xattr block 128: invalid ea_ino [ 154.600689][T12547] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 154.609977][T12547] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.3494: corrupted xattr block 128: invalid ea_ino [ 154.639458][T12151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.105145][T12560] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 155.200432][T12564] loop4: detected capacity change from 0 to 512 [ 155.208203][T12564] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.259581][T12564] EXT4-fs (loop4): 1 truncate cleaned up [ 155.269957][T12562] serio: Serial port ptm0 [ 155.274617][T12564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.387719][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 155.417184][T12151] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.623864][T12589] loop3: detected capacity change from 0 to 2048 [ 155.643393][T12589] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.658661][T12589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3512: bg 0: block 120: padding at end of block bitmap is not set [ 155.702133][T12597] loop4: detected capacity change from 0 to 1764 [ 155.929927][T12601] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3516'. [ 156.433844][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 156.659249][T12625] loop3: detected capacity change from 0 to 1764 [ 157.112147][T12653] syzkaller0: entered promiscuous mode [ 157.117757][T12653] syzkaller0: entered allmulticast mode [ 157.189433][T12640] loop3: detected capacity change from 0 to 512 [ 157.216365][T12640] EXT4-fs (loop3): too many log groups per flexible block group [ 157.224221][T12640] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 157.260070][T12640] EXT4-fs (loop3): mount failed [ 157.282589][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 157.282606][ T29] audit: type=1326 audit(1757202219.185:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.312528][ T29] audit: type=1326 audit(1757202219.185:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.353203][T12660] loop4: detected capacity change from 0 to 2048 [ 157.387325][T12660] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.421825][T12660] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3551: bg 0: block 120: padding at end of block bitmap is not set [ 157.442460][ T29] audit: type=1326 audit(1757202219.245:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.466267][ T29] audit: type=1326 audit(1757202219.245:11688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.489868][ T29] audit: type=1326 audit(1757202219.245:11689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.513492][ T29] audit: type=1326 audit(1757202219.245:11690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.537910][ T29] audit: type=1326 audit(1757202219.245:11691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.561553][ T29] audit: type=1326 audit(1757202219.245:11692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.586065][ T29] audit: type=1326 audit(1757202219.245:11693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.609797][ T29] audit: type=1326 audit(1757202219.245:11694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12659 comm="syz.4.3551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 157.683371][T12669] vhci_hcd: invalid port number 224 [ 157.816546][T12680] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 158.019293][T12695] loop3: detected capacity change from 0 to 2048 [ 158.033680][T12695] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.050005][T12695] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3555: bg 0: block 120: padding at end of block bitmap is not set [ 158.050105][T12701] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 158.050105][T12701] program syz.0.3556 not setting count and/or reply_len properly [ 158.859284][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 158.998191][T12738] loop3: detected capacity change from 0 to 2048 [ 159.035309][T12738] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.110611][T12749] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3572: bg 0: block 120: padding at end of block bitmap is not set [ 159.804602][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 159.954483][T12771] loop3: detected capacity change from 0 to 1024 [ 159.992107][T12771] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.005631][T12771] ext4 filesystem being mounted at /684/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.033834][T12771] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 2: comm syz.3.3588: lblock 2 mapped to illegal pblock 2 (length 4) [ 160.058825][T12771] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.3588: lblock 3 mapped to illegal pblock 3 (length 3) [ 160.074639][T12771] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 160.087035][T12771] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.087035][T12771] [ 160.111803][T12781] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3588: lblock 3 mapped to illegal pblock 3 (length 3) [ 160.150767][ T51] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 160.170833][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 160.183423][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.183423][ T51] [ 160.194739][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 160.287912][T12798] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 160.319467][T12151] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 160.358824][T12802] loop3: detected capacity change from 0 to 512 [ 160.362261][T12803] lo speed is unknown, defaulting to 1000 [ 160.385462][T12807] lo speed is unknown, defaulting to 1000 [ 160.386322][T12802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.395665][T12803] vxcan1 speed is unknown, defaulting to 1000 [ 160.478081][T12807] vxcan1 speed is unknown, defaulting to 1000 [ 160.532492][T12802] ext4 filesystem being mounted at /687/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.599075][ T3728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.649054][T12815] loop3: detected capacity change from 0 to 2048 [ 160.662455][T12815] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.679891][T12815] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3604: bg 0: block 120: padding at end of block bitmap is not set [ 160.843561][T12821] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3605'. [ 161.155644][T12840] vhci_hcd: invalid port number 96 [ 161.160810][T12840] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 161.402010][T12857] loop4: detected capacity change from 0 to 2048 [ 161.412350][T12857] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.428765][T12857] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3620: bg 0: block 120: padding at end of block bitmap is not set [ 161.479001][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 162.013731][T12883] netlink: 'syz.0.3631': attribute type 1 has an invalid length. [ 162.021768][T12883] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3631'. [ 162.218614][T12891] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 162.249921][T12151] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 162.290912][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 162.290928][ T29] audit: type=1326 audit(1757202224.185:12298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.0.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 162.329922][T12899] pim6reg1: entered promiscuous mode [ 162.335427][T12899] pim6reg1: entered allmulticast mode [ 162.347019][ T29] audit: type=1326 audit(1757202224.245:12299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12896 comm="syz.0.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 162.456217][T12895] Set syz1 is full, maxelem 65536 reached [ 162.619588][ T29] audit: type=1326 audit(1757202224.515:12300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.655764][ T29] audit: type=1326 audit(1757202224.515:12301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.679418][ T29] audit: type=1326 audit(1757202224.525:12302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.703076][ T29] audit: type=1326 audit(1757202224.525:12303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.726777][ T29] audit: type=1326 audit(1757202224.525:12304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.750418][ T29] audit: type=1326 audit(1757202224.525:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.774126][ T29] audit: type=1326 audit(1757202224.525:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.797827][ T29] audit: type=1326 audit(1757202224.525:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12927 comm="syz.7.3647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 162.884897][T12946] loop3: detected capacity change from 0 to 1024 [ 162.902789][T12946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.915196][T12946] ext4 filesystem being mounted at /697/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.928704][T12946] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.3654: lblock 0 mapped to illegal pblock 0 (length 1) [ 162.942194][T12946] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 162.954585][T12946] EXT4-fs (loop3): This should not happen!! Data will be lost [ 162.954585][T12946] [ 162.966104][T12946] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.3654: lblock 3 mapped to illegal pblock 3 (length 3) [ 162.980355][T12946] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 162.992732][T12946] EXT4-fs (loop3): This should not happen!! Data will be lost [ 162.992732][T12946] [ 163.015614][ T51] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:3: lblock 4 mapped to illegal pblock 4 (length 2) [ 163.030264][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 163.042732][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.042732][ T51] [ 163.053108][ T51] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 163.068040][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 163.080244][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 163.080244][ T51] [ 163.090130][ T51] EXT4-fs (loop3): Total free blocks count 0 [ 163.164020][T12962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3658'. [ 163.175189][T12959] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 163.182390][T12959] batman_adv: batadv0: Removing interface: veth1_vlan [ 163.481518][T12985] loop4: detected capacity change from 0 to 2048 [ 163.494288][T12985] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.515802][T12985] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3669: bg 0: block 120: padding at end of block bitmap is not set [ 163.594530][T13000] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.615747][T13003] loop3: detected capacity change from 0 to 128 [ 163.624611][T13003] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.637275][T13003] ext4 filesystem being mounted at /705/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.714700][ T3728] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.748489][T13016] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 163.756431][T13016] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3683'. [ 164.312257][T12151] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 164.395394][T13063] netlink: 'syz.4.3702': attribute type 12 has an invalid length. [ 164.430053][T13062] loop3: detected capacity change from 0 to 2048 [ 164.444630][T13062] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.466414][T13062] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3703: bg 0: block 120: padding at end of block bitmap is not set [ 164.559336][T13074] serio: Serial port ptm0 [ 164.921830][ T3388] page_pool_release_retry() stalled pool shutdown: id 67, 1 inflight 60 sec [ 165.065496][T13091] vhci_hcd: invalid port number 96 [ 165.070670][T13091] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 165.239892][ T3728] EXT4-fs (loop3): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 165.271782][T13097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.282064][T13097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.292430][T13100] loop3: detected capacity change from 0 to 2048 [ 165.302505][T13100] EXT4-fs (loop3): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.319619][T13100] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3718: bg 0: block 120: padding at end of block bitmap is not set [ 165.428506][T13107] loop4: detected capacity change from 0 to 1024 [ 165.440193][T13109] serio: Serial port ptm0 [ 165.448070][T13107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.460272][T13107] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.473584][T13107] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.3719: lblock 0 mapped to illegal pblock 0 (length 1) [ 165.487459][T13107] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 165.499864][T13107] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.499864][T13107] [ 165.511374][T13107] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.3719: lblock 3 mapped to illegal pblock 3 (length 3) [ 165.525997][T13107] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 165.538431][T13107] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.538431][T13107] [ 165.562152][ T51] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 4: comm kworker/u8:3: lblock 4 mapped to illegal pblock 4 (length 2) [ 165.577577][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 165.589979][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.589979][ T51] [ 165.601226][ T51] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 165.617577][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 28 [ 165.630141][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 165.630141][ T51] [ 165.639897][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 166.056751][T13123] Set syz1 is full, maxelem 65536 reached [ 166.142465][T13133] SELinux: failed to load policy [ 166.354639][T13140] loop3: detected capacity change from 0 to 4096 [ 166.361390][T13140] EXT4-fs: test_dummy_encryption option not supported [ 166.987269][T13167] loop4: detected capacity change from 0 to 2048 [ 166.996854][T13171] pim6reg1: entered promiscuous mode [ 167.002356][T13171] pim6reg1: entered allmulticast mode [ 167.033071][T13167] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3742: bg 0: block 120: padding at end of block bitmap is not set [ 167.132285][ T3388] hid_parser_main: 9 callbacks suppressed [ 167.132305][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.145518][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.152981][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.162308][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.169767][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.177361][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.184844][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.192379][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.199852][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.207346][ T3388] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 167.215454][ T3388] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 167.435057][T13213] syzkaller1: entered promiscuous mode [ 167.440584][T13213] syzkaller1: entered allmulticast mode [ 167.796411][ T29] kauditd_printk_skb: 741 callbacks suppressed [ 167.796430][ T29] audit: type=1326 audit(1757202229.695:13049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.827089][ T29] audit: type=1326 audit(1757202229.705:13050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.850950][ T29] audit: type=1326 audit(1757202229.705:13051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.874842][ T29] audit: type=1326 audit(1757202229.705:13052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.880195][T13246] loop3: detected capacity change from 0 to 2048 [ 167.898504][ T29] audit: type=1326 audit(1757202229.705:13053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.928902][ T29] audit: type=1326 audit(1757202229.705:13054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.952527][ T29] audit: type=1326 audit(1757202229.705:13055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.976217][ T29] audit: type=1326 audit(1757202229.705:13056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 167.999909][ T29] audit: type=1326 audit(1757202229.705:13057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 168.023552][ T29] audit: type=1326 audit(1757202229.705:13058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13243 comm="syz.3.3775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 168.058200][T13246] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3775: bg 0: block 120: padding at end of block bitmap is not set [ 168.133779][T13265] loop4: detected capacity change from 0 to 1024 [ 168.140833][T13265] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.155771][T13265] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 168.170789][T13265] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 168.183186][T13265] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.183186][T13265] [ 168.192849][T13265] EXT4-fs (loop4): Total free blocks count 0 [ 168.198826][T13265] EXT4-fs (loop4): Free/Dirty block details [ 168.204754][T13265] EXT4-fs (loop4): free_blocks=68451041280 [ 168.210593][T13265] EXT4-fs (loop4): dirty_blocks=80 [ 168.215724][T13265] EXT4-fs (loop4): Block reservation details [ 168.221855][T13265] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 168.237673][ T408] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 168.250099][ T408] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.250099][ T408] [ 168.296501][T13273] SELinux: failed to load policy [ 168.327470][T13275] loop4: detected capacity change from 0 to 2048 [ 168.396755][T13278] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3788: bg 0: block 120: padding at end of block bitmap is not set [ 168.657473][T13280] loop3: detected capacity change from 0 to 2048 [ 168.686610][T13280] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3789: bg 0: block 120: padding at end of block bitmap is not set [ 169.021536][T13293] random: crng reseeded on system resumption [ 169.106445][ T23] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 169.560359][T13325] random: crng reseeded on system resumption [ 169.605162][T13329] @: renamed from vlan0 (while UP) [ 169.745092][T13337] loop3: detected capacity change from 0 to 2048 [ 169.780473][T13337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3812: bg 0: block 120: padding at end of block bitmap is not set [ 170.640747][T13373] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3821'. [ 170.702935][T13385] loop4: detected capacity change from 0 to 512 [ 170.712855][T13385] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.3830: invalid block [ 170.725628][T13385] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3830: invalid indirect mapped block 4294967295 (level 1) [ 170.742433][T13385] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3830: invalid indirect mapped block 4294967295 (level 1) [ 170.771134][T13385] EXT4-fs (loop4): 2 truncates cleaned up [ 171.606609][T13411] syzkaller1: entered promiscuous mode [ 171.612194][T13411] syzkaller1: entered allmulticast mode [ 171.735703][T13425] netlink: 'syz.4.3842': attribute type 13 has an invalid length. [ 171.749476][T13425] gretap0: refused to change device tx_queue_len [ 171.757396][T13425] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 172.125219][T13452] rdma_rxe: rxe_newlink: failed to add syz_tun [ 172.142707][T13454] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3858'. [ 172.529216][T13493] netlink: 'syz.8.3876': attribute type 39 has an invalid length. [ 172.645109][T13503] hub 9-0:1.0: USB hub found [ 172.649879][T13503] hub 9-0:1.0: 8 ports detected [ 172.810244][ T10] hid_parser_main: 48 callbacks suppressed [ 172.810267][ T10] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 172.823653][ T10] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 172.831099][ T10] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 172.854171][ T10] hid-generic 0000:0004:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 172.873562][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 172.873588][ T29] audit: type=1326 audit(1757202234.775:13505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 172.903471][ T29] audit: type=1326 audit(1757202234.775:13506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 172.929817][ T29] audit: type=1326 audit(1757202234.795:13507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 172.953635][ T29] audit: type=1326 audit(1757202234.795:13508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 172.977245][ T29] audit: type=1326 audit(1757202234.795:13509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 173.000883][ T29] audit: type=1326 audit(1757202234.795:13510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 173.024560][ T29] audit: type=1326 audit(1757202234.795:13511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 173.048165][ T29] audit: type=1326 audit(1757202234.795:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 173.071800][ T29] audit: type=1326 audit(1757202234.795:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 173.095549][ T29] audit: type=1326 audit(1757202234.795:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13516 comm="syz.4.3884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 173.336768][T13543] tipc: Started in network mode [ 173.341963][T13543] tipc: Node identity f2cfd319166a, cluster identity 4711 [ 173.349249][T13543] tipc: Enabled bearer , priority 0 [ 173.362344][T13543] tipc: Disabling bearer [ 173.622920][T13561] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 173.687514][T13569] syzkaller1: entered promiscuous mode [ 173.693194][T13569] syzkaller1: entered allmulticast mode [ 173.702212][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3911'. [ 173.711349][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3911'. [ 173.720363][T13571] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3911'. [ 173.729675][T13571] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3911'. [ 173.738771][T13571] netlink: 'syz.7.3911': attribute type 6 has an invalid length. [ 173.921922][T13585] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.119917][T13608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3926'. [ 174.300815][T13624] netlink: 'syz.0.3936': attribute type 30 has an invalid length. [ 174.479341][T13644] syzkaller0: entered promiscuous mode [ 174.485071][T13644] syzkaller0: entered allmulticast mode [ 174.695079][T13668] syzkaller0: entered promiscuous mode [ 174.700623][T13668] syzkaller0: entered allmulticast mode [ 174.980418][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3959'. [ 174.989363][T13679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3959'. [ 176.315301][T13734] netlink: 'syz.3.3984': attribute type 5 has an invalid length. [ 176.337152][T13736] SELinux: ebitmap: truncated map [ 176.354106][T13736] SELinux: failed to load policy [ 177.103148][T13771] syzkaller0: entered promiscuous mode [ 177.108736][T13771] syzkaller0: entered allmulticast mode [ 177.138913][T13773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 177.201209][T13776] pim6reg1: entered promiscuous mode [ 177.206611][T13776] pim6reg1: entered allmulticast mode [ 177.471061][T13767] Set syz1 is full, maxelem 65536 reached [ 177.951898][T13813] pim6reg1: entered promiscuous mode [ 177.957433][T13813] pim6reg1: entered allmulticast mode [ 178.026245][T13817] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.033523][T13817] IPv6: NLM_F_CREATE should be set when creating new route [ 178.409027][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 178.409063][ T29] audit: type=1326 audit(1757202240.305:13889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.442002][ T29] audit: type=1326 audit(1757202240.345:13890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.465721][ T29] audit: type=1326 audit(1757202240.345:13891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.489399][ T29] audit: type=1326 audit(1757202240.345:13892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.513022][ T29] audit: type=1326 audit(1757202240.345:13893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.536793][ T29] audit: type=1326 audit(1757202240.345:13894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.560516][ T29] audit: type=1326 audit(1757202240.345:13895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.584228][ T29] audit: type=1326 audit(1757202240.345:13896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.607754][ T29] audit: type=1326 audit(1757202240.345:13897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 178.631687][ T29] audit: type=1326 audit(1757202240.345:13898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13839 comm="syz.8.4030" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 179.322407][ T3388] kernel write not supported for file bpf-prog (pid: 3388 comm: kworker/0:3) [ 180.129589][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4075'. [ 180.687560][T13988] veth0_to_team: entered promiscuous mode [ 181.513245][T14046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4124'. [ 181.748628][T14058] netlink: 'syz.0.4129': attribute type 5 has an invalid length. [ 182.035537][T14067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14067 comm=syz.3.4132 [ 182.477315][T14076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4136'. [ 182.575530][T14083] Set syz1 is full, maxelem 65536 reached [ 182.653289][T14087] netlink: 'syz.7.4141': attribute type 5 has an invalid length. [ 182.694323][T14096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 182.700922][T14096] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 182.708498][T14096] vhci_hcd vhci_hcd.0: Device attached [ 182.728094][T14096] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8) [ 182.734709][T14096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 182.742359][T14096] vhci_hcd vhci_hcd.0: Device attached [ 182.755002][T14101] vhci_hcd: connection closed [ 182.755268][ T408] vhci_hcd: stop threads [ 182.764316][ T408] vhci_hcd: release socket [ 182.768795][ T408] vhci_hcd: disconnect device [ 182.774338][T14097] vhci_hcd: connection closed [ 182.775241][ T408] vhci_hcd: stop threads [ 182.784347][ T408] vhci_hcd: release socket [ 182.788968][ T408] vhci_hcd: disconnect device [ 182.881612][T14110] rtc_cmos 00:00: Alarms can be up to one day in the future [ 182.898272][T14112] vlan2: entered allmulticast mode [ 182.903614][T14112] bridge_slave_0: entered allmulticast mode [ 183.024013][T14128] netlink: 'syz.7.4158': attribute type 298 has an invalid length. [ 183.336657][T14144] SELinux: failed to load policy [ 183.454760][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 183.454779][ T29] audit: type=1326 audit(1757202245.355:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.485559][ T29] audit: type=1326 audit(1757202245.355:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.509335][ T29] audit: type=1326 audit(1757202245.355:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.533033][ T29] audit: type=1326 audit(1757202245.355:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.556831][ T29] audit: type=1326 audit(1757202245.355:14374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.580493][ T29] audit: type=1326 audit(1757202245.355:14375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.604178][ T29] audit: type=1326 audit(1757202245.355:14376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.627875][ T29] audit: type=1326 audit(1757202245.355:14377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.651574][ T29] audit: type=1326 audit(1757202245.355:14378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 183.675224][ T29] audit: type=1326 audit(1757202245.355:14379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14156 comm="syz.4.4171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 185.030214][T14226] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 187.114010][T14310] syzkaller1: entered promiscuous mode [ 187.119555][T14310] syzkaller1: entered allmulticast mode [ 187.269961][T14319] syzkaller0: refused to change device tx_queue_len [ 187.444349][T14334] SELinux: failed to load policy [ 188.175341][T14376] lo speed is unknown, defaulting to 1000 [ 188.182336][T14376] vxcan1 speed is unknown, defaulting to 1000 [ 188.638621][T14395] veth0_to_team: entered promiscuous mode [ 188.774463][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 188.774531][ T29] audit: type=1326 audit(1757202250.675:14735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.808725][ T29] audit: type=1326 audit(1757202250.715:14736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.832488][ T29] audit: type=1326 audit(1757202250.715:14737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.856393][ T29] audit: type=1326 audit(1757202250.715:14738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.880225][ T29] audit: type=1326 audit(1757202250.715:14739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.903945][ T29] audit: type=1326 audit(1757202250.715:14740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.927654][ T29] audit: type=1326 audit(1757202250.715:14741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.951255][ T29] audit: type=1326 audit(1757202250.715:14742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.974855][ T29] audit: type=1326 audit(1757202250.715:14743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 188.998559][ T29] audit: type=1326 audit(1757202250.715:14744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14406 comm="syz.0.4278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 189.276648][T14419] SELinux: failed to load policy [ 189.317851][T14423] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4285'. [ 189.327839][T14423] netem: change failed [ 189.490740][T14440] pim6reg1: entered promiscuous mode [ 189.496296][T14440] pim6reg1: entered allmulticast mode [ 190.209955][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.217491][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.225078][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.232744][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.240159][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.247613][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.255769][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.264004][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.271460][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.278860][ T3395] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 190.287417][ T3395] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 190.317080][T14509] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4324'. [ 190.522016][T14520] ALSA: seq fatal error: cannot create timer (-22) [ 191.383927][T14557] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4345'. [ 191.766267][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4349'. [ 192.288415][T14586] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 192.392724][T14594] netlink: 'syz.4.4358': attribute type 1 has an invalid length. [ 192.414666][T14594] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 192.427101][T14594] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 192.437578][T14594] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 192.450119][T14596] syzkaller0: refused to change device tx_queue_len [ 192.559376][T14607] SELinux: failed to load policy [ 192.594075][T14611] veth0_vlan: entered allmulticast mode [ 192.603027][T14611] ªªªªªª: renamed from vlan0 [ 192.664859][T14618] pim6reg1: entered promiscuous mode [ 192.670319][T14618] pim6reg1: entered allmulticast mode [ 192.725442][T14624] netlink: 332 bytes leftover after parsing attributes in process `syz.3.4373'. [ 192.734676][T14624] netlink: 'syz.3.4373': attribute type 9 has an invalid length. [ 192.742483][T14624] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4373'. [ 192.751669][T14624] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4373'. [ 192.773383][T14626] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 192.930018][T14629] SELinux: failed to load policy [ 194.293529][T14724] syzkaller0: entered promiscuous mode [ 194.299193][T14724] syzkaller0: entered allmulticast mode [ 194.549777][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 194.549794][ T29] audit: type=1400 audit(1757202256.445:15005): avc: denied { ioctl } for pid=14772 comm="syz.7.4435" path="socket:[44072]" dev="sockfs" ino=44072 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 194.564357][T14773] syzkaller0: entered promiscuous mode [ 194.586660][T14773] syzkaller0: entered allmulticast mode [ 194.659773][T14780] syzkaller0: entered promiscuous mode [ 194.665434][T14780] syzkaller0: entered allmulticast mode [ 194.674219][T14783] sd 0:0:1:0: device reset [ 195.028670][T14797] 9pnet_fd: Insufficient options for proto=fd [ 195.330302][ T29] audit: type=1326 audit(1757202257.225:15006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.354970][ T29] audit: type=1326 audit(1757202257.225:15007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.378680][ T29] audit: type=1326 audit(1757202257.225:15008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.402328][ T29] audit: type=1326 audit(1757202257.225:15009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.425996][ T29] audit: type=1326 audit(1757202257.225:15010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.449620][ T29] audit: type=1326 audit(1757202257.225:15011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.473215][ T29] audit: type=1326 audit(1757202257.225:15012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.496817][ T29] audit: type=1326 audit(1757202257.225:15013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.520489][ T29] audit: type=1326 audit(1757202257.225:15014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.4.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c5048ebe9 code=0x7ffc0000 [ 195.617294][T14832] IPv6: Can't replace route, no match found [ 195.788130][T14845] sd 0:0:1:0: device reset [ 196.153346][T14882] pim6reg1: entered promiscuous mode [ 196.158779][T14882] pim6reg1: entered allmulticast mode [ 196.247687][T14899] pim6reg1: entered promiscuous mode [ 196.253173][T14899] pim6reg1: entered allmulticast mode [ 196.319886][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4502'. [ 196.433341][T14924] tipc: Enabling of bearer rejected, failed to enable media [ 196.514059][T14940] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4508'. [ 196.585720][T14946] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.805684][T14971] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 197.729620][T15017] veth0: entered promiscuous mode [ 197.735353][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4543'. [ 197.894531][T15026] IPv4: Oversized IP packet from 127.202.26.0 [ 198.279521][T15057] veth0: entered promiscuous mode [ 198.286291][T15057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4563'. [ 198.584123][T15084] SELinux: failed to load policy [ 198.734736][T15107] can0: slcan on ttyS3. [ 198.771618][T15111] vhci_hcd: invalid port number 96 [ 198.776832][T15111] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 198.784167][T15106] can0 (unregistered): slcan off ttyS3. [ 199.058372][T15137] SELinux: failed to load policy [ 199.501983][T15166] SELinux: failed to load policy [ 199.717667][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4614'. [ 200.004179][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4624'. [ 200.038073][T15196] can0: slcan on ttyS3. [ 200.051714][ T29] kauditd_printk_skb: 259 callbacks suppressed [ 200.051736][ T29] audit: type=1326 audit(1757202261.935:15274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.3.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 200.082128][ T29] audit: type=1326 audit(1757202261.935:15275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.3.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 200.105838][ T29] audit: type=1326 audit(1757202261.935:15276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.3.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 200.129541][ T29] audit: type=1326 audit(1757202261.935:15277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.3.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 200.153170][ T29] audit: type=1326 audit(1757202261.945:15278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.3.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 200.177199][ T29] audit: type=1326 audit(1757202261.945:15279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15195 comm="syz.3.4626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663e67ebe9 code=0x7ffc0000 [ 200.204296][ T29] audit: type=1326 audit(1757202262.105:15280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.7.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 200.228548][ T29] audit: type=1326 audit(1757202262.105:15281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.7.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 200.252211][ T29] audit: type=1326 audit(1757202262.105:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.7.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 200.275891][ T29] audit: type=1326 audit(1757202262.105:15283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15204 comm="syz.7.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5cb3bebe9 code=0x7ffc0000 [ 200.299939][T15195] can0 (unregistered): slcan off ttyS3. [ 200.334665][T15215] netlink: 664 bytes leftover after parsing attributes in process `syz.8.4634'. [ 200.388577][T15221] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4637'. [ 200.397770][T15221] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4637'. [ 200.408121][T15221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4637'. [ 200.513971][T15236] SELinux: security policydb version 17 (MLS) not backwards compatible [ 200.522815][T15236] SELinux: failed to load policy [ 200.777681][T15253] syzkaller0: entered promiscuous mode [ 200.783296][T15253] syzkaller0: entered allmulticast mode [ 200.942561][T15260] syzkaller0: refused to change device tx_queue_len [ 201.185966][T15270] veth0_to_team: entered promiscuous mode [ 201.462030][ T3388] hid_parser_main: 18 callbacks suppressed [ 201.462052][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x1 [ 201.475360][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.482880][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.490435][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.497879][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.505432][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.512917][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x4 [ 201.520375][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.527831][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.535297][ T3388] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 201.543324][ T3388] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz0] on syz0 [ 201.594924][T15286] hub 8-0:1.0: USB hub found [ 201.599719][T15286] hub 8-0:1.0: 8 ports detected [ 203.258807][T15365] sd 0:0:1:0: device reset [ 203.885279][T15397] serio: Serial port ttyS3 [ 203.916109][T15401] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 203.927013][T15400] IPVS: stopping master sync thread 15401 ... [ 203.957110][T15404] __nla_validate_parse: 1 callbacks suppressed [ 203.957128][T15404] netlink: 14593 bytes leftover after parsing attributes in process `syz.8.4717'. [ 204.711059][T15453] Set syz1 is full, maxelem 65536 reached [ 204.797385][T15462] netlink: 'syz.0.4742': attribute type 7 has an invalid length. [ 204.805227][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4742'. [ 204.951220][T15471] random: crng reseeded on system resumption [ 204.963170][T15471] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 204.998975][T15476] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=15476 comm=syz.8.4748 [ 205.013961][T15476] netlink: 'syz.8.4748': attribute type 10 has an invalid length. [ 205.024186][T15476] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 205.405850][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 205.405929][ T29] audit: type=1326 audit(1757202267.305:15572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.436848][ T29] audit: type=1326 audit(1757202267.305:15573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.460538][ T29] audit: type=1326 audit(1757202267.305:15574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.484148][ T29] audit: type=1326 audit(1757202267.305:15575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.507767][ T29] audit: type=1326 audit(1757202267.305:15576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.512632][T15504] bridge_slave_0: left allmulticast mode [ 205.531394][ T29] audit: type=1326 audit(1757202267.305:15577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.537045][T15504] bridge_slave_0: left promiscuous mode [ 205.560622][ T29] audit: type=1326 audit(1757202267.305:15578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.566496][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.589948][ T29] audit: type=1326 audit(1757202267.305:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.620583][ T29] audit: type=1326 audit(1757202267.305:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.644195][ T29] audit: type=1326 audit(1757202267.305:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15500 comm="syz.8.4758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b788ebe9 code=0x7ffc0000 [ 205.669892][T15504] bridge_slave_1: left allmulticast mode [ 205.676007][T15504] bridge_slave_1: left promiscuous mode [ 205.681745][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.704595][T15507] IPv6: Can't replace route, no match found [ 205.713614][T15504] bond0: (slave bond_slave_0): Releasing backup interface [ 205.723675][T15505] netlink: 'syz.4.4759': attribute type 10 has an invalid length. [ 205.731788][T15505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4759'. [ 205.741726][T15504] bond0: (slave bond_slave_1): Releasing backup interface [ 205.750787][T15504] team0: Port device team_slave_0 removed [ 205.758190][T15504] team0: Port device team_slave_1 removed [ 205.770016][T15505] veth1_vlan: left promiscuous mode [ 205.778609][T15505] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 206.090631][T15533] lo speed is unknown, defaulting to 1000 [ 206.097278][T15533] vxcan1 speed is unknown, defaulting to 1000 [ 206.213175][ T37] bond0 (unregistering): Released all slaves [ 206.221899][ T37] bond1 (unregistering): Released all slaves [ 206.264207][ T37] tipc: Left network mode [ 206.280212][T15533] chnl_net:caif_netlink_parms(): no params data found [ 206.326393][ T37] hsr_slave_0: left promiscuous mode [ 206.332857][ T37] hsr_slave_1: left promiscuous mode [ 206.416334][T15533] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.423540][T15533] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.434433][T15533] bridge_slave_0: entered allmulticast mode [ 206.441198][T15533] bridge_slave_0: entered promiscuous mode [ 206.448938][T15533] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.456134][T15533] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.463501][T15533] bridge_slave_1: entered allmulticast mode [ 206.470234][T15533] bridge_slave_1: entered promiscuous mode [ 206.490036][T15533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.501479][T15533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.524311][T15533] team0: Port device team_slave_0 added [ 206.531410][T15533] team0: Port device team_slave_1 added [ 206.549801][T15533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.556864][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.582869][T15533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.595302][T15533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.602364][T15533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.628339][T15533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.658401][T15533] hsr_slave_0: entered promiscuous mode [ 206.665660][T15533] hsr_slave_1: entered promiscuous mode [ 206.671818][T15533] debugfs: 'hsr0' already exists in 'hsr' [ 206.677587][T15533] Cannot create hsr debugfs directory [ 206.904758][T15587] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4792'. [ 206.923546][T15591] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 206.972450][T15600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4796'. [ 207.088037][T15533] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 207.113158][T15533] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.132473][T15533] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.153609][T15533] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.223711][T15625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=34 sclass=netlink_audit_socket pid=15625 comm=syz.3.4803 [ 207.238036][T15625] netlink: 'syz.3.4803': attribute type 10 has an invalid length. [ 207.264663][T15533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.278742][T15533] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.295133][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.302271][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.315271][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.322533][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.343414][T15533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.354012][T15533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.428590][T15533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.469106][T15648] ip6gre2: entered allmulticast mode [ 207.508153][T15533] veth0_vlan: entered promiscuous mode [ 207.516206][T15533] veth1_vlan: entered promiscuous mode [ 207.531355][T15533] veth0_macvtap: entered promiscuous mode [ 207.538739][T15533] veth1_macvtap: entered promiscuous mode [ 207.549024][T15533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.561391][T15533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.573359][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.582401][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.596994][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.614185][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.670803][ T3477] IPVS: starting estimator thread 0... [ 207.683474][T15666] random: crng reseeded on system resumption [ 207.696344][T15666] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 207.761085][T15669] IPVS: using max 2400 ests per chain, 120000 per kthread [ 207.957652][T10049] bridge0: port 1(syz_tun) entered disabled state [ 207.965967][T10049] syz_tun (unregistering): left allmulticast mode [ 207.972541][T10049] syz_tun (unregistering): left promiscuous mode [ 207.978957][T10049] bridge0: port 1(syz_tun) entered disabled state [ 208.128950][T15704] loop2: detected capacity change from 0 to 128 [ 208.138504][T15704] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 208.146431][T15704] FAT-fs (loop2): Filesystem has been set read-only [ 208.161043][T15704] syz.2.4832: attempt to access beyond end of device [ 208.161043][T15704] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 208.180144][T15704] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 208.188116][T15704] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 208.196430][T15704] syz.2.4832: attempt to access beyond end of device [ 208.196430][T15704] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 208.210046][T15704] syz.2.4832: attempt to access beyond end of device [ 208.210046][T15704] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 208.227431][T15704] syz.2.4832: attempt to access beyond end of device [ 208.227431][T15704] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 208.241419][T15704] syz.2.4832: attempt to access beyond end of device [ 208.241419][T15704] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 208.254954][T15711] syz.2.4832: attempt to access beyond end of device [ 208.254954][T15711] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 208.268313][T15711] Buffer I/O error on dev loop2, logical block 2065, async page read [ 208.276607][T15711] syz.2.4832: attempt to access beyond end of device [ 208.276607][T15711] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 208.290014][T15711] Buffer I/O error on dev loop2, logical block 2066, async page read [ 208.298497][T15711] syz.2.4832: attempt to access beyond end of device [ 208.298497][T15711] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 208.311810][T15711] Buffer I/O error on dev loop2, logical block 2067, async page read [ 208.316979][T15708] lo speed is unknown, defaulting to 1000 [ 208.320181][T15711] syz.2.4832: attempt to access beyond end of device [ 208.320181][T15711] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 208.328314][T15708] vxcan1 speed is unknown, defaulting to 1000 [ 208.339230][T15711] Buffer I/O error on dev loop2, logical block 2068, async page read [ 208.366299][T15711] syz.2.4832: attempt to access beyond end of device [ 208.366299][T15711] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 208.379729][T15711] Buffer I/O error on dev loop2, logical block 2069, async page read [ 208.388690][T15711] Buffer I/O error on dev loop2, logical block 2070, async page read [ 208.399188][T15711] Buffer I/O error on dev loop2, logical block 2071, async page read [ 208.413489][T15711] Buffer I/O error on dev loop2, logical block 2072, async page read [ 208.422342][T15703] Buffer I/O error on dev loop2, logical block 2065, async page read [ 208.432624][T15703] Buffer I/O error on dev loop2, logical block 2066, async page read [ 208.497502][T15708] chnl_net:caif_netlink_parms(): no params data found [ 208.560316][T15708] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.567525][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.574886][T15708] bridge_slave_0: entered allmulticast mode [ 208.581629][T15708] bridge_slave_0: entered promiscuous mode [ 208.588854][T15708] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.595968][T15708] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.603267][T15708] bridge_slave_1: entered allmulticast mode [ 208.609962][T15708] bridge_slave_1: entered promiscuous mode [ 208.630325][T15708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.642682][T15708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.679883][T15708] team0: Port device team_slave_0 added [ 208.688758][T15708] team0: Port device team_slave_1 added [ 208.706112][T15708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.713205][T15708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.739199][T15708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.750730][T15708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.757829][T15708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.783778][T15708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.830010][T15708] hsr_slave_0: entered promiscuous mode [ 208.837545][T15708] hsr_slave_1: entered promiscuous mode [ 208.843549][T15708] debugfs: 'hsr0' already exists in 'hsr' [ 208.849316][T15708] Cannot create hsr debugfs directory [ 209.228027][T15708] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.248625][T15708] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 209.257915][T15708] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 209.267494][T15708] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 209.319085][T15708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.332875][T15708] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.349268][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.356437][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.372514][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.379626][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.396590][T15708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.407059][T15708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.486045][T15708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.619943][T15708] veth0_vlan: entered promiscuous mode [ 209.628490][T15708] veth1_vlan: entered promiscuous mode [ 209.647845][T15708] veth0_macvtap: entered promiscuous mode [ 209.665512][T15708] veth1_macvtap: entered promiscuous mode [ 209.679508][T15708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.693077][T15708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.704864][ T147] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.717882][ T147] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.753114][ T147] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.763083][ T147] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.627160][ T147] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.686510][ T147] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.739891][ T147] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.795084][ T147] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.996073][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 210.996092][ T29] audit: type=1326 audit(1757202272.895:15981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.008805][T15960] loop2: detected capacity change from 0 to 2048 [ 211.034292][ T29] audit: type=1326 audit(1757202272.895:15982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.058042][ T29] audit: type=1326 audit(1757202272.895:15983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.081954][ T29] audit: type=1326 audit(1757202272.895:15984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.105599][ T29] audit: type=1326 audit(1757202272.895:15985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.129332][ T29] audit: type=1326 audit(1757202272.895:15986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.153054][ T29] audit: type=1326 audit(1757202272.895:15987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.176647][ T29] audit: type=1326 audit(1757202272.895:15988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.200436][ T29] audit: type=1326 audit(1757202272.895:15989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.224155][ T29] audit: type=1326 audit(1757202272.895:15990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.4878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 211.267891][T15960] EXT4-fs mount: 15 callbacks suppressed [ 211.267912][T15960] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.302986][T15960] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4878: bg 0: block 120: padding at end of block bitmap is not set [ 211.324206][ T147] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 211.352644][ T147] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 211.364241][ T147] bond0 (unregistering): Released all slaves [ 211.370996][T15976] netlink: 'syz.8.4880': attribute type 10 has an invalid length. [ 211.378860][T15976] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4880'. [ 211.418668][T15971] bond0: (slave dummy0): Releasing backup interface [ 211.469626][T15976] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 211.503528][ T147] tipc: Left network mode [ 211.572442][ T147] hsr_slave_0: left promiscuous mode [ 211.585212][ T147] hsr_slave_1: left promiscuous mode [ 211.602780][ T147] veth1_vlan: left promiscuous mode [ 211.616803][ T147] veth0_vlan: left promiscuous mode [ 211.843330][T15533] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 211.858877][T15990] tipc: Started in network mode [ 211.863827][T15990] tipc: Node identity ac14140f, cluster identity 4711 [ 211.879218][T15990] tipc: New replicast peer: 255.255.255.83 [ 211.885518][T15990] tipc: Enabled bearer , priority 10 [ 212.013392][ T147] IPVS: stop unused estimator thread 0... [ 212.037327][T16007] netlink: 'syz.7.4890': attribute type 1 has an invalid length. [ 212.045279][T16007] netlink: 'syz.7.4890': attribute type 4 has an invalid length. [ 212.053153][T16007] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4890'. [ 212.067442][T16007] netlink: 'syz.7.4890': attribute type 1 has an invalid length. [ 212.075289][T16007] netlink: 'syz.7.4890': attribute type 4 has an invalid length. [ 212.083098][T16007] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.4890'. [ 212.123035][T15997] lo speed is unknown, defaulting to 1000 [ 212.132896][ T147] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.156661][T15997] vxcan1 speed is unknown, defaulting to 1000 [ 212.239035][T15997] chnl_net:caif_netlink_parms(): no params data found [ 212.276980][T15997] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.284163][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.291794][T15997] bridge_slave_0: entered allmulticast mode [ 212.298279][T15997] bridge_slave_0: entered promiscuous mode [ 212.305146][T15997] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.312334][T15997] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.319643][T15997] bridge_slave_1: entered allmulticast mode [ 212.326249][T15997] bridge_slave_1: entered promiscuous mode [ 212.344359][T15997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.354961][T15997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.375784][T15997] team0: Port device team_slave_0 added [ 212.382560][T15997] team0: Port device team_slave_1 added [ 212.399944][T15997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.406967][T15997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.432973][T15997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.447080][T15997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.454082][T15997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.480141][T15997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.510698][T15997] hsr_slave_0: entered promiscuous mode [ 212.516835][T15997] hsr_slave_1: entered promiscuous mode [ 212.523227][T15997] debugfs: 'hsr0' already exists in 'hsr' [ 212.529055][T15997] Cannot create hsr debugfs directory [ 212.615043][T15997] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.675542][T15997] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.738334][T15997] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.785375][T15997] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.885387][T15997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 212.895695][T15997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.906403][T15997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 212.915614][T15997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.967440][T15997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.983108][T15997] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.993588][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.000858][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.008388][ T23] tipc: Node number set to 2886997007 [ 213.026035][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.033154][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.122574][T15997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.340691][T15997] veth0_vlan: entered promiscuous mode [ 213.360039][T15997] veth1_vlan: entered promiscuous mode [ 213.368202][T16089] tipc: Started in network mode [ 213.373840][T16089] tipc: Node identity 22592571c443, cluster identity 4711 [ 213.381092][T16089] tipc: Enabled bearer , priority 0 [ 213.390546][T16089] tipc: Disabling bearer [ 213.407551][T15997] veth0_macvtap: entered promiscuous mode [ 213.415667][T15997] veth1_macvtap: entered promiscuous mode [ 213.432482][T15997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.445170][T15997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.464259][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.476189][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.487545][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.497178][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.614683][T16110] sch_fq: defrate 0 ignored. [ 213.818974][T16124] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.893982][ T147] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.907023][T16124] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.944572][ T147] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.982624][T16124] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.005130][ T147] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.052602][T16124] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.113896][ T147] bridge_slave_1: left allmulticast mode [ 214.119612][ T147] bridge_slave_1: left promiscuous mode [ 214.125517][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.134926][ T147] bridge_slave_0: left allmulticast mode [ 214.140627][ T147] bridge_slave_0: left promiscuous mode [ 214.146330][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.223534][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.234623][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.244486][ T147] bond0 (unregistering): Released all slaves [ 214.301790][T16152] syzkaller0: entered promiscuous mode [ 214.307379][T16152] syzkaller0: entered allmulticast mode [ 214.321289][ T2175] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.338254][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.353632][ T147] hsr_slave_0: left promiscuous mode [ 214.359397][ T147] hsr_slave_1: left promiscuous mode [ 214.365424][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.373124][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.383353][ T147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.390792][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.404206][ T147] veth1_macvtap: left promiscuous mode [ 214.409769][ T147] veth0_macvtap: left promiscuous mode [ 214.428749][ T147] veth1_vlan: left promiscuous mode [ 214.434748][ T147] veth0_vlan: left promiscuous mode [ 214.517315][ T147] team0 (unregistering): Port device team_slave_1 removed [ 214.531482][ T147] team0 (unregistering): Port device team_slave_0 removed [ 214.594474][ T2175] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.611554][ T2175] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.689804][T16164] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4942'. [ 214.747543][T16166] tipc: Started in network mode [ 214.752635][T16166] tipc: Node identity 9e0a6a358996, cluster identity 4711 [ 214.759879][T16166] tipc: Enabled bearer , priority 0 [ 214.774226][T16166] tipc: Disabling bearer [ 214.835729][T16178] pim6reg1: entered promiscuous mode [ 214.841137][T16178] pim6reg1: entered allmulticast mode [ 215.022520][T16176] netlink: zone id is out of range [ 215.027851][T16176] netlink: zone id is out of range [ 215.033267][T16186] loop2: detected capacity change from 0 to 8192 [ 215.191120][T16209] loop2: detected capacity change from 0 to 2048 [ 215.204662][T16209] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.224741][T16209] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4963: bg 0: block 120: padding at end of block bitmap is not set [ 215.721680][T16232] veth3: entered promiscuous mode [ 215.741384][T16232] lo speed is unknown, defaulting to 1000 [ 215.748051][T16232] vxcan1 speed is unknown, defaulting to 1000 [ 215.773303][T16234] wg2: entered promiscuous mode [ 215.778238][T16234] wg2: entered allmulticast mode [ 216.056048][T15533] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 216.081130][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 216.081150][ T29] audit: type=1326 audit(1757202277.975:16297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4cf6e3d69f code=0x7ffc0000 [ 216.150613][T16256] tipc: New replicast peer: 255.255.255.255 [ 216.156787][T16256] tipc: Enabled bearer , priority 10 [ 216.181543][ T29] audit: type=1326 audit(1757202278.075:16298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4cf6e3ec77 code=0x7ffc0000 [ 216.205200][ T29] audit: type=1326 audit(1757202278.075:16299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf6e3d550 code=0x7ffc0000 [ 216.228852][ T29] audit: type=1326 audit(1757202278.075:16300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4cf6e3d84a code=0x7ffc0000 [ 216.254496][ T29] audit: type=1326 audit(1757202278.105:16301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 216.278210][ T29] audit: type=1326 audit(1757202278.105:16302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 216.346913][ T29] audit: type=1326 audit(1757202278.245:16303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 216.417329][ T29] audit: type=1326 audit(1757202278.245:16304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 216.441154][ T29] audit: type=1326 audit(1757202278.245:16305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 216.464828][ T29] audit: type=1326 audit(1757202278.275:16306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16248 comm="syz.0.4977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f4cf6e3ebe9 code=0x7ffc0000 [ 216.959448][T16304] ref_ctr increment failed for inode: 0x7d1 offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810005b3c0 [ 216.972762][T16304] ref_ctr increment failed for inode: 0x7d1 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810005b3c0 [ 216.984902][T16302] uprobe: syz.0.4996:16302 failed to unregister, leaking uprobe [ 217.082867][T16311] block device autoloading is deprecated and will be removed. [ 217.092756][T16311] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.102429][T16302] uprobe: syz.0.4996:16302 failed to unregister, leaking uprobe [ 217.113104][T16311] FAT-fs (loop13): unable to read boot sector [ 217.271065][ T23] tipc: Node number set to 396126773 [ 217.427515][T16335] tipc: Enabling of bearer rejected, failed to enable media [ 217.933971][T16366] I/O error, dev loop17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 217.944002][T16366] FAT-fs (loop17): unable to read boot sector [ 218.388306][T16395] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5038'. [ 218.411568][T16395] hsr_slave_0: left promiscuous mode [ 218.418490][T16395] hsr_slave_1: left promiscuous mode [ 218.738996][T16420] netlink: 'syz.6.5050': attribute type 4 has an invalid length. [ 219.146577][T16455] ip6gre1: entered allmulticast mode [ 219.196386][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5067'. [ 219.210113][T16463] loop2: detected capacity change from 0 to 1024 [ 219.244286][T16463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.277737][T16463] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.319876][T16476] tipc: Enabling of bearer rejected, failed to enable media [ 219.400316][T16477] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5068: bg 0: block 393: padding at end of block bitmap is not set [ 219.417052][T16477] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 296 with max blocks 56 with error 117 [ 219.429691][T16477] EXT4-fs (loop2): This should not happen!! Data will be lost [ 219.429691][T16477] [ 219.441438][T16477] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 219.453973][T16477] EXT4-fs (loop2): This should not happen!! Data will be lost [ 219.453973][T16477] [ 219.463696][T16477] EXT4-fs (loop2): Total free blocks count 0 [ 219.469754][T16477] EXT4-fs (loop2): Free/Dirty block details [ 219.475693][T16477] EXT4-fs (loop2): free_blocks=0 [ 219.480647][T16477] EXT4-fs (loop2): dirty_blocks=16 [ 219.485792][T16477] EXT4-fs (loop2): Block reservation details [ 220.563327][T16509] pimreg: entered allmulticast mode [ 220.571716][T16509] pimreg: left allmulticast mode [ 220.818993][T16519] netlink: 'syz.2.5088': attribute type 13 has an invalid length. [ 220.951645][T16519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.059328][T16533] random: crng reseeded on system resumption [ 221.129567][T16539] ªªªªªª: renamed from vlan0 (while UP) [ 221.142226][T16541] netlink: 'syz.2.5097': attribute type 30 has an invalid length. [ 221.239704][T16555] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=16555 comm=syz.8.5103 [ 221.307883][T16569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16569 comm=syz.8.5108 [ 221.320494][T16569] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16569 comm=syz.8.5108 [ 221.366922][T16575] pimreg: entered allmulticast mode [ 221.375365][T16575] pimreg: left allmulticast mode [ 221.435812][T16584] veth0_vlan: entered allmulticast mode [ 221.468834][T16584] veth0_vlan: left promiscuous mode [ 221.485266][T16584] veth0_vlan: entered promiscuous mode [ 221.619305][T16599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5122'. [ 221.628980][T16599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5122'. [ 221.714378][T16615] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5128'. [ 221.728814][T16617] netlink: 'syz.0.5129': attribute type 4 has an invalid length. [ 221.743169][T16617] netlink: 'syz.0.5129': attribute type 4 has an invalid length. [ 222.177394][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 222.177412][ T29] audit: type=1326 audit(1757202284.075:16664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9426ebe9 code=0x7ffc0000 [ 222.219180][ T29] audit: type=1326 audit(1757202284.115:16665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9426ebe9 code=0x7ffc0000 [ 222.242993][ T29] audit: type=1326 audit(1757202284.115:16666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c9426d550 code=0x7ffc0000 [ 222.266864][ T29] audit: type=1326 audit(1757202284.115:16667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9426ebe9 code=0x7ffc0000 [ 222.290628][ T29] audit: type=1326 audit(1757202284.115:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9426ebe9 code=0x7ffc0000 [ 222.314387][ T29] audit: type=1326 audit(1757202284.115:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f4c9426ebe9 code=0x7ffc0000 [ 222.338002][ T29] audit: type=1326 audit(1757202284.115:16670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9426ebe9 code=0x7ffc0000 [ 222.361688][ T29] audit: type=1326 audit(1757202284.115:16671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16648 comm="syz.6.5143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c9426ebe9 code=0x7ffc0000 [ 222.478685][ T29] audit: type=1326 audit(1757202284.375:16672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.2.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 222.493305][T16662] loop2: detected capacity change from 0 to 2048 [ 222.505964][ T29] audit: type=1326 audit(1757202284.375:16673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16661 comm="syz.2.5148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe75c7debe9 code=0x7ffc0000 [ 222.543689][T16662] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.560681][T16662] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5148: bg 0: block 120: padding at end of block bitmap is not set [ 222.792226][T16685] 9pnet_fd: Insufficient options for proto=fd [ 223.065775][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9f3800: rx timeout, send abort [ 223.074072][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9f3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 223.128369][T16696] lo speed is unknown, defaulting to 1000 [ 223.135932][T16708] veth1_macvtap: left promiscuous mode [ 223.150343][T16708] macsec0: entered promiscuous mode [ 223.159577][T16696] vxcan1 speed is unknown, defaulting to 1000 [ 223.195799][T16713] syz_tun: entered allmulticast mode [ 223.205415][T16713] dvmrp8: entered allmulticast mode [ 223.213947][T16713] syz_tun: left allmulticast mode [ 223.219111][T16713] dvmrp8: left allmulticast mode [ 223.240477][T16717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5170'. [ 223.278062][T16719] tipc: Enabling of bearer rejected, failed to enable media [ 223.303616][T16696] chnl_net:caif_netlink_parms(): no params data found [ 223.333701][T15533] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 223.384598][T16734] SELinux: failed to load policy [ 223.390457][T16696] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.397722][T16696] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.405462][T16696] bridge_slave_0: entered allmulticast mode [ 223.412772][T16696] bridge_slave_0: entered promiscuous mode [ 223.420457][T16696] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.427672][T16696] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.435187][T16696] bridge_slave_1: entered allmulticast mode [ 223.441826][T16696] bridge_slave_1: entered promiscuous mode [ 223.473447][T16696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.496818][T16696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.516619][T16741] loop2: detected capacity change from 0 to 1024 [ 223.526911][T16696] team0: Port device team_slave_0 added [ 223.534430][T16696] team0: Port device team_slave_1 added [ 223.540602][T16741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.557337][T16741] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm GPL: Allocating blocks 385-513 which overlap fs metadata [ 223.572139][T16696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.574938][T16741] EXT4-fs (loop2): pa ffff888107283070: logic 16, phys. 129, len 24 [ 223.579123][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.587129][T16741] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 223.613179][T16696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.615889][T16696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.640741][T16696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.666778][T16696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.724645][T16696] hsr_slave_0: entered promiscuous mode [ 223.734016][T15533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.735294][T16696] hsr_slave_1: entered promiscuous mode [ 223.749254][T16696] debugfs: 'hsr0' already exists in 'hsr' [ 223.755038][T16696] Cannot create hsr debugfs directory [ 223.872470][T16758] loop2: detected capacity change from 0 to 2048 [ 223.893472][T16758] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.947772][T16758] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5183: bg 0: block 120: padding at end of block bitmap is not set [ 224.069807][T16696] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 224.087157][T16696] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 224.099002][T16696] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 224.107990][T16696] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 224.154472][T16696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.167890][T16696] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.179965][ T2175] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.187158][ T2175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.208939][T16696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.219520][T16696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.233285][ T2175] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.240385][ T2175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.309964][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5185'. [ 224.319188][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5185'. [ 224.337661][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5185'. [ 224.346950][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5185'. [ 224.362625][T16696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.390034][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5185'. [ 224.399225][T16776] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5185'. [ 224.570608][T16696] veth0_vlan: entered promiscuous mode [ 224.591888][T16696] veth1_vlan: entered promiscuous mode [ 224.621746][T16696] veth0_macvtap: entered promiscuous mode [ 224.642132][T16696] veth1_macvtap: entered promiscuous mode [ 224.661663][T16696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.685636][T16696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.711306][ T408] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.721113][T15533] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 224.739787][ T408] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.784004][ T408] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.807004][ T408] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.822665][T16803] netlink: 830 bytes leftover after parsing attributes in process `syz.8.5189'. [ 225.066533][T16828] loop2: detected capacity change from 0 to 164 [ 225.090093][T16828] Unable to read rock-ridge attributes [ 225.119947][T16828] Unable to read rock-ridge attributes [ 225.129589][T16828] veth0_to_team: entered promiscuous mode [ 225.229606][T16843] netlink: 'syz.8.5205': attribute type 1 has an invalid length. [ 225.266075][T16843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 225.334265][T16847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.392378][T16847] bond1: (slave batadv0): making interface the new active one [ 225.412803][T16847] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 225.448802][T16856] veth0: entered promiscuous mode [ 225.468004][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5211'. [ 225.512007][T16860] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5213'. [ 225.534019][T16861] tipc: Enabled bearer , priority 0 [ 225.562037][T16861] tipc: Disabling bearer [ 225.694246][T16870] loop2: detected capacity change from 0 to 1024 [ 225.746694][T16870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.852198][T15533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.037380][T16880] syz_tun: entered allmulticast mode [ 226.074558][T16880] dvmrp8: entered allmulticast mode [ 226.095818][T16880] syz_tun: left allmulticast mode [ 226.101928][T16880] dvmrp8: left allmulticast mode [ 226.178958][T16889] loop2: detected capacity change from 0 to 512 [ 226.247474][T16889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.261076][T16889] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.525541][T15533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.544414][T16921] IPv6: Can't replace route, no match found [ 226.730313][ T3395] hid_parser_main: 28 callbacks suppressed [ 226.730329][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 226.743942][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 226.751738][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.759390][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.767141][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.774910][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.782718][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.790453][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.798223][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.805918][ T3395] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 226.814164][ T3395] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 226.976725][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5248'. [ 227.002174][T16946] bridge_slave_0: left allmulticast mode [ 227.007912][T16946] bridge_slave_0: left promiscuous mode [ 227.013714][T16946] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.024139][T16946] bridge_slave_1: left allmulticast mode [ 227.029801][T16946] bridge_slave_1: left promiscuous mode [ 227.035523][T16946] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.045170][T16946] bond0: (slave bond_slave_0): Releasing backup interface [ 227.055690][T16946] bond0: (slave bond_slave_1): Releasing backup interface [ 227.072461][T16946] team0: Port device team_slave_0 removed [ 227.084200][T16946] team0: Port device team_slave_1 removed [ 227.090761][T16946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.098389][T16946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.107949][T16946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.115388][T16946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.152005][T16949] wg2: entered promiscuous mode [ 227.156934][T16949] wg2: entered allmulticast mode [ 227.220190][T16955] tipc: Enabled bearer , priority 10 [ 227.309351][T16962] netlink: 'syz.8.5255': attribute type 10 has an invalid length. [ 227.324561][T16961] bond1: (slave batadv0): Releasing active interface [ 227.344207][T16964] IPv4: Oversized IP packet from 127.202.26.0 [ 227.351052][T16962] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 227.457208][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 227.457227][ T29] audit: type=1326 audit(1757202289.355:16953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.506979][ T29] audit: type=1326 audit(1757202289.375:16954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.530696][ T29] audit: type=1326 audit(1757202289.375:16955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.554296][ T29] audit: type=1326 audit(1757202289.375:16956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.578112][ T29] audit: type=1326 audit(1757202289.375:16957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.601731][ T29] audit: type=1326 audit(1757202289.375:16958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.625478][ T29] audit: type=1326 audit(1757202289.375:16959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.649480][ T29] audit: type=1326 audit(1757202289.375:16960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.673378][ T29] audit: type=1326 audit(1757202289.375:16961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 227.697104][ T29] audit: type=1326 audit(1757202289.375:16962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16973 comm="syz.9.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a6644ebe9 code=0x7ffc0000 [ 228.335306][ T1047] tipc: Node number set to 3836072729 [ 228.604724][T17029] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.855028][T17029] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.956602][T17029] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.982964][T17039] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.019130][T17029] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.054451][T17039] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.136052][ T147] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.152117][ T147] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.160898][ T147] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.169269][ T147] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.179353][T17039] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.229049][T17039] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.251808][T17062] netlink: 'syz.9.5292': attribute type 4 has an invalid length. [ 229.265135][T17062] netlink: 'syz.9.5292': attribute type 4 has an invalid length. [ 229.267595][T17064] vlan0: entered allmulticast mode [ 229.297727][ T408] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.310480][ T408] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.322482][ T147] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.336109][ T147] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.397373][T17074] netlink: 'syz.8.5298': attribute type 4 has an invalid length. [ 229.408425][T17074] netlink: 'syz.8.5298': attribute type 4 has an invalid length. [ 229.677921][T17113] lo speed is unknown, defaulting to 1000 [ 229.685162][T17113] vxcan1 speed is unknown, defaulting to 1000 [ 230.234746][T17123] netlink: 'syz.0.5320': attribute type 3 has an invalid length. [ 230.391954][T17143] netlink: 'syz.0.5326': attribute type 4 has an invalid length. [ 230.399745][T17143] __nla_validate_parse: 13 callbacks suppressed [ 230.399766][T17143] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5326'. [ 230.530258][T17161] pim6reg1: entered promiscuous mode [ 230.535692][T17161] pim6reg1: entered allmulticast mode [ 230.829583][T17203] lo speed is unknown, defaulting to 1000 [ 230.843440][T17203] vxcan1 speed is unknown, defaulting to 1000 [ 230.915839][T17214] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5355'. [ 231.019283][T17234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5360'. [ 231.028416][T17234] tipc: Started in network mode [ 231.033334][T17234] tipc: Node identity 7, cluster identity 4711 [ 231.039566][T17234] tipc: Node number set to 7 [ 231.046883][T17237] serio: Serial port ttyS3 [ 231.128880][T17243] netlink: 'syz.2.5364': attribute type 13 has an invalid length. [ 231.209350][T17247] netlink: 'syz.8.5365': attribute type 4 has an invalid length. [ 231.260420][T17250] netlink: 'syz.8.5365': attribute type 4 has an invalid length. [ 231.284296][ T147] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.308225][ T147] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.320467][ T147] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.329805][ T147] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.445620][T17263] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5371'. [ 231.726406][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5377'. [ 231.736057][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5377'. [ 231.860361][T17289] loop2: detected capacity change from 0 to 1024 [ 231.878809][T17289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.078413][T17289] ================================================================== [ 232.086545][T17289] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 232.094580][T17289] [ 232.096910][T17289] write to 0xffff88811a1f1300 of 4 bytes by task 17300 on cpu 1: [ 232.104640][T17289] writeback_single_inode+0x14a/0x3e0 [ 232.110024][T17289] sync_inode_metadata+0x5b/0x90 [ 232.114968][T17289] generic_buffers_fsync_noflush+0xd9/0x120 [ 232.120432][T17312] veth0_to_team: entered promiscuous mode [ 232.120911][T17289] ext4_sync_file+0x1ab/0x690 [ 232.120937][T17289] vfs_fsync_range+0x10d/0x130 [ 232.136109][T17289] ext4_buffered_write_iter+0x34f/0x3c0 [ 232.141669][T17289] ext4_file_write_iter+0x383/0xf00 [ 232.146876][T17289] iter_file_splice_write+0x663/0xa60 [ 232.152263][T17289] direct_splice_actor+0x153/0x2a0 [ 232.157373][T17289] splice_direct_to_actor+0x30f/0x680 [ 232.162745][T17289] do_splice_direct+0xda/0x150 [ 232.167533][T17289] do_sendfile+0x380/0x650 [ 232.171955][T17289] __x64_sys_sendfile64+0x105/0x150 [ 232.177168][T17289] x64_sys_call+0x2bb0/0x2ff0 [ 232.181849][T17289] do_syscall_64+0xd2/0x200 [ 232.186386][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.192300][T17289] [ 232.194619][T17289] read to 0xffff88811a1f1300 of 4 bytes by task 17289 on cpu 0: [ 232.202328][T17289] vfs_fsync_range+0x9b/0x130 [ 232.207011][T17289] ext4_buffered_write_iter+0x34f/0x3c0 [ 232.212576][T17289] ext4_file_write_iter+0x383/0xf00 [ 232.217821][T17289] iter_file_splice_write+0x663/0xa60 [ 232.223191][T17289] direct_splice_actor+0x153/0x2a0 [ 232.228309][T17289] splice_direct_to_actor+0x30f/0x680 [ 232.233688][T17289] do_splice_direct+0xda/0x150 [ 232.238452][T17289] do_sendfile+0x380/0x650 [ 232.242893][T17289] __x64_sys_sendfile64+0x105/0x150 [ 232.248097][T17289] x64_sys_call+0x2bb0/0x2ff0 [ 232.252863][T17289] do_syscall_64+0xd2/0x200 [ 232.257389][T17289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.263295][T17289] [ 232.265632][T17289] value changed: 0x00000038 -> 0x00000002 [ 232.271342][T17289] [ 232.273655][T17289] Reported by Kernel Concurrency Sanitizer on: [ 232.279849][T17289] CPU: 0 UID: 0 PID: 17289 Comm: syz.2.5381 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.289705][T17289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.299762][T17289] ================================================================== [ 232.338703][T15533] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.709595][T17293] 9pnet_fd: p9_fd_create_tcp (17293): problem connecting socket to 127.0.0.1