last executing test programs: 3m17.904665236s ago: executing program 32 (id=184): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033200fe08000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2m55.812389174s ago: executing program 33 (id=401): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 2m22.870649857s ago: executing program 6 (id=1500): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 2m22.781398196s ago: executing program 6 (id=1505): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003e6000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 2m20.136954468s ago: executing program 6 (id=1547): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2m20.099808117s ago: executing program 6 (id=1548): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m20.075308277s ago: executing program 6 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 2m19.880491326s ago: executing program 6 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x20000400) sendto$inet6(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 2m19.797002486s ago: executing program 34 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x20000400) sendto$inet6(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 2m19.402302995s ago: executing program 5 (id=1571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) getpid() sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 2m19.357999695s ago: executing program 5 (id=1573): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x22020400) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0xc, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2m19.286208925s ago: executing program 5 (id=1576): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x7ffff000) 2m19.212510295s ago: executing program 5 (id=1579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x9901) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 2m19.193905564s ago: executing program 5 (id=1581): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000000880)=""/4096, 0x1000}], 0x1, 0x60, 0xffffffffffffffff}}], 0x48}, 0x0) 2m18.883000873s ago: executing program 5 (id=1589): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) io_uring_enter(r1, 0x567, 0x72, 0x0, 0x0, 0x0) 2m18.810363823s ago: executing program 35 (id=1589): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x3bc1, &(0x7f0000000780)={0x0, 0x942e, 0x10100, 0x2, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) io_uring_enter(r1, 0x567, 0x72, 0x0, 0x0, 0x0) 1m47.323332878s ago: executing program 3 (id=2434): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m46.472236156s ago: executing program 3 (id=2453): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}}}, 0x24}}, 0x805) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0xe790, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x1, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x193d80c2, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x35c8, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffffffe, 0xd, 0x66, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x6, 0xd, 0x2}}]}]}}]}, 0x478}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 1m46.450084095s ago: executing program 3 (id=2454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 1m46.431451075s ago: executing program 3 (id=2455): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x25b, &(0x7f0000000840)="$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") open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5029c2ee5e5c9d000ff8ee09e737ff0ee4110ff4117639c2eb4b78c66ee677df701905b9aafab4afaa0055a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89e000bea2a00aff571ec3199bde400"}) mkdir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) 1m46.237522725s ago: executing program 3 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xa}}}}]}, 0x4c}}, 0x0) 1m46.107112014s ago: executing program 3 (id=2459): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$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") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1, 0x0, 0x0, 0x21004}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 1m46.106642124s ago: executing program 36 (id=2459): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x451, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002d) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1, 0x0, 0x0, 0x21004}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="7dcc2c9d4eaf588822e6a9cc8eec13d9754bb76c", 0x14}], 0x1}}], 0x2, 0x0) 35.530925684s ago: executing program 9 (id=3551): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) io_uring_enter(r1, 0x47f5, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 34.782325362s ago: executing program 0 (id=3563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000140)={{0x33, @remote, 0x4e22, 0x3, 'none\x00', 0x1, 0x3, 0x2}, {@rand_addr=0x64010101, 0x4e24, 0x0, 0x4fc, 0x0, 0x7e}}, 0x44) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000024c0)=ANY=[], 0x0, 0x2b0, &(0x7f00000017c0)="$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") ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r3) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002600bdab"], 0x2c}}, 0x0) 34.718586562s ago: executing program 0 (id=3564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000028eca01882e7f716000000008c110000f4134155add17c9ef2fa1ab02d43748e1ecf578548bb8191aa90bd622aa40793a2fa63ad60a1da1fe886e0a289e850559ae5fb6092fca7fd0ee6e141ef1a32f2a47702ff6947edd1bc0474b405724c4b", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x44008a}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 34.670278292s ago: executing program 0 (id=3565): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008400000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 34.659238792s ago: executing program 9 (id=3566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000076000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) truncate(&(0x7f0000000040)='./file0\x00', 0xff8c) 34.584844971s ago: executing program 9 (id=3568): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 34.458409011s ago: executing program 9 (id=3570): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a060400) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 34.445475721s ago: executing program 9 (id=3571): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x22, &(0x7f0000000a00), 0x6}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={0x0, 0x0, r1}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000280)) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000800)=ANY=[@ANYBLOB="00fbee009fe98ed58e669ce6bc037a9d53672af0987888d0027344d49d4ac8dbc8233c0a32cd443d7aaaf7b19b5afd811ddfcf023bf7952aa4e18e04656e352e960903600515eb8f050678b21f86096de27ab07cfce980d7ad3744cc259547987b70b4a7ac068e81920b3a02e0e9ee41d498b03d209ae3df6bee574b5843a3b4f219916be226b31768bfb8231b13dd24ba63a6a1d346e54f400acc381e05841c55b266dd57d5ea9d03a2345379aa8b0fd380ced67d4aba7cd7b433c0406e780e87f91e184c47f394892b9dad64cdd4f789c93a68e3213ceac943891b4316e0f59b1aeed7c1f6d7dd036f99ec85b5973c60f596c6326e5313d2f4238245c6327952298b32de4d72e3315ebe0183942a73b4aa7ebdcd97ee8ac4dbe0"], 0xee, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000510d0000cb74d43f00f7ff000000345193c568ab0000030000"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 34.2269784s ago: executing program 9 (id=3573): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@data_err_ignore}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwritev2(r1, &(0x7f0000000580)=[{&(0x7f0000000340)="14", 0xff8c}], 0x1, 0x1000000, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="1e1c07812e6fe87a3d3a2da14139fbea5d48d734", 0x14}], 0x1, 0x5, 0x1, 0x8) 34.19428165s ago: executing program 37 (id=3573): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@data_err_ignore}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r0, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pwritev2(r1, &(0x7f0000000580)=[{&(0x7f0000000340)="14", 0xff8c}], 0x1, 0x1000000, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="1e1c07812e6fe87a3d3a2da14139fbea5d48d734", 0x14}], 0x1, 0x5, 0x1, 0x8) 33.660354518s ago: executing program 0 (id=3582): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x2a060400) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r2, r1, 0x0, 0x80000000) 33.502103698s ago: executing program 0 (id=3585): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7f, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000000)=0x9) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r4, 0x0, 0x7, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) write(r4, &(0x7f0000000140)='i', 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) read(r3, &(0x7f0000019440)=""/102391, 0x18ff7) dup2(r0, r1) 33.322638837s ago: executing program 0 (id=3588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x100000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 33.266228267s ago: executing program 38 (id=3588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x100000}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) 2.498036397s ago: executing program 1 (id=3911): mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x3, &(0x7f0000000000)=0xffff, 0x400, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = io_uring_setup(0x92e, &(0x7f0000000380)={0x0, 0xfffffffc, 0x2, 0x1, 0x244}) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x0, 0x10}, {0x0, 0x5d, 0x8000}, {0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x3}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000002080)={0x0}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = inotify_init() r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r4 = inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYRES64=r4], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.454852857s ago: executing program 2 (id=3912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000bf49000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 2.339116787s ago: executing program 1 (id=3915): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x100000001}, 0x200, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0x29, 0x2, {0x805, [{{0x2, 0x3, 0x3}, 0x80000001, 0x40, 0x7, './file0'}]}}, 0x2a) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x100010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_setup(0x57a4, &(0x7f0000000440)={0x0, 0xa11f, 0xc2, 0x2, 0x1}) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) 2.331095356s ago: executing program 2 (id=3916): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) 2.192688896s ago: executing program 1 (id=3921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.455515564s ago: executing program 4 (id=3924): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r1, 0x8, 0x0) write$binfmt_script(r4, 0x0, 0xfffffe48) 1.365513203s ago: executing program 2 (id=3925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x30ff, 0x8, '9P2000.u'}, 0x15) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000000040)='./file0\x00', 0x0) 1.128646583s ago: executing program 1 (id=3938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 1.123882343s ago: executing program 2 (id=3939): r0 = gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{}], 0x2c, 0xffffffffffbffff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) ustat(0x10, &(0x7f0000000080)) fcntl$setown(0xffffffffffffffff, 0x8, r0) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x10000, 0x2000) sendfile(0xffffffffffffffff, r2, 0x0, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x3e0000) 1.048738442s ago: executing program 7 (id=3928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000000bf49000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) 912.423752ms ago: executing program 7 (id=3929): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) truncate(0x0, 0x8fff5) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8, 0x1}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 800.684082ms ago: executing program 1 (id=3930): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x2000000, &(0x7f0000000140), 0x21, 0x4b0, &(0x7f0000000540)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) unshare(0x6060600) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 723.012851ms ago: executing program 1 (id=3931): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001000000000000000000000000ff010000000000000000000000000001000000004e2340000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000000003200000000000000000005000000ffffac14143100000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000fcffffff000000000a000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000160a0000000000000000000000000000090001007379c80c7a30000016000900020073797a30000000002c010000180a0000000b000000000000000000000900010073797a30000000000c000540000000000000000014000000100001000000000000"], 0xa0}}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000900)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x29, 0x3, 0x42}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 722.147282ms ago: executing program 7 (id=3932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x6, 'ip_vti0\x00', {0x8}, 0x7}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_setup(0x7fe7, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) poll(0x0, 0x0, 0x7) rt_sigpending(0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") 672.594831ms ago: executing program 7 (id=3933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x48f2, 0x0, 0x3, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r0, 0x3516, 0xaddf, 0x2, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x1000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 564.657121ms ago: executing program 7 (id=3934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x7b, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2db") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) 537.863011ms ago: executing program 8 (id=3936): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x21, 0x2, 0x10000000000002) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24060400) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000c00)=[{&(0x7f0000001c80)}], 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) fsopen(&(0x7f0000000000)='gfs2meta\x00', 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 493.780131ms ago: executing program 4 (id=3937): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r4 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 405.89545ms ago: executing program 8 (id=3940): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000b103000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x143ee2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002041}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @broadcast, @private, {[@rr={0x7, 0xf, 0x0, [@multicast2, @multicast1, @private=0xa012f00]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}, @end, @ra={0x94, 0x4}, @end, @cipso={0x86, 0x48, 0x0, [{0x0, 0x8, "13b7978fba81"}, {0x0, 0xe, "f65a427e45b69c7b6d41ff76"}, {0x0, 0x12, "6b7b4a1094252042261c433e64e50220"}, {0x0, 0x5, "81e511"}, {0x0, 0x8, "8d916f030847"}, {0x0, 0x5, "33c650"}, {0x0, 0x8, "bb6c67eb17fb"}]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@private}, {@local}]}]}}}}}}}, 0x0) 382.328841ms ago: executing program 4 (id=3941): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 362.5796ms ago: executing program 7 (id=3942): openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 262.71831ms ago: executing program 8 (id=3943): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d4684fb, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r5, r5, 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000000), &(0x7f0000000240)) 250.69533ms ago: executing program 2 (id=3944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r3, &(0x7f0000001b00)=[{&(0x7f00000004c0)=""/205, 0xcd}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 248.46069ms ago: executing program 4 (id=3954): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000380)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000002c0)=""/160}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 196.38905ms ago: executing program 8 (id=3945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b80)='G6\xa4\x95\x00\f\xf3oh\xd7W\xfa\xe1\xcf\x86\xc1%6\x19kr\xef\xb0\x81\xa2M\xb0\x11\x89T\xce\xacT\xb0\xf5V3x=\xbc\xac\xca\xee\x91}?\xfa!\xff\x17\xbe\xb5\r1-\x00\x00\x00\x00\x00\x00\x00\a\x98\xf8\x1b\x06\xe3m\a\xe5\x00#xx\xfc\xa6\x7f', &(0x7f0000000c00)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0xaa300, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000000)='$\x00', 0x0, r3) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000540)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', &(0x7f0000000200)='\xb8\x8b\xadTd\xdcJ\x03\xf7\n\x11x\xf5\x93Q#\xfe\xb4\xeb\xd9/\x90\xad\xc5\xd0\a\xef\x06$*\xf0\v7>\xa8`\xf1)\xec\xba\xb7\x85\a\x92I\xbb\xfe2\xa0\xc1\xb3\x13p\xa2l', 0x0) close(r2) 169.0467ms ago: executing program 4 (id=3946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40000000"], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 159.51268ms ago: executing program 8 (id=3947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000050000000800000005"], 0x48) fsmount(0xffffffffffffffff, 0x0, 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x1, 0x1, 0xc9b, 0x3, 0x8}, 0x7f, 0xf, 'id0\x00', 'timer0\x00', 0x0, 0xfffffffffffffff9, 0x9, 0xa2, 0x6}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 88.96828ms ago: executing program 4 (id=3948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) 11.40071ms ago: executing program 2 (id=3949): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) futex(0x0, 0x4, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000008c0)=0x1, 0x1) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r0, 0xfffffff3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000010c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="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", @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000280)) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=3950): r0 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x5, 0x0, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x1000, 0x0, @void, @value}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000000000)='k\xbaDF\xda;\x1a\x93\xd9\x82g\x85\x9f\x93l\x0fT\xe8#e\x96\x01W\xde\x01P\n\xb6\xe5Aql\x04\x9dkY2\xdd\xea\ft\x1c\tf\xd87\xb8)3fQ\x83\x95Hk\x9e\x9ag\x06j\x92Jy*\xd4') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 00-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.437783][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.536469][T11612] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3036'. [ 169.577153][T11614] bridge0: entered allmulticast mode [ 169.832833][T11625] syz_tun: left promiscuous mode [ 169.868098][T11625] team0 (unregistering): Port device vlan2 removed [ 170.054749][T11632] netlink: 'syz.9.3045': attribute type 1 has an invalid length. [ 170.063692][T11636] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.072538][T11636] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.081660][T11636] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.090569][T11636] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 170.122831][T11636] geneve2: entered promiscuous mode [ 170.128187][T11636] geneve2: entered allmulticast mode [ 170.136377][T11638] loop7: detected capacity change from 0 to 512 [ 170.158454][T11638] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 170.159170][T11632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.167554][T11638] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 170.220912][T11638] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 170.229881][T11648] bridge0: entered allmulticast mode [ 170.237258][T11638] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 170.251970][T11638] System zones: 0-2, 18-18, 34-34 [ 170.258689][T11638] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 170.276468][T11638] EXT4-fs (loop7): 1 truncate cleaned up [ 170.282666][T11638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.306317][T11632] IPv6: sit1: Disabled Multicast RS [ 170.322388][T11632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.330811][T11632] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 170.346523][T11632] bond1: (slave sit1): Error -95 calling set_mac_address [ 170.388724][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.564225][T11667] loop0: detected capacity change from 0 to 2048 [ 170.594753][T11667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.640357][T10228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.842897][T11686] Cannot find add_set index 0 as target [ 170.934756][ T29] kauditd_printk_skb: 1837 callbacks suppressed [ 170.934772][ T29] audit: type=1400 audit(1738207734.339:13917): avc: denied { map_create } for pid=11682 comm="syz.7.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 170.962088][ T29] audit: type=1400 audit(1738207734.339:13918): avc: denied { bpf } for pid=11682 comm="syz.7.3066" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.982945][ T29] audit: type=1400 audit(1738207734.339:13919): avc: denied { map_read map_write } for pid=11682 comm="syz.7.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.003008][ T29] audit: type=1400 audit(1738207734.339:13920): avc: denied { prog_load } for pid=11682 comm="syz.7.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.022916][ T29] audit: type=1400 audit(1738207734.339:13921): avc: denied { perfmon } for pid=11682 comm="syz.7.3066" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.044082][ T29] audit: type=1400 audit(1738207734.339:13922): avc: denied { perfmon } for pid=11682 comm="syz.7.3066" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.065197][ T29] audit: type=1400 audit(1738207734.339:13923): avc: denied { bpf } for pid=11682 comm="syz.7.3066" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.085936][ T29] audit: type=1400 audit(1738207734.339:13924): avc: denied { prog_run } for pid=11682 comm="syz.7.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 171.105456][ T29] audit: type=1400 audit(1738207734.369:13925): avc: denied { write } for pid=11682 comm="syz.7.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 171.126270][ T29] audit: type=1400 audit(1738207734.409:13926): avc: denied { read write } for pid=7712 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.171841][T11692] pim6reg1: entered promiscuous mode [ 171.177223][T11692] pim6reg1: entered allmulticast mode [ 171.221194][T11698] loop1: detected capacity change from 0 to 512 [ 171.235955][T11698] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3070: bg 0: block 248: padding at end of block bitmap is not set [ 171.263196][T11698] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.3070: Failed to acquire dquot type 1 [ 171.280988][T11698] EXT4-fs (loop1): 1 truncate cleaned up [ 171.321758][T11698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.334816][T11698] ext4 filesystem being mounted at /641/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 171.392618][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.418173][T11710] netlink: 277 bytes leftover after parsing attributes in process `syz.7.3075'. [ 171.581248][T11719] geneve0: entered allmulticast mode [ 171.606154][T11725] xt_hashlimit: max too large, truncated to 1048576 [ 171.633552][T11725] No such timeout policy "syz1" [ 171.659478][T11729] netlink: 'syz.7.3080': attribute type 21 has an invalid length. [ 171.681705][T11729] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3080'. [ 171.691745][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3080'. [ 171.757966][T11731] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 171.914263][T11745] netlink: 'syz.9.3087': attribute type 21 has an invalid length. [ 171.934458][T11745] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3087'. [ 171.943708][T11745] netlink: 'syz.9.3087': attribute type 1 has an invalid length. [ 172.261976][T11768] netlink: 'syz.9.3097': attribute type 4 has an invalid length. [ 172.464371][T11777] loop1: detected capacity change from 0 to 1024 [ 172.486013][T11777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.523667][T11777] program syz.1.3102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.560794][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.621224][T11784] netlink: 'syz.0.3104': attribute type 13 has an invalid length. [ 172.827307][T11784] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.836314][T11784] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.845272][T11784] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.854231][T11784] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.876345][T11784] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 172.885426][T11784] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 172.894595][T11784] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 172.903797][T11784] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 172.904201][T11795] loop9: detected capacity change from 0 to 128 [ 172.941307][T11795] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3107'. [ 172.970641][T11793] tipc: Enabling of bearer rejected, failed to enable media [ 172.983337][T11797] pimreg: entered allmulticast mode [ 172.993453][T11797] pimreg: left allmulticast mode [ 173.014405][T11800] netlink: 'syz.1.3109': attribute type 4 has an invalid length. [ 173.026802][T11801] netlink: 'syz.9.3107': attribute type 9 has an invalid length. [ 173.089760][T11801] loop9: detected capacity change from 0 to 512 [ 173.157662][T11808] netlink: 'syz.1.3109': attribute type 4 has an invalid length. [ 173.193977][T11801] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.230706][T11801] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.256517][T11801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.367168][T11821] loop0: detected capacity change from 0 to 512 [ 173.375285][T11821] EXT4-fs: Ignoring removed bh option [ 173.382695][T11820] loop1: detected capacity change from 0 to 512 [ 173.390290][T11821] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.422924][T11821] EXT4-fs (loop0): 1 orphan inode deleted [ 173.428684][T11821] EXT4-fs (loop0): 1 truncate cleaned up [ 173.436558][T11820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.450449][T11821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.484406][T11820] ext4 filesystem being mounted at /647/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.521843][T11816] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.569276][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.614440][T10228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.638839][T11834] netlink: 'syz.1.3117': attribute type 1 has an invalid length. [ 173.656154][T11834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.680751][T11834] IPv6: sit1: Disabled Multicast RS [ 173.683545][T11828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.695588][T11834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.707543][T11834] bond0: (slave sit1): The slave device specified does not support setting the MAC address [ 173.723267][T11828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.729361][T11834] bond0: (slave sit1): Error -95 calling set_mac_address [ 173.921158][T11851] loop7: detected capacity change from 0 to 1024 [ 173.963452][T11851] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.995207][T11851] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: inode #11: comm syz.7.3123: missing EA_INODE flag [ 174.017148][T11851] EXT4-fs (loop7): Remounting filesystem read-only [ 174.062849][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.105984][T11857] __nla_validate_parse: 1 callbacks suppressed [ 174.106001][T11857] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3125'. [ 174.108664][T11859] loop7: detected capacity change from 0 to 1024 [ 174.129738][T11859] EXT4-fs: Ignoring removed orlov option [ 174.135548][T11859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.155094][T11859] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.170670][T11863] netlink: 'syz.8.3125': attribute type 9 has an invalid length. [ 174.290323][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.418584][T11871] loop7: detected capacity change from 0 to 512 [ 174.426950][T11871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 174.441345][T11871] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 174.449600][T11871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 174.474001][T11871] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 174.483583][T11871] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features [ 174.493076][T11871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 174.501873][T11877] netlink: 'syz.8.3132': attribute type 1 has an invalid length. [ 174.514446][T11871] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80) [ 174.520998][T11877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.547577][T11877] IPv6: sit1: Disabled Multicast RS [ 174.555126][T11877] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.562513][T11877] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 174.573971][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.574268][T11877] bond2: (slave sit1): Error -95 calling set_mac_address [ 174.868903][T11894] loop0: detected capacity change from 0 to 128 [ 174.888900][T11894] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3139'. [ 174.955547][T11897] netlink: 'syz.0.3139': attribute type 9 has an invalid length. [ 174.975846][T11897] loop0: detected capacity change from 0 to 512 [ 174.995106][T11897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.009412][T11897] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.022936][T11897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.213592][T11901] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3140'. [ 175.753042][T11909] loop7: detected capacity change from 0 to 8192 [ 175.784700][T11909] loop7: p1 < > p2 < p5 > p3 p4 [ 175.805978][T11909] loop7: p3 start 83890176 is beyond EOD, truncated [ 175.812703][T11909] loop7: p4 size 16776960 extends beyond EOD, truncated [ 175.835746][T11909] loop7: p5 size 16776960 extends beyond EOD, truncated [ 175.948071][ T29] kauditd_printk_skb: 1847 callbacks suppressed [ 175.948087][ T29] audit: type=1400 audit(1738207739.349:15772): avc: denied { perfmon } for pid=11913 comm="syz.1.3145" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.975602][ T29] audit: type=1400 audit(1738207739.349:15773): avc: denied { perfmon } for pid=11913 comm="syz.1.3145" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 175.996706][ T29] audit: type=1400 audit(1738207739.349:15774): avc: denied { bpf } for pid=11913 comm="syz.1.3145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.066251][ T29] audit: type=1400 audit(1738207739.379:15775): avc: denied { map_create } for pid=11917 comm="syz.8.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 176.085699][ T29] audit: type=1400 audit(1738207739.379:15776): avc: denied { create } for pid=11917 comm="syz.8.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.106527][ T29] audit: type=1400 audit(1738207739.379:15777): avc: denied { write } for pid=11917 comm="syz.8.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.127183][ T29] audit: type=1400 audit(1738207739.379:15778): avc: denied { read } for pid=11917 comm="syz.8.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.147881][ T29] audit: type=1400 audit(1738207739.399:15779): avc: denied { mounton } for pid=11913 comm="syz.1.3145" path="/653/file0" dev="tmpfs" ino=3440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 176.170851][ T29] audit: type=1400 audit(1738207739.399:15780): avc: denied { create } for pid=11917 comm="syz.8.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 176.191691][ T29] audit: type=1400 audit(1738207739.409:15781): avc: denied { bpf } for pid=11913 comm="syz.1.3145" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 176.286313][T11928] loop7: detected capacity change from 0 to 1024 [ 176.345228][T11928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.499623][T11928] program syz.7.3149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.553685][T11936] loop9: detected capacity change from 0 to 128 [ 176.574659][T11936] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3151'. [ 176.610172][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.664171][T11940] netlink: 'syz.9.3151': attribute type 9 has an invalid length. [ 176.711218][T11940] loop9: detected capacity change from 0 to 512 [ 176.783786][T11940] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.797945][T11945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3155'. [ 176.812450][T11940] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.822989][T11945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3155'. [ 176.840278][T11940] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.865883][T11945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3155'. [ 176.876120][T11945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3155'. [ 176.982429][T11945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3155'. [ 176.995894][T11945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3155'. [ 177.329916][T11981] loop1: detected capacity change from 0 to 128 [ 177.371324][T11980] loop9: detected capacity change from 0 to 512 [ 177.386404][T11980] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.406765][T11980] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #17: comm syz.9.3170: iget: bad i_size value: -6917529027641081756 [ 177.424479][T11980] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3170: couldn't read orphan inode 17 (err -117) [ 177.437991][T11980] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.451370][T11991] netlink: 'syz.1.3172': attribute type 9 has an invalid length. [ 177.470608][T11991] loop1: detected capacity change from 0 to 512 [ 177.508978][T11991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.523693][T11991] ext4 filesystem being mounted at /657/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.534922][T11991] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.156790][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.255117][T12001] loop1: detected capacity change from 0 to 128 [ 178.310471][T12000] lo speed is unknown, defaulting to 1000 [ 178.345892][T12000] sit0 speed is unknown, defaulting to 1000 [ 178.349367][T12008] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 178.565053][T12021] loop9: detected capacity change from 0 to 512 [ 178.572742][T12023] tipc: Enabling of bearer rejected, already enabled [ 178.573833][T12021] ext4: Unknown parameter 'mask' [ 178.633122][T12024] serio: Serial port pts0 [ 178.955605][ T3376] IPVS: starting estimator thread 0... [ 178.960987][T12041] loop7: detected capacity change from 0 to 2048 [ 179.004490][T12044] hsr_slave_0: left promiscuous mode [ 179.010582][T12041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.042011][T12044] hsr_slave_1: left promiscuous mode [ 179.059297][T12041] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 179.063573][T12042] IPVS: using max 1968 ests per chain, 98400 per kthread [ 179.106127][ T4031] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 28 [ 179.106152][ T4031] EXT4-fs (loop7): This should not happen!! Data will be lost [ 179.106152][ T4031] [ 179.106172][ T4031] EXT4-fs (loop7): Total free blocks count 0 [ 179.106197][ T4031] EXT4-fs (loop7): Free/Dirty block details [ 179.106210][ T4031] EXT4-fs (loop7): free_blocks=2415919120 [ 179.106225][ T4031] EXT4-fs (loop7): dirty_blocks=16 [ 179.106235][ T4031] EXT4-fs (loop7): Block reservation details [ 179.106256][ T4031] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 179.108256][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.318253][T12055] loop1: detected capacity change from 0 to 1024 [ 179.356346][T12051] wireguard0: entered promiscuous mode [ 179.361874][T12051] wireguard0: entered allmulticast mode [ 179.397131][T12055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.411347][T12058] loop0: detected capacity change from 0 to 512 [ 179.428225][T12058] ext4: Unknown parameter 'mask' [ 179.468148][T12064] loop9: detected capacity change from 0 to 164 [ 179.480034][T12064] isofs_fill_super: root inode is not a directory. Corrupted media? [ 179.506800][T12064] lo speed is unknown, defaulting to 1000 [ 179.512940][T12064] sit0 speed is unknown, defaulting to 1000 [ 179.619318][T12064] __nla_validate_parse: 2 callbacks suppressed [ 179.619336][T12064] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3203'. [ 179.774674][T12080] loop7: detected capacity change from 0 to 2048 [ 179.793661][T12080] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿ184467440737095516150xffffffffffffffff' [ 179.969197][T12079] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.181369][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.309613][T12097] loop7: detected capacity change from 0 to 512 [ 180.950813][T12125] loop1: detected capacity change from 0 to 256 [ 180.958631][ T29] kauditd_printk_skb: 1705 callbacks suppressed [ 180.958648][ T29] audit: type=1400 audit(1738207744.359:17487): avc: denied { mounton } for pid=12124 comm="syz.1.3224" path="/664/file0" dev="tmpfs" ino=3505 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 180.991685][ T29] audit: type=1400 audit(1738207744.399:17488): avc: denied { module_request } for pid=12124 comm="syz.1.3224" kmod="nls_cp1255" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 181.046683][T12125] FAT-fs (loop1): codepage cp1255 not found [ 181.071034][ T29] audit: type=1400 audit(1738207744.399:17489): avc: denied { read write } for pid=10034 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.095792][ T29] audit: type=1400 audit(1738207744.399:17490): avc: denied { open } for pid=10034 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.120103][ T29] audit: type=1400 audit(1738207744.399:17491): avc: denied { ioctl } for pid=10034 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 181.145977][ T29] audit: type=1400 audit(1738207744.419:17492): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 181.171604][ T29] audit: type=1400 audit(1738207744.419:17493): avc: denied { recv } for pid=12042 comm="ipvs-e:33:0" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 181.198140][ T29] audit: type=1400 audit(1738207744.449:17494): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 181.223791][ T29] audit: type=1400 audit(1738207744.449:17495): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 181.250013][ T29] audit: type=1400 audit(1738207744.449:17496): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 181.333579][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3226'. [ 181.379836][T12130] geneve2: entered promiscuous mode [ 181.385153][T12130] geneve2: entered allmulticast mode [ 181.545225][T12140] loop9: detected capacity change from 0 to 128 [ 181.546236][T12125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.576889][T12140] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.607519][T12147] loop0: detected capacity change from 0 to 4096 [ 181.623455][T12140] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.706982][T12148] loop7: detected capacity change from 0 to 128 [ 181.723319][ T4031] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 181.906470][T12160] loop1: detected capacity change from 0 to 512 [ 181.917883][T12160] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.951386][T12160] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.3238: iget: bad i_size value: -6917529027641081756 [ 182.031367][T12160] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.3238: couldn't read orphan inode 17 (err -117) [ 182.067510][T12170] lo speed is unknown, defaulting to 1000 [ 182.073625][T12170] sit0 speed is unknown, defaulting to 1000 [ 182.467058][T12187] wireguard0: entered promiscuous mode [ 182.472617][T12187] wireguard0: entered allmulticast mode [ 182.615133][T12195] loop0: detected capacity change from 0 to 2048 [ 182.707140][T12198] pim6reg1: entered promiscuous mode [ 182.712637][T12198] pim6reg1: entered allmulticast mode [ 182.956590][T12213] lo speed is unknown, defaulting to 1000 [ 182.972233][T12213] sit0 speed is unknown, defaulting to 1000 [ 183.831558][T12225] wireguard0: entered promiscuous mode [ 183.837172][T12225] wireguard0: entered allmulticast mode [ 184.158258][T12229] loop0: detected capacity change from 0 to 512 [ 184.163213][T12236] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3270'. [ 184.221833][T12229] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.319482][T12229] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #17: comm syz.0.3266: iget: bad i_size value: -6917529027641081756 [ 184.346356][T12229] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.3266: couldn't read orphan inode 17 (err -117) [ 184.408230][T12252] serio: Serial port pts0 [ 184.549487][T12262] loop9: detected capacity change from 0 to 256 [ 184.621450][T12262] FAT-fs (loop9): codepage cp1255 not found [ 184.790867][T12275] ªªªªªª: renamed from vlan0 [ 185.209032][T12304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 185.241812][T12304] geneve2: entered promiscuous mode [ 185.247071][T12304] geneve2: entered allmulticast mode [ 185.266542][T12262] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.713168][T12332] $Hÿ: renamed from bond0 (while UP) [ 185.721514][T12332] $Hÿ: entered promiscuous mode [ 185.726683][T12332] bond_slave_0: entered promiscuous mode [ 185.732485][T12332] bond_slave_1: entered promiscuous mode [ 185.928027][T12341] team0: entered promiscuous mode [ 185.933306][T12341] team_slave_0: entered promiscuous mode [ 185.939709][T12341] team_slave_1: entered promiscuous mode [ 185.962897][ T29] kauditd_printk_skb: 5711 callbacks suppressed [ 185.962915][ T29] audit: type=1400 audit(1738207749.359:23208): avc: denied { setopt } for pid=12342 comm="syz.1.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.989975][ T29] audit: type=1400 audit(1738207749.359:23209): avc: denied { setopt } for pid=12342 comm="syz.1.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 185.992286][T12341] team0: left promiscuous mode [ 186.011070][ T29] audit: type=1400 audit(1738207749.359:23210): avc: denied { read write } for pid=10228 comm="syz-executor" name="loop0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.015553][T12341] team_slave_0: left promiscuous mode [ 186.015692][T12341] team_slave_1: left promiscuous mode [ 186.039010][ T29] audit: type=1400 audit(1738207749.359:23211): avc: denied { open } for pid=10228 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.073239][ T29] audit: type=1400 audit(1738207749.359:23212): avc: denied { ioctl } for pid=10228 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=735 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 186.098110][ T29] audit: type=1400 audit(1738207749.359:23213): avc: denied { write } for pid=12342 comm="syz.1.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.118727][ T29] audit: type=1400 audit(1738207749.359:23214): avc: denied { read } for pid=12342 comm="syz.1.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 186.141111][T12343] netlink: 'syz.1.3311': attribute type 10 has an invalid length. [ 186.148990][T12343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3311'. [ 186.182408][T12343] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.190709][T12343] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.198975][T12343] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.207164][T12343] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.252599][T12343] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 186.261581][ T29] audit: type=1400 audit(1738207749.369:23215): avc: denied { prog_load } for pid=12342 comm="syz.1.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 186.267399][T12343] team0: Failed to send options change via netlink (err -105) [ 186.281039][ T29] audit: type=1400 audit(1738207749.369:23216): avc: denied { bpf } for pid=12342 comm="syz.1.3311" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.288524][T12343] team0: Port device geneve1 added [ 186.314469][ T29] audit: type=1400 audit(1738207749.369:23217): avc: denied { perfmon } for pid=12342 comm="syz.1.3311" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 186.739390][T12358] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 186.925182][T12372] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3321'. [ 186.934269][T12372] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3321'. [ 186.964282][T12372] syz_tun: entered promiscuous mode [ 186.970810][T12372] syz_tun: left promiscuous mode [ 187.614912][T12419] netlink: 'syz.9.3341': attribute type 1 has an invalid length. [ 187.632103][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.648778][T12417] C: renamed from team_slave_0 [ 187.686407][T12419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.702587][T12419] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 187.714766][T12419] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 187.752606][T12426] lo speed is unknown, defaulting to 1000 [ 187.758731][T12426] sit0 speed is unknown, defaulting to 1000 [ 187.937817][T12433] loop7: detected capacity change from 0 to 512 [ 188.047097][T12433] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.272756][T12449] lo speed is unknown, defaulting to 1000 [ 188.285309][T12449] sit0 speed is unknown, defaulting to 1000 [ 188.325151][T12450] lo speed is unknown, defaulting to 1000 [ 188.337500][T12450] sit0 speed is unknown, defaulting to 1000 [ 188.636061][T12470] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3359'. [ 188.653043][T12470] loop0: detected capacity change from 0 to 1024 [ 188.665299][T12470] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.694474][T12470] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 188.705158][T12470] EXT4-fs (loop0): orphan cleanup on readonly fs [ 188.716602][T12470] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 188.726513][T12470] EXT4-fs (loop0): Remounting filesystem read-only [ 188.734953][T12470] EXT4-fs (loop0): 1 orphan inode deleted [ 188.751309][T12470] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 188.835246][T12477] loop1: detected capacity change from 0 to 2048 [ 189.263925][T12508] loop7: detected capacity change from 0 to 128 [ 189.286698][T12508] bio_check_eod: 10845 callbacks suppressed [ 189.286764][T12508] syz.7.3376: attempt to access beyond end of device [ 189.286764][T12508] loop7: rw=2049, sector=137, nr_sectors = 2 limit=128 [ 189.307373][T12509] bond0: entered promiscuous mode [ 189.312501][T12509] bond0: entered allmulticast mode [ 189.317937][T12509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.327134][T12509] bond0 (unregistering): Released all slaves [ 189.825117][T12530] loop9: detected capacity change from 0 to 512 [ 189.838899][T12530] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 189.866288][T12530] EXT4-fs (loop9): 1 truncate cleaned up [ 189.884016][T12530] EXT4-fs mount: 14 callbacks suppressed [ 189.884042][T12530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.922798][T12530] devtmpfs: Unknown parameter 'sourceebug_want_extra_isize' [ 190.024835][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.705222][T12581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.817438][T12587] loop7: detected capacity change from 0 to 512 [ 190.852700][T12589] loop1: detected capacity change from 0 to 512 [ 190.863320][T12589] EXT4-fs: Ignoring removed i_version option [ 190.869442][T12589] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.879182][T12587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.880747][T12589] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.894090][T12587] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.905469][T12589] EXT4-fs (loop1): 1 truncate cleaned up [ 190.918380][T12589] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.945796][T12589] EXT4-fs error (device loop1): ext4_check_all_de:656: inode #12: block 7: comm syz.1.3403: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=124 fake=0 [ 190.975244][ T29] kauditd_printk_skb: 1706 callbacks suppressed [ 190.975262][ T29] audit: type=1400 audit(1738207754.379:24920): avc: denied { write } for pid=12588 comm="syz.1.3403" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 190.975875][T12589] EXT4-fs error (device loop1): ext4_check_all_de:656: inode #12: block 7: comm syz.1.3403: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=124 fake=0 [ 190.981624][ T29] audit: type=1400 audit(1738207754.379:24921): avc: denied { add_name } for pid=12588 comm="syz.1.3403" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 191.064819][ T29] audit: type=1400 audit(1738207754.379:24922): avc: denied { create } for pid=12588 comm="syz.1.3403" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 191.108040][ T29] audit: type=1400 audit(1738207754.409:24923): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.133857][ T29] audit: type=1400 audit(1738207754.419:24924): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.159482][ T29] audit: type=1400 audit(1738207754.479:24925): avc: denied { execmem } for pid=12597 comm="syz.8.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 191.178931][ T29] audit: type=1400 audit(1738207754.499:24926): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.199136][ T29] audit: type=1400 audit(1738207754.499:24927): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.225240][ T29] audit: type=1400 audit(1738207754.499:24928): avc: denied { recv } for pid=3288 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 191.251914][ T29] audit: type=1400 audit(1738207754.509:24929): avc: denied { unmount } for pid=7712 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 191.253416][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.286314][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.750873][T12612] loop0: detected capacity change from 0 to 2048 [ 191.795361][T12613] loop9: detected capacity change from 0 to 2048 [ 191.836734][T12613] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.975235][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.006709][T12612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.023520][T12620] loop7: detected capacity change from 0 to 128 [ 192.067709][T12620] syz.7.3413: attempt to access beyond end of device [ 192.067709][T12620] loop7: rw=0, sector=121, nr_sectors = 920 limit=128 [ 192.318905][T12624] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.424628][T12634] loop0: detected capacity change from 0 to 512 [ 192.444204][T12634] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.463520][T12634] EXT4-fs (loop0): 1 truncate cleaned up [ 192.482343][T12634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.541618][T12636] lo speed is unknown, defaulting to 1000 [ 192.563238][T12636] sit0 speed is unknown, defaulting to 1000 [ 192.600246][T10228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.397617][T12663] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 193.461749][T12663] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.619237][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3431'. [ 193.628345][T12667] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3431'. [ 193.630492][T12668] loop9: detected capacity change from 0 to 512 [ 193.645527][T12667] veth3: entered promiscuous mode [ 193.648264][T12668] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 193.650583][T12667] veth3: entered allmulticast mode [ 193.667693][T12668] EXT4-fs (loop9): 1 truncate cleaned up [ 193.674609][T12668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.725875][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.859828][T12680] loop1: detected capacity change from 0 to 2048 [ 193.937039][T12687] netlink: 'syz.0.3439': attribute type 10 has an invalid length. [ 193.944995][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3439'. [ 193.958954][T12687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.967735][T12687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.976523][T12687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.985407][T12687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.996151][T12687] team0: Port device geneve1 added [ 194.071570][T12691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12691 comm=syz.0.3440 [ 194.084349][T12691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12691 comm=syz.0.3440 [ 194.249618][T12703] loop0: detected capacity change from 0 to 1024 [ 194.258673][T12703] EXT4-fs: Ignoring removed orlov option [ 194.264541][T12703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.306304][T12703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.339330][T10228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.587765][T12723] loop0: detected capacity change from 0 to 2048 [ 194.617215][T12723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.670902][T10228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.753882][T12733] loop0: detected capacity change from 0 to 2048 [ 194.985003][T12743] loop9: detected capacity change from 0 to 2048 [ 194.986846][T12744] loop1: detected capacity change from 0 to 512 [ 195.026410][T12744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 195.044621][T12743] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.065698][T12744] EXT4-fs (loop1): 1 truncate cleaned up [ 195.071769][T12744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.113961][T12743] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 195.126249][T12743] EXT4-fs (loop9): This should not happen!! Data will be lost [ 195.126249][T12743] [ 195.135931][T12743] EXT4-fs (loop9): Total free blocks count 0 [ 195.141960][T12743] EXT4-fs (loop9): Free/Dirty block details [ 195.147866][T12743] EXT4-fs (loop9): free_blocks=0 [ 195.152876][T12743] EXT4-fs (loop9): dirty_blocks=0 [ 195.158009][T12743] EXT4-fs (loop9): Block reservation details [ 195.164051][T12743] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 195.175044][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.222621][T12756] loop1: detected capacity change from 0 to 512 [ 195.248870][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.261559][T12756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.274612][T12756] ext4 filesystem being mounted at /702/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.346801][T12763] loop7: detected capacity change from 0 to 2048 [ 195.744107][T12782] Invalid ELF header magic: != ELF [ 196.091327][ T29] kauditd_printk_skb: 1738 callbacks suppressed [ 196.091355][ T29] audit: type=1400 audit(1738207759.489:26668): avc: denied { recv } for pid=3299 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 196.093843][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.097683][ T29] audit: type=1400 audit(1738207759.489:26669): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 196.160437][ T29] audit: type=1400 audit(1738207759.499:26670): avc: denied { recv } for pid=50 comm="kworker/u8:3" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 196.185979][ T29] audit: type=1400 audit(1738207759.539:26671): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.211333][ T29] audit: type=1400 audit(1738207759.539:26672): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.235831][ T29] audit: type=1400 audit(1738207759.539:26673): avc: denied { ioctl } for pid=3299 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 196.240320][T12791] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 196.261862][ T29] audit: type=1400 audit(1738207759.559:26674): avc: denied { create } for pid=12786 comm="syz.1.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.267952][T12791] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 196.268222][T12791] vhci_hcd vhci_hcd.0: Device attached [ 196.287628][ T29] audit: type=1400 audit(1738207759.559:26675): avc: denied { prog_load } for pid=12786 comm="syz.1.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.319933][ T29] audit: type=1400 audit(1738207759.559:26676): avc: denied { bpf } for pid=12786 comm="syz.1.3474" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 196.340967][ T29] audit: type=1400 audit(1738207759.559:26677): avc: denied { setopt } for pid=12786 comm="syz.1.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 196.396465][T12796] loop0: detected capacity change from 0 to 512 [ 196.408332][T12791] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(5) [ 196.414876][T12791] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 196.422594][T12791] vhci_hcd vhci_hcd.0: Device attached [ 196.442024][T12798] vhci_hcd: connection closed [ 196.442565][T12793] vhci_hcd: connection closed [ 196.448521][ T50] vhci_hcd: stop threads [ 196.457726][ T50] vhci_hcd: release socket [ 196.462225][ T50] vhci_hcd: disconnect device [ 196.469876][ T50] vhci_hcd: stop threads [ 196.474211][ T50] vhci_hcd: release socket [ 196.478746][ T50] vhci_hcd: disconnect device [ 196.483547][ T3534] vhci_hcd: vhci_device speed not set [ 196.497934][T12796] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.513541][T12796] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.603399][T10228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.688338][T12811] lo speed is unknown, defaulting to 1000 [ 196.694880][T12811] sit0 speed is unknown, defaulting to 1000 [ 196.769963][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3484'. [ 196.874078][T12822] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.925184][T12822] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.075055][T12822] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.133554][T12822] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.178152][T12822] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.189087][T12822] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.201011][T12822] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.212549][T12822] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.884211][T12837] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.298927][T12838] lo speed is unknown, defaulting to 1000 [ 198.315810][T12838] sit0 speed is unknown, defaulting to 1000 [ 198.535738][T12838] chnl_net:caif_netlink_parms(): no params data found [ 198.645673][T12838] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.652978][T12838] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.692032][T12838] bridge_slave_0: entered allmulticast mode [ 198.699492][T12838] bridge_slave_0: entered promiscuous mode [ 198.706507][T12887] netlink: 14568 bytes leftover after parsing attributes in process `syz.7.3504'. [ 198.726349][T12838] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.733608][T12838] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.758283][T12838] bridge_slave_1: entered allmulticast mode [ 198.779710][T12838] bridge_slave_1: entered promiscuous mode [ 198.820339][T12838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.843927][T12838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.876499][T12838] team0: Port device team_slave_0 added [ 198.888100][T12838] team0: Port device team_slave_1 added [ 198.924218][T12894] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 198.936309][T12838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.943446][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.969443][T12838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.015732][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3502'. [ 199.024886][T12838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.031892][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.057902][T12838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.104204][T12896] vlan0: entered allmulticast mode [ 199.109355][T12896] syz_tun: entered allmulticast mode [ 199.116296][T12896] syz_tun: left allmulticast mode [ 199.144669][T12838] hsr_slave_0: entered promiscuous mode [ 199.159354][T12838] hsr_slave_1: entered promiscuous mode [ 199.183019][T12838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.213000][T12838] Cannot create hsr debugfs directory [ 199.340016][T12908] loop9: detected capacity change from 0 to 512 [ 199.359118][T12908] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.365285][T12909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.365611][T12908] EXT4-fs: Ignoring removed bh option [ 199.380717][T12908] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 199.430409][T12838] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.443223][T12908] EXT4-fs (loop9): 1 truncate cleaned up [ 199.449309][T12908] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.473108][T12838] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.528274][T12838] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.545094][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.593248][T12838] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.676706][T12916] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.693751][T12838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.708862][T12838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.736597][T12838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.751112][T12838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.800466][T12924] loop9: detected capacity change from 0 to 1024 [ 199.836538][T12924] EXT4-fs: Ignoring removed orlov option [ 199.842359][T12924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.860382][T12923] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.917113][T12924] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.961095][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.985354][T12838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.034543][T12930] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.042809][T12930] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.051070][T12930] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.059709][T12930] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.071224][T12930] vxlan0: entered promiscuous mode [ 200.076436][T12930] vxlan0: entered allmulticast mode [ 200.083131][T12930] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.091505][T12930] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.100045][T12930] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.108464][T12930] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.127105][T12838] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.152921][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.160127][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.180984][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.188334][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.294893][T12838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.394105][T12953] loop9: detected capacity change from 0 to 128 [ 200.418349][T12953] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.434769][T12953] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.544055][T10034] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.568217][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3529'. [ 200.639004][T12838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.669349][T12968] loop9: detected capacity change from 0 to 256 [ 200.682483][T12968] msdos: Unknown parameter '"' [ 200.917760][T12838] veth0_vlan: entered promiscuous mode [ 200.928713][T12838] veth1_vlan: entered promiscuous mode [ 200.956813][T12838] veth0_macvtap: entered promiscuous mode [ 200.968810][T12838] veth1_macvtap: entered promiscuous mode [ 200.979622][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.990251][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.000190][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.010832][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.020892][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.031479][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.043097][T12838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.057413][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.067970][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.077927][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.088455][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.098368][T12838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.108886][T12838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.119373][ T29] kauditd_printk_skb: 1225 callbacks suppressed [ 201.119386][ T29] audit: type=1400 audit(1738207764.529:27903): avc: denied { recv } for pid=12838 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 201.153456][ T29] audit: type=1400 audit(1738207764.529:27904): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 201.178573][ T29] audit: type=1400 audit(1738207764.529:27905): avc: denied { map_create } for pid=12984 comm="syz.8.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.198035][ T29] audit: type=1400 audit(1738207764.529:27906): avc: denied { bpf } for pid=12984 comm="syz.8.3535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.218798][ T29] audit: type=1400 audit(1738207764.529:27907): avc: denied { map_read map_write } for pid=12984 comm="syz.8.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.225374][T12838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.238935][ T29] audit: type=1400 audit(1738207764.529:27908): avc: denied { prog_load } for pid=12984 comm="syz.8.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.238966][ T29] audit: type=1400 audit(1738207764.529:27909): avc: denied { bpf } for pid=12984 comm="syz.8.3535" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.258664][T12838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.265458][ T29] audit: type=1400 audit(1738207764.559:27910): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 201.265500][ T29] audit: type=1400 audit(1738207764.559:27911): avc: denied { recv } for pid=29 comm="kauditd" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 201.286171][T12838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.346109][ T29] audit: type=1400 audit(1738207764.559:27912): avc: denied { prog_load } for pid=12984 comm="syz.8.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 201.353758][T12838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.381836][T12838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.394827][T12992] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 201.401362][T12992] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.408934][T12989] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 201.415539][T12989] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 201.423029][T12992] vhci_hcd vhci_hcd.0: Device attached [ 201.423206][T12989] vhci_hcd vhci_hcd.0: Device attached [ 201.477973][T12995] vhci_hcd: connection closed [ 201.478560][T12990] vhci_hcd: connection closed [ 201.485835][ T4031] vhci_hcd: stop threads [ 201.494984][ T4031] vhci_hcd: release socket [ 201.499411][ T4031] vhci_hcd: disconnect device [ 201.515310][ T4031] vhci_hcd: stop threads [ 201.519626][ T4031] vhci_hcd: release socket [ 201.524086][ T4031] vhci_hcd: disconnect device [ 201.568022][T12998] loop9: detected capacity change from 0 to 512 [ 201.577784][T12998] EXT4-fs: Ignoring removed i_version option [ 201.583868][T12998] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.595927][T12998] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 201.626926][T12998] EXT4-fs (loop9): 1 truncate cleaned up [ 201.642214][T12998] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.696183][T12998] EXT4-fs error (device loop9): ext4_check_all_de:656: inode #12: block 7: comm syz.9.3537: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=124 fake=0 [ 201.735681][T12998] EXT4-fs error (device loop9): ext4_check_all_de:656: inode #12: block 7: comm syz.9.3537: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=124 fake=0 [ 201.787142][T10034] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.831272][T13011] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.240780][T13030] netlink: 'syz.8.3544': attribute type 4 has an invalid length. [ 202.248626][T13030] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3544'. [ 202.540190][T13035] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13035 comm=syz.0.3550 [ 202.623912][T13039] pim6reg1: entered promiscuous mode [ 202.629261][T13039] pim6reg1: entered allmulticast mode [ 202.699025][T13046] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 202.844644][T13054] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 202.853729][T13054] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 203.079091][T13062] syzkaller0: entered promiscuous mode [ 203.084621][T13062] syzkaller0: entered allmulticast mode [ 203.317115][T13068] loop0: detected capacity change from 0 to 256 [ 203.326588][T13068] FAT-fs (loop0): bogus sectors per cluster 30 [ 203.332862][T13068] FAT-fs (loop0): Can't find a valid FAT filesystem [ 203.344793][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3563'. [ 203.369433][T13011] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.710786][T13086] syzkaller0: entered promiscuous mode [ 203.716371][T13086] syzkaller0: entered allmulticast mode [ 204.036514][T13099] lo speed is unknown, defaulting to 1000 [ 204.052568][T13099] sit0 speed is unknown, defaulting to 1000 [ 204.403336][T13095] lo speed is unknown, defaulting to 1000 [ 204.413891][T13095] sit0 speed is unknown, defaulting to 1000 [ 204.438650][T13115] ip6gre3: entered allmulticast mode [ 204.467056][T13011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.528475][T13011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.588488][T13119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13119 comm=syz.7.3583 [ 204.620895][T13011] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.645550][T13011] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.667560][T13011] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.681899][T13011] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.755149][T13127] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 204.764173][T13127] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 204.784893][T13095] chnl_net:caif_netlink_parms(): no params data found [ 204.822105][T13126] loop7: detected capacity change from 0 to 1024 [ 204.875171][T13095] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.882327][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.890415][T13095] bridge_slave_0: entered allmulticast mode [ 204.890757][T13126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.897187][T13095] bridge_slave_0: entered promiscuous mode [ 204.917274][T13095] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.924579][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.932421][T13095] bridge_slave_1: entered allmulticast mode [ 204.938993][T13095] bridge_slave_1: entered promiscuous mode [ 204.952440][T13126] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.973904][T13095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.987095][T13095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.033904][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.047363][T13095] team0: Port device team_slave_0 added [ 205.068040][T13095] team0: Port device team_slave_1 added [ 205.125170][T13141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3591'. [ 205.125559][T13095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.134207][T13141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 205.150200][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.176142][T13095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.212274][T13095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.219295][T13095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.245284][T13095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.278764][T13144] SELinux: Context : is not valid (left unmapped). [ 205.334299][T13095] hsr_slave_0: entered promiscuous mode [ 205.340510][T13095] hsr_slave_1: entered promiscuous mode [ 205.357959][T13095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.372088][T13095] Cannot create hsr debugfs directory [ 205.410001][T13154] loop7: detected capacity change from 0 to 512 [ 205.427021][T13154] EXT4-fs: Ignoring removed nobh option [ 205.444800][T13154] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.477894][T13154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.497539][T13154] ext4 filesystem being mounted at /387/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.567100][T13154] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 205.623233][T13138] lo speed is unknown, defaulting to 1000 [ 205.634438][T13138] sit0 speed is unknown, defaulting to 1000 [ 205.707432][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.736777][T13095] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.785166][T13168] netlink: 'syz.7.3598': attribute type 21 has an invalid length. [ 205.793040][T13168] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3598'. [ 205.819594][T13095] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.888016][T13095] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.905909][T13171] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 205.986891][T13095] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.002766][T13138] chnl_net:caif_netlink_parms(): no params data found [ 206.085950][T13138] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.093127][T13138] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.112089][T13138] bridge_slave_0: entered allmulticast mode [ 206.118647][T13138] bridge_slave_0: entered promiscuous mode [ 206.134846][ T29] kauditd_printk_skb: 1403 callbacks suppressed [ 206.134862][ T29] audit: type=1400 audit(1738207769.539:29316): avc: denied { mounton } for pid=13183 comm="+}[@" path="/390/file0" dev="tmpfs" ino=2105 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 206.142666][T13138] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.170712][T13138] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.176662][T13186] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13186 comm=syz.1.3603 [ 206.183559][T13138] bridge_slave_1: entered allmulticast mode [ 206.197046][T13138] bridge_slave_1: entered promiscuous mode [ 206.204017][T13095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.212533][ T29] audit: type=1400 audit(1738207769.569:29317): avc: denied { recv } for pid=39 comm="kworker/u8:2" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 206.238003][ T29] audit: type=1400 audit(1738207769.569:29318): avc: denied { recv } for pid=39 comm="kworker/u8:2" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 206.263480][ T29] audit: type=1400 audit(1738207769.569:29319): avc: denied { create } for pid=13185 comm="syz.1.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 206.283220][ T29] audit: type=1400 audit(1738207769.579:29320): avc: denied { create } for pid=13095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.304625][ T29] audit: type=1400 audit(1738207769.579:29321): avc: denied { write } for pid=13095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.325461][ T29] audit: type=1400 audit(1738207769.579:29322): avc: denied { read } for pid=13095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.346069][ T29] audit: type=1400 audit(1738207769.579:29323): avc: denied { write } for pid=13095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 206.366801][ T29] audit: type=1400 audit(1738207769.599:29325): avc: denied { recv } for pid=13187 comm="syz.8.3605" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 206.392847][ T29] audit: type=1400 audit(1738207769.599:29324): avc: denied { create } for pid=13187 comm="syz.8.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 206.417165][T13095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.445015][T13095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.472059][T13138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.482249][T13095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.511601][T13138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.572809][T13138] team0: Port device team_slave_0 added [ 206.584208][T13138] team0: Port device team_slave_1 added [ 206.641182][T13138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.648312][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.674306][T13138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.695733][T13201] netlink: 'syz.7.3608': attribute type 10 has an invalid length. [ 206.709776][T13203] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 206.718837][T13203] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 206.728710][T13201] geneve1: entered promiscuous mode [ 206.735947][T13201] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.744236][T13201] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.752478][T13201] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.760662][T13201] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.770535][T13201] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 206.783593][T13138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.790569][T13138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.816594][T13138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.882057][T13200] syzkaller0: entered promiscuous mode [ 206.887569][T13200] syzkaller0: entered allmulticast mode [ 206.930865][T13208] wg2: entered promiscuous mode [ 206.935921][T13208] wg2: entered allmulticast mode [ 207.011346][T13138] hsr_slave_0: entered promiscuous mode [ 207.028408][T13138] hsr_slave_1: entered promiscuous mode [ 207.036987][T13138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.044595][T13138] Cannot create hsr debugfs directory [ 207.140017][T13095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.197151][T13223] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13223 comm=syz.8.3614 [ 207.210149][T13095] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.238243][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.245355][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.297443][ T4029] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.304807][ T4029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.350354][T13226] xt_connbytes: Forcing CT accounting to be enabled [ 207.359173][T13226] Cannot find add_set index 0 as target [ 207.479727][T13234] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3616'. [ 207.488906][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3616'. [ 207.587293][T13138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.620079][T13138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.656300][T13138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.680646][T13138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.771202][T13095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.018829][T13138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.105098][T13138] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.157994][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.165162][ T4031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.212658][T13264] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 208.221605][T13264] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 208.234218][ T4031] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.241308][ T4031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.357317][T13095] veth0_vlan: entered promiscuous mode [ 208.400677][T13095] veth1_vlan: entered promiscuous mode [ 208.527200][T13095] veth0_macvtap: entered promiscuous mode [ 208.549581][T13095] veth1_macvtap: entered promiscuous mode [ 208.575472][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.586002][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.595911][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.606375][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.616260][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.626765][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.636630][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.647136][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.692983][T13095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.746055][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.756568][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.766536][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.777070][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.787002][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.797479][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.807373][T13095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.817840][T13095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.841989][T13095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.890141][T13095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.898977][T13095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.907761][T13095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.916516][T13095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.041843][T13138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.393446][T13312] lo speed is unknown, defaulting to 1000 [ 209.399670][T13312] sit0 speed is unknown, defaulting to 1000 [ 209.535133][T13326] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.537663][T13328] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13328 comm=syz.2.3625 [ 209.705017][T13326] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.805466][T13326] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.903307][T13326] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.057862][T13326] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.125482][T13326] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.195708][T13326] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.255082][T13326] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.613119][T13356] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.149765][ T29] kauditd_printk_skb: 2122 callbacks suppressed [ 211.149783][ T29] audit: type=1400 audit(1738207774.549:31448): avc: denied { read } for pid=13372 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.178139][ T29] audit: type=1400 audit(1738207774.549:31449): avc: denied { read open } for pid=13372 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.203641][ T29] audit: type=1400 audit(1738207774.549:31450): avc: denied { getattr } for pid=13372 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=442 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 211.283362][T13356] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.442548][T13356] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.448718][ T29] audit: type=1400 audit(1738207774.639:31451): avc: denied { prog_load } for pid=13373 comm="syz.2.3635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.471634][ T29] audit: type=1400 audit(1738207774.639:31452): avc: denied { bpf } for pid=13373 comm="syz.2.3635" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.492650][ T29] audit: type=1400 audit(1738207774.659:31453): avc: denied { prog_load } for pid=13364 comm="syz.8.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.511897][ T29] audit: type=1400 audit(1738207774.659:31454): avc: denied { bpf } for pid=13364 comm="syz.8.3644" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.532747][ T29] audit: type=1400 audit(1738207774.659:31455): avc: denied { perfmon } for pid=13364 comm="syz.8.3644" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 211.553930][ T29] audit: type=1400 audit(1738207774.669:31456): avc: denied { map_create } for pid=13364 comm="syz.8.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.573625][ T29] audit: type=1400 audit(1738207774.669:31457): avc: denied { map_read map_write } for pid=13364 comm="syz.8.3644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 211.601022][T13138] veth0_vlan: entered promiscuous mode [ 211.705542][T13356] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.765929][T13138] veth1_vlan: entered promiscuous mode [ 211.797459][T13356] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.851040][T13356] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.885784][T13356] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.909996][T13390] loop1: detected capacity change from 0 to 128 [ 211.911874][T13356] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.024588][T13138] veth0_macvtap: entered promiscuous mode [ 212.034683][T13390] syz.1.3638: attempt to access beyond end of device [ 212.034683][T13390] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 212.066191][T13138] veth1_macvtap: entered promiscuous mode [ 212.147789][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.158471][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.168370][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.178870][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.188823][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.199791][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.201994][T13397] loop7: detected capacity change from 0 to 2048 [ 212.209833][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.227819][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.237838][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.248364][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.269597][T13397] EXT4-fs: Ignoring removed bh option [ 212.304512][T13138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.320953][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.331473][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.341333][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.351808][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.361628][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.372120][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.382033][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.392582][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.402446][T13138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.413381][T13138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.435124][T13138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.443941][T13397] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.462754][T13138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.471480][T13138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.480340][T13138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.489333][T13138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.590323][T13419] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 212.606890][T13415] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3643'. [ 212.628969][T13419] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 212.641731][T13419] EXT4-fs (loop7): This should not happen!! Data will be lost [ 212.641731][T13419] [ 212.644688][T13415] netlink: 'syz.8.3643': attribute type 10 has an invalid length. [ 212.651414][T13419] EXT4-fs (loop7): Total free blocks count 0 [ 212.665287][T13419] EXT4-fs (loop7): Free/Dirty block details [ 212.671281][T13419] EXT4-fs (loop7): free_blocks=2415919104 [ 212.677057][T13419] EXT4-fs (loop7): dirty_blocks=80 [ 212.682229][T13419] EXT4-fs (loop7): Block reservation details [ 212.688234][T13419] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 212.694325][ T3374] IPVS: starting estimator thread 0... [ 212.713337][T13425] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #12: comm syz.7.3639: corrupted in-inode xattr: e_name out of bounds [ 212.778038][T13415] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 212.787000][T13421] IPVS: using max 2304 ests per chain, 115200 per kthread [ 212.950553][ T4029] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 213.126963][T13450] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 213.403562][T13463] bond1: entered promiscuous mode [ 213.408675][T13463] bond1: entered allmulticast mode [ 213.414569][T13463] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.432179][T13463] bond1 (unregistering): Released all slaves [ 213.737984][T13480] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 213.803570][T13485] loop1: detected capacity change from 0 to 2048 [ 213.828001][T13485] EXT4-fs: Ignoring removed bh option [ 213.878418][T13485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.909368][T13492] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 214.071741][T13502] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.098730][T13502] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 214.111094][T13502] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.111094][T13502] [ 214.115582][T13498] lo speed is unknown, defaulting to 1000 [ 214.120826][T13502] EXT4-fs (loop1): Total free blocks count 0 [ 214.132956][T13502] EXT4-fs (loop1): Free/Dirty block details [ 214.135046][T13504] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.3661: corrupted in-inode xattr: e_name out of bounds [ 214.138853][T13502] EXT4-fs (loop1): free_blocks=2415919104 [ 214.138871][T13502] EXT4-fs (loop1): dirty_blocks=48 [ 214.163713][T13502] EXT4-fs (loop1): Block reservation details [ 214.169790][T13502] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 214.177975][T13498] sit0 speed is unknown, defaulting to 1000 [ 214.233217][T13505] loop2: detected capacity change from 0 to 512 [ 214.364872][T13505] EXT4-fs (loop2): 1 truncate cleaned up [ 214.387233][T13505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.528496][ T4031] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 214.690663][T13522] tipc: Started in network mode [ 214.695625][T13522] tipc: Node identity 7ad424596f91, cluster identity 4711 [ 214.702895][T13522] tipc: Enabled bearer , priority 0 [ 214.737986][T13522] syzkaller0: entered promiscuous mode [ 214.743714][T13522] syzkaller0: entered allmulticast mode [ 214.788897][T13522] tipc: Resetting bearer [ 214.812306][T13520] tipc: Resetting bearer [ 214.834539][T13520] tipc: Disabling bearer [ 215.206146][T13538] wg2: entered promiscuous mode [ 215.211150][T13538] wg2: entered allmulticast mode [ 215.356883][T13095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.440605][T13552] loop1: detected capacity change from 0 to 512 [ 215.476842][T13552] EXT4-fs (loop1): orphan cleanup on readonly fs [ 215.483284][T13552] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 215.489358][T13561] loop4: detected capacity change from 0 to 256 [ 215.505757][T13552] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 215.559282][T13559] loop2: detected capacity change from 0 to 256 [ 215.575691][T13552] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3672: attempt to clear invalid blocks 2 len 1 [ 215.591944][T13561] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 215.662215][T13552] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3672: invalid indirect mapped block 1819239214 (level 0) [ 215.706302][T13552] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3672: invalid indirect mapped block 1819239214 (level 1) [ 215.766287][T13552] EXT4-fs (loop1): 1 truncate cleaned up [ 215.774282][T13552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 215.817289][T13574] loop2: detected capacity change from 0 to 2048 [ 215.836682][T13574] EXT4-fs: Ignoring removed bh option [ 215.843531][T13552] EXT4-fs: Ignoring removed orlov option [ 215.860542][T13552] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 215.881924][T13552] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.3672: Abort forced by user [ 215.898923][T13552] EXT4-fs (loop1): Remounting filesystem read-only [ 215.905524][T13552] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 215.924204][T13574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.977507][T13552] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3672'. [ 216.033929][T13592] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 216.053054][T12838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.055459][T13592] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 216.074641][T13592] EXT4-fs (loop2): This should not happen!! Data will be lost [ 216.074641][T13592] [ 216.084324][T13592] EXT4-fs (loop2): Total free blocks count 0 [ 216.090319][T13592] EXT4-fs (loop2): Free/Dirty block details [ 216.096468][T13592] EXT4-fs (loop2): free_blocks=2415919104 [ 216.102235][T13592] EXT4-fs (loop2): dirty_blocks=80 [ 216.107378][T13592] EXT4-fs (loop2): Block reservation details [ 216.113452][T13592] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 216.171088][ T29] kauditd_printk_skb: 2309 callbacks suppressed [ 216.171124][ T29] audit: type=1400 audit(1738207779.569:33767): avc: denied { search } for pid=13597 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.179999][T13574] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #12: comm syz.2.3676: corrupted in-inode xattr: e_name out of bounds [ 216.208074][T13599] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3679'. [ 216.243944][ T29] audit: type=1400 audit(1738207779.579:33768): avc: denied { create } for pid=13573 comm="syz.2.3676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 216.264634][ T29] audit: type=1400 audit(1738207779.629:33769): avc: denied { read write } for pid=7712 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.288966][ T29] audit: type=1400 audit(1738207779.629:33770): avc: denied { open } for pid=7712 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.313243][ T29] audit: type=1400 audit(1738207779.629:33771): avc: denied { ioctl } for pid=7712 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 216.339049][ T29] audit: type=1400 audit(1738207779.639:33772): avc: denied { recv } for pid=13573 comm="syz.2.3676" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 216.364618][ T29] audit: type=1400 audit(1738207779.639:33773): avc: denied { recv } for pid=13573 comm="syz.2.3676" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 216.390438][ T29] audit: type=1400 audit(1738207779.639:33774): avc: denied { map_create } for pid=13600 comm="syz.1.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.409891][ T29] audit: type=1400 audit(1738207779.639:33775): avc: denied { perfmon } for pid=13600 comm="syz.1.3680" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 216.431161][ T29] audit: type=1400 audit(1738207779.639:33776): avc: denied { map_read map_write } for pid=13600 comm="syz.1.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 216.479386][ T50] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 216.595909][T13620] loop7: detected capacity change from 0 to 128 [ 216.661713][T13620] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.698794][T13621] wg2: entered promiscuous mode [ 216.703841][T13621] wg2: entered allmulticast mode [ 216.707551][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3684'. [ 216.724263][T13620] ext4 filesystem being mounted at /410/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 216.923457][ T7712] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.976872][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 217.457196][T13660] SELinux: Context system_u: is not valid (left unmapped). [ 217.484514][ T3534] IPVS: starting estimator thread 0... [ 217.572019][T13673] IPVS: using max 2304 ests per chain, 115200 per kthread [ 217.668826][T13682] netlink: 'syz.8.3698': attribute type 27 has an invalid length. [ 217.711910][T13690] netlink: 'syz.4.3700': attribute type 1 has an invalid length. [ 217.816786][T13682] geneve0: left allmulticast mode [ 217.824441][T13682] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.832976][T13682] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.841346][T13682] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.849860][T13682] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.859414][T13682] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.867870][T13682] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.876304][T13682] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.884848][T13682] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.893745][T13682] vxlan0: left promiscuous mode [ 217.899277][T13682] vlan2: left promiscuous mode [ 217.904481][T13682] veth3: left promiscuous mode [ 217.909268][T13682] veth3: left allmulticast mode [ 217.938567][T13692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.951246][T13692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.982805][T13696] veth3: entered promiscuous mode [ 218.125552][T13702] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.206278][T13702] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.278161][T13709] lo speed is unknown, defaulting to 1000 [ 218.470748][T13702] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.525051][T13709] sit0 speed is unknown, defaulting to 1000 [ 218.612943][T13702] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.637238][T13736] loop2: detected capacity change from 0 to 512 [ 218.681521][T13736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.703867][T13736] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.720578][T13702] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.739495][T13702] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.751468][T13702] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.763469][T13702] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.945637][T13095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.095464][T13751] loop2: detected capacity change from 0 to 2048 [ 219.148450][T13751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.166829][T13760] pim6reg1: entered promiscuous mode [ 219.172361][T13760] pim6reg1: entered allmulticast mode [ 219.421400][T13095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.593008][T13780] netlink: 'syz.2.3715': attribute type 27 has an invalid length. [ 219.611033][T13742] loop7: detected capacity change from 0 to 2048 [ 219.675642][T13742] loop7: p3 < > p4 < > [ 219.679839][T13742] loop7: partition table partially beyond EOD, truncated [ 219.703734][T13742] loop7: p3 start 4284289 is beyond EOD, truncated [ 219.730080][T13780] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.737350][T13780] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.814178][T13780] wg2: left promiscuous mode [ 219.818851][T13780] wg2: left allmulticast mode [ 219.886514][T13780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.897413][T13780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.950405][T13780] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.959462][T13780] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.968439][T13780] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.977481][T13780] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.087625][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.133762][T13789] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.152750][T13789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 220.630468][T13835] loop7: detected capacity change from 0 to 512 [ 220.677705][T13835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.681184][T13831] tipc: Started in network mode [ 220.695669][T13831] tipc: Node identity 8a16894b5212, cluster identity 4711 [ 220.703065][T13831] tipc: Enabled bearer , priority 0 [ 220.712970][T13835] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.739384][T13830] tipc: Resetting bearer [ 220.799479][T13830] tipc: Disabling bearer [ 221.094367][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.179372][ T29] kauditd_printk_skb: 3118 callbacks suppressed [ 221.179390][ T29] audit: type=1400 audit(1738207784.579:36661): avc: denied { recv } for pid=13867 comm="syz-executor" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 221.284412][ T29] audit: type=1400 audit(1738207784.589:36662): avc: denied { search } for pid=13866 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.305720][ T29] audit: type=1400 audit(1738207784.589:36663): avc: denied { getattr } for pid=13866 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth1.dhcp" dev="tmpfs" ino=5713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.331090][ T29] audit: type=1400 audit(1738207784.589:36664): avc: denied { search } for pid=13866 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.352337][ T29] audit: type=1400 audit(1738207784.589:36665): avc: denied { write } for pid=13866 comm="rm" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.374374][ T29] audit: type=1400 audit(1738207784.589:36666): avc: denied { remove_name } for pid=13866 comm="rm" name="resolv.conf.eth1.dhcp" dev="tmpfs" ino=5713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.398017][ T29] audit: type=1400 audit(1738207784.589:36667): avc: denied { unlink } for pid=13866 comm="rm" name="resolv.conf.eth1.dhcp" dev="tmpfs" ino=5713 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 221.421318][ T29] audit: type=1400 audit(1738207784.619:36668): avc: denied { create } for pid=13867 comm="syz.7.3723" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 221.442948][ T29] audit: type=1400 audit(1738207784.619:36669): avc: denied { recv } for pid=13850 comm="syz.1.3733" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 221.468522][ T29] audit: type=1400 audit(1738207784.659:36670): avc: denied { search } for pid=13868 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 221.683261][T13882] netlink: 'syz.8.3727': attribute type 1 has an invalid length. [ 221.710458][T13882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 221.741822][T13882] veth5: entered promiscuous mode [ 221.755169][T13882] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 221.782477][T13885] tipc: Enabled bearer , priority 0 [ 221.790344][T13885] syzkaller0: entered promiscuous mode [ 221.795909][T13885] syzkaller0: entered allmulticast mode [ 221.814994][T13885] tipc: Resetting bearer [ 221.822346][T13884] tipc: Resetting bearer [ 221.833742][T13884] tipc: Disabling bearer [ 221.956769][T13891] netlink: 'syz.7.3732': attribute type 16 has an invalid length. [ 221.964724][T13891] netlink: 'syz.7.3732': attribute type 17 has an invalid length. [ 222.004489][T13891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.014165][T13891] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.038959][T13891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.167066][T13903] loop7: detected capacity change from 0 to 2048 [ 222.211941][T13903] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.348221][ T7712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.600232][T13927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3749'. [ 223.294105][T13960] loop4: detected capacity change from 0 to 512 [ 223.339682][T13960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.375259][T13960] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 223.435995][T13138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.569254][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 223.581372][T13973] veth1_macvtap: left promiscuous mode [ 223.607902][T13975] loop4: detected capacity change from 0 to 512 [ 223.645448][T13975] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.667208][T13975] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.761389][T13138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.799357][T13988] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.834788][T13989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.856629][T13988] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.893353][T13988] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.943501][T13988] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.010946][T13988] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.035567][T13988] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.059657][T13988] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.083390][T13988] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.895391][T14007] loop4: detected capacity change from 0 to 2048 [ 224.944868][T14007] loop4: p3 < > p4 < > [ 224.949074][T14007] loop4: partition table partially beyond EOD, truncated [ 224.967985][T14007] loop4: p3 start 4284289 is beyond EOD, truncated [ 225.144833][T14033] lo speed is unknown, defaulting to 1000 [ 225.150920][T14033] sit0 speed is unknown, defaulting to 1000 [ 225.815650][T14048] lo speed is unknown, defaulting to 1000 [ 225.832521][T14048] sit0 speed is unknown, defaulting to 1000 [ 225.928565][T14053] loop2: detected capacity change from 0 to 2048 [ 226.141834][T14063] bond0: (slave dummy0): Releasing backup interface [ 226.162445][T14063] bond3: (slave veth5): Releasing backup interface [ 226.191745][ T29] kauditd_printk_skb: 2003 callbacks suppressed [ 226.198071][ T29] audit: type=1400 audit(1738207789.589:38674): avc: denied { recv } for pid=14068 comm="modprobe" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 226.223442][ T29] audit: type=1400 audit(1738207789.589:38675): avc: denied { create } for pid=14062 comm="syz.8.3795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.250191][ T29] audit: type=1400 audit(1738207789.589:38676): avc: denied { recv } for pid=14068 comm="modprobe" saddr=10.128.0.163 src=30030 daddr=10.128.0.48 dest=47810 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 226.275579][ T29] audit: type=1400 audit(1738207789.609:38677): avc: denied { mount } for pid=14065 comm="syz.1.3799" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 226.297879][ T29] audit: type=1400 audit(1738207789.619:38678): avc: denied { prog_load } for pid=14065 comm="syz.1.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 226.317244][ T29] audit: type=1400 audit(1738207789.619:38679): avc: denied { bpf } for pid=14065 comm="syz.1.3799" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.338021][ T29] audit: type=1400 audit(1738207789.619:38680): avc: denied { perfmon } for pid=14065 comm="syz.1.3799" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.359123][ T29] audit: type=1400 audit(1738207789.619:38681): avc: denied { prog_run } for pid=14065 comm="syz.1.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 226.378296][ T29] audit: type=1400 audit(1738207789.629:38682): avc: denied { prog_load } for pid=14065 comm="syz.1.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 226.397594][ T29] audit: type=1400 audit(1738207789.629:38683): avc: denied { bpf } for pid=14065 comm="syz.1.3799" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 226.894008][ T1043] IPVS: starting estimator thread 0... [ 226.900220][T14094] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 226.982124][T14099] IPVS: using max 2352 ests per chain, 117600 per kthread [ 227.310939][T14108] lo speed is unknown, defaulting to 1000 [ 227.325564][T14108] sit0 speed is unknown, defaulting to 1000 [ 227.345472][T14111] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 227.368645][T14111] netlink: 'syz.4.3814': attribute type 4 has an invalid length. [ 227.868530][T14134] lo speed is unknown, defaulting to 1000 [ 227.883408][T14134] sit0 speed is unknown, defaulting to 1000 [ 228.948298][T14163] loop2: detected capacity change from 0 to 512 [ 228.984890][T14163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 229.049246][T14163] EXT4-fs (loop2): 1 truncate cleaned up [ 229.075527][T14163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.183611][T14163] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.2.3835: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=17, rec_len=3657, size=1024 fake=0 [ 229.279525][T13095] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.397031][T14177] netlink: 'syz.2.3838': attribute type 27 has an invalid length. [ 229.623223][T14177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.637523][T14177] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.699380][T14177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.773140][T14190] netlink: 'syz.1.3842': attribute type 4 has an invalid length. [ 230.103051][T14199] $Hÿ: renamed from bond0 (while UP) [ 230.123235][T14199] $Hÿ: entered promiscuous mode [ 230.128429][T14199] bond_slave_0: entered promiscuous mode [ 230.134407][T14199] bond_slave_1: entered promiscuous mode [ 230.194586][T14201] lo speed is unknown, defaulting to 1000 [ 230.250745][T14204] lo speed is unknown, defaulting to 1000 [ 230.250955][T14201] sit0 speed is unknown, defaulting to 1000 [ 230.351293][T14204] sit0 speed is unknown, defaulting to 1000 [ 230.872802][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3855'. [ 230.943098][T14238] vlan0: entered allmulticast mode [ 230.948764][T14238] $Hÿ: entered allmulticast mode [ 230.954078][T14238] bond_slave_0: entered allmulticast mode [ 230.959832][T14238] bond_slave_1: entered allmulticast mode [ 230.985689][T14238] $Hÿ: left allmulticast mode [ 230.990633][T14238] bond_slave_0: left allmulticast mode [ 230.996362][T14238] bond_slave_1: left allmulticast mode [ 231.109133][T14243] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 231.117563][T14243] ref_ctr increment failed for inode: 0x177 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888104451a40 [ 231.187784][T14249] syzkaller0: entered allmulticast mode [ 231.203891][ T29] kauditd_printk_skb: 1809 callbacks suppressed [ 231.203907][ T29] audit: type=1326 audit(1738207794.609:40493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14240 comm="syz.8.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f047e80cda9 code=0x7ffc0000 [ 231.233830][ T29] audit: type=1400 audit(1738207794.609:40494): avc: denied { map_create } for pid=14240 comm="syz.8.3860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.253314][ T29] audit: type=1400 audit(1738207794.609:40495): avc: denied { bpf } for pid=14240 comm="syz.8.3860" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.314547][ T29] audit: type=1400 audit(1738207794.609:40496): avc: denied { create } for pid=14251 comm="syz.7.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.334516][ T29] audit: type=1400 audit(1738207794.609:40497): avc: denied { prog_load } for pid=14251 comm="syz.7.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.353837][ T29] audit: type=1400 audit(1738207794.609:40498): avc: denied { bpf } for pid=14251 comm="syz.7.3863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.374674][ T29] audit: type=1400 audit(1738207794.609:40499): avc: denied { map_create } for pid=14251 comm="syz.7.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.394047][ T29] audit: type=1400 audit(1738207794.609:40500): avc: denied { map_read map_write } for pid=14251 comm="syz.7.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.414271][ T29] audit: type=1400 audit(1738207794.609:40501): avc: denied { prog_load } for pid=14251 comm="syz.7.3863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 231.433568][ T29] audit: type=1400 audit(1738207794.609:40502): avc: denied { bpf } for pid=14251 comm="syz.7.3863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 231.545912][T14261] lo speed is unknown, defaulting to 1000 [ 231.552331][T14261] sit0 speed is unknown, defaulting to 1000 [ 231.736741][T14268] netlink: 'syz.4.3869': attribute type 27 has an invalid length. [ 231.786979][T14268] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.794200][T14268] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.845429][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.855678][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.898477][T14268] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.907053][T14268] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.915732][T14268] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.924193][T14268] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.960588][T14276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.969183][T14276] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.978869][T14276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.270889][T14296] tipc: Enabling of bearer rejected, failed to enable media [ 232.303031][T14298] lo speed is unknown, defaulting to 1000 [ 232.310820][T14298] sit0 speed is unknown, defaulting to 1000 [ 232.431267][T14308] netlink: 'syz.1.3887': attribute type 27 has an invalid length. [ 232.515157][T14308] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.522448][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.553269][T14308] wg2: left promiscuous mode [ 232.557929][T14308] wg2: left allmulticast mode [ 232.653566][T14308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.690674][T14308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.756936][T14308] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.765389][T14308] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.773998][T14308] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.782620][T14308] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.843825][T14310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.873930][T14310] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.896339][T14310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 232.913339][T14314] pim6reg1: entered promiscuous mode [ 232.918679][T14314] pim6reg1: entered allmulticast mode [ 232.947009][T14322] ip6gretap0: entered promiscuous mode [ 232.952946][T14322] ip6gretap0: entered allmulticast mode [ 233.095204][T14328] cgroup: No subsys list or none specified [ 234.700206][T14357] lo speed is unknown, defaulting to 1000 [ 234.743026][T14357] sit0 speed is unknown, defaulting to 1000 [ 235.928533][T14406] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 236.093208][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3922'. [ 236.118881][T14416] team0 (unregistering): Port device team_slave_0 removed [ 236.134352][T14416] team0 (unregistering): Port device team_slave_1 removed [ 236.280738][ T29] kauditd_printk_skb: 1073 callbacks suppressed [ 236.280754][ T29] audit: type=1400 audit(1738470199.595:41576): avc: denied { map_create } for pid=14409 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 236.306440][ T29] audit: type=1400 audit(1738470199.595:41577): avc: denied { bpf } for pid=14409 comm="syz.1.3921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.327201][ T29] audit: type=1400 audit(1738470199.595:41578): avc: denied { map_read map_write } for pid=14409 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 236.347268][ T29] audit: type=1400 audit(1738470199.605:41579): avc: denied { prog_load } for pid=14409 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 236.366545][ T29] audit: type=1400 audit(1738470199.605:41580): avc: denied { bpf } for pid=14409 comm="syz.1.3921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.387455][ T29] audit: type=1400 audit(1738470199.605:41581): avc: denied { perfmon } for pid=14409 comm="syz.1.3921" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.408626][ T29] audit: type=1400 audit(1738470199.605:41582): avc: denied { bpf } for pid=14409 comm="syz.1.3921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 236.429420][ T29] audit: type=1400 audit(1738470199.605:41583): avc: denied { prog_run } for pid=14409 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 236.448638][ T29] audit: type=1400 audit(1738470199.615:41584): avc: denied { prog_load } for pid=14409 comm="syz.1.3921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 236.467912][ T29] audit: type=1400 audit(1738470199.615:41585): avc: denied { bpf } for pid=14409 comm="syz.1.3921" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.002064][T14494] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3947'. [ 238.132112][T14500] ================================================================== [ 238.140234][T14500] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 238.148154][T14500] [ 238.150490][T14500] write to 0xffff88811b77a2d0 of 8 bytes by task 14502 on cpu 0: [ 238.158211][T14500] cpu_map_kthread_run+0x4a1/0x11e0 [ 238.163422][T14500] kthread+0x4ae/0x520 [ 238.167506][T14500] ret_from_fork+0x4b/0x60 [ 238.171935][T14500] ret_from_fork_asm+0x1a/0x30 [ 238.176711][T14500] [ 238.179042][T14500] read to 0xffff88811b77a2d0 of 8 bytes by task 14500 on cpu 1: [ 238.186672][T14500] bq_flush_to_queue+0x125/0x360 [ 238.191629][T14500] cpu_map_enqueue+0x19e/0x1b0 [ 238.196396][T14500] xdp_do_redirect_frame+0x2a4/0x6b0 [ 238.201701][T14500] bpf_test_run_xdp_live+0x8c6/0x1040 [ 238.207093][T14500] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 238.212387][T14500] bpf_prog_test_run+0x20f/0x3a0 [ 238.217337][T14500] __sys_bpf+0x400/0x7a0 [ 238.221608][T14500] __x64_sys_bpf+0x43/0x50 [ 238.226038][T14500] x64_sys_call+0x2914/0x2dc0 [ 238.230727][T14500] do_syscall_64+0xc9/0x1c0 [ 238.235243][T14500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.241233][T14500] [ 238.243551][T14500] value changed: 0xffff88811470b070 -> 0x0000000000000000 [ 238.250653][T14500] [ 238.252973][T14500] Reported by Kernel Concurrency Sanitizer on: [ 238.259119][T14500] CPU: 1 UID: 0 PID: 14500 Comm: syz.8.3950 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 238.269537][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 238.279595][T14500] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 238.746466][ T50] bridge_slave_1: left allmulticast mode [ 238.752183][ T50] bridge_slave_1: left promiscuous mode [ 238.757888][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.765601][ T50] bridge_slave_0: left allmulticast mode [ 238.771253][ T50] bridge_slave_0: left promiscuous mode [ 238.777345][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.864765][ T50] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.873718][ T50] bond_slave_0: left promiscuous mode [ 238.879850][ T50] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.888692][ T50] bond_slave_1: left promiscuous mode [ 238.894519][ T50] $Hÿ (unregistering): Released all slaves [ 238.933099][ T50] tipc: Left network mode [ 238.957000][ T50] hsr_slave_0: left promiscuous mode [ 238.962870][ T50] hsr_slave_1: left promiscuous mode [ 238.968644][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.976228][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.012522][ T50] team0 (unregistering): Port device team_slave_1 removed [ 239.022324][ T50] team0 (unregistering): Port device team_slave_0 removed